Sep 13 01:08:48.000393 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Sep 12 23:13:49 -00 2025 Sep 13 01:08:48.000425 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=65d14b740db9e581daa1d0206188b16d2f1a39e5c5e0878b6855323cd7c584ec Sep 13 01:08:48.000440 kernel: BIOS-provided physical RAM map: Sep 13 01:08:48.000450 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 13 01:08:48.000459 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000786cdfff] usable Sep 13 01:08:48.000469 kernel: BIOS-e820: [mem 0x00000000786ce000-0x000000007894dfff] reserved Sep 13 01:08:48.000481 kernel: BIOS-e820: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Sep 13 01:08:48.000491 kernel: BIOS-e820: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Sep 13 01:08:48.000505 kernel: BIOS-e820: [mem 0x00000000789de000-0x000000007c97bfff] usable Sep 13 01:08:48.000515 kernel: BIOS-e820: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Sep 13 01:08:48.000525 kernel: NX (Execute Disable) protection: active Sep 13 01:08:48.000535 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Sep 13 01:08:48.000545 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable Sep 13 01:08:48.000555 kernel: extended physical RAM map: Sep 13 01:08:48.000571 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 13 01:08:48.000581 kernel: reserve setup_data: [mem 0x0000000000100000-0x0000000076813017] usable Sep 13 01:08:48.000592 kernel: reserve setup_data: [mem 0x0000000076813018-0x000000007681be57] usable Sep 13 01:08:48.000603 kernel: reserve setup_data: [mem 0x000000007681be58-0x00000000786cdfff] usable Sep 13 01:08:48.000614 kernel: reserve setup_data: [mem 0x00000000786ce000-0x000000007894dfff] reserved Sep 13 01:08:48.000626 kernel: reserve setup_data: [mem 0x000000007894e000-0x000000007895dfff] ACPI data Sep 13 01:08:48.000636 kernel: reserve setup_data: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS Sep 13 01:08:48.000647 kernel: reserve setup_data: [mem 0x00000000789de000-0x000000007c97bfff] usable Sep 13 01:08:48.000673 kernel: reserve setup_data: [mem 0x000000007c97c000-0x000000007c9fffff] reserved Sep 13 01:08:48.000684 kernel: efi: EFI v2.70 by EDK II Sep 13 01:08:48.000698 kernel: efi: SMBIOS=0x7886a000 ACPI=0x7895d000 ACPI 2.0=0x7895d014 MEMATTR=0x77004a98 Sep 13 01:08:48.000709 kernel: SMBIOS 2.7 present. Sep 13 01:08:48.000719 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Sep 13 01:08:48.000730 kernel: Hypervisor detected: KVM Sep 13 01:08:48.000741 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Sep 13 01:08:48.000752 kernel: kvm-clock: cpu 0, msr 2f19f001, primary cpu clock Sep 13 01:08:48.000763 kernel: kvm-clock: using sched offset of 4285904231 cycles Sep 13 01:08:48.000775 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Sep 13 01:08:48.000786 kernel: tsc: Detected 2500.006 MHz processor Sep 13 01:08:48.000798 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 13 01:08:48.000809 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 13 01:08:48.000823 kernel: last_pfn = 0x7c97c max_arch_pfn = 0x400000000 Sep 13 01:08:48.000834 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 13 01:08:48.000845 kernel: Using GB pages for direct mapping Sep 13 01:08:48.000857 kernel: Secure boot disabled Sep 13 01:08:48.000868 kernel: ACPI: Early table checksum verification disabled Sep 13 01:08:48.000885 kernel: ACPI: RSDP 0x000000007895D014 000024 (v02 AMAZON) Sep 13 01:08:48.000897 kernel: ACPI: XSDT 0x000000007895C0E8 00006C (v01 AMAZON AMZNFACP 00000001 01000013) Sep 13 01:08:48.000912 kernel: ACPI: FACP 0x0000000078955000 000114 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Sep 13 01:08:48.000924 kernel: ACPI: DSDT 0x0000000078956000 00115A (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Sep 13 01:08:48.000935 kernel: ACPI: FACS 0x00000000789D0000 000040 Sep 13 01:08:48.000948 kernel: ACPI: WAET 0x000000007895B000 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Sep 13 01:08:48.000960 kernel: ACPI: SLIT 0x000000007895A000 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Sep 13 01:08:48.000972 kernel: ACPI: APIC 0x0000000078959000 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Sep 13 01:08:48.000985 kernel: ACPI: SRAT 0x0000000078958000 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Sep 13 01:08:48.000999 kernel: ACPI: HPET 0x0000000078954000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Sep 13 01:08:48.001011 kernel: ACPI: SSDT 0x0000000078953000 000759 (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Sep 13 01:08:48.001023 kernel: ACPI: SSDT 0x0000000078952000 00007F (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Sep 13 01:08:48.001035 kernel: ACPI: BGRT 0x0000000078951000 000038 (v01 AMAZON AMAZON 00000002 01000013) Sep 13 01:08:48.001048 kernel: ACPI: Reserving FACP table memory at [mem 0x78955000-0x78955113] Sep 13 01:08:48.001060 kernel: ACPI: Reserving DSDT table memory at [mem 0x78956000-0x78957159] Sep 13 01:08:48.001072 kernel: ACPI: Reserving FACS table memory at [mem 0x789d0000-0x789d003f] Sep 13 01:08:48.001084 kernel: ACPI: Reserving WAET table memory at [mem 0x7895b000-0x7895b027] Sep 13 01:08:48.001097 kernel: ACPI: Reserving SLIT table memory at [mem 0x7895a000-0x7895a06b] Sep 13 01:08:48.001111 kernel: ACPI: Reserving APIC table memory at [mem 0x78959000-0x78959075] Sep 13 01:08:48.001123 kernel: ACPI: Reserving SRAT table memory at [mem 0x78958000-0x7895809f] Sep 13 01:08:48.001135 kernel: ACPI: Reserving HPET table memory at [mem 0x78954000-0x78954037] Sep 13 01:08:48.001147 kernel: ACPI: Reserving SSDT table memory at [mem 0x78953000-0x78953758] Sep 13 01:08:48.001158 kernel: ACPI: Reserving SSDT table memory at [mem 0x78952000-0x7895207e] Sep 13 01:08:48.001171 kernel: ACPI: Reserving BGRT table memory at [mem 0x78951000-0x78951037] Sep 13 01:08:48.001183 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Sep 13 01:08:48.001194 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Sep 13 01:08:48.001206 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Sep 13 01:08:48.001221 kernel: NUMA: Initialized distance table, cnt=1 Sep 13 01:08:48.001233 kernel: NODE_DATA(0) allocated [mem 0x7a8ef000-0x7a8f4fff] Sep 13 01:08:48.001246 kernel: Zone ranges: Sep 13 01:08:48.001258 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 13 01:08:48.001269 kernel: DMA32 [mem 0x0000000001000000-0x000000007c97bfff] Sep 13 01:08:48.001281 kernel: Normal empty Sep 13 01:08:48.001294 kernel: Movable zone start for each node Sep 13 01:08:48.001306 kernel: Early memory node ranges Sep 13 01:08:48.001317 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Sep 13 01:08:48.001332 kernel: node 0: [mem 0x0000000000100000-0x00000000786cdfff] Sep 13 01:08:48.001344 kernel: node 0: [mem 0x00000000789de000-0x000000007c97bfff] Sep 13 01:08:48.001356 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007c97bfff] Sep 13 01:08:48.001368 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 13 01:08:48.001380 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Sep 13 01:08:48.001392 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Sep 13 01:08:48.001404 kernel: On node 0, zone DMA32: 13956 pages in unavailable ranges Sep 13 01:08:48.001416 kernel: ACPI: PM-Timer IO Port: 0xb008 Sep 13 01:08:48.001428 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Sep 13 01:08:48.001442 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Sep 13 01:08:48.001455 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Sep 13 01:08:48.001466 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 13 01:08:48.001479 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Sep 13 01:08:48.001491 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Sep 13 01:08:48.001503 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 13 01:08:48.001516 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Sep 13 01:08:48.001528 kernel: TSC deadline timer available Sep 13 01:08:48.001540 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Sep 13 01:08:48.003755 kernel: [mem 0x7ca00000-0xffffffff] available for PCI devices Sep 13 01:08:48.004015 kernel: Booting paravirtualized kernel on KVM Sep 13 01:08:48.004032 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 13 01:08:48.004109 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Sep 13 01:08:48.007005 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Sep 13 01:08:48.007019 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Sep 13 01:08:48.007038 kernel: pcpu-alloc: [0] 0 1 Sep 13 01:08:48.007185 kernel: kvm-guest: stealtime: cpu 0, msr 7a41c0c0 Sep 13 01:08:48.007201 kernel: kvm-guest: PV spinlocks enabled Sep 13 01:08:48.007216 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Sep 13 01:08:48.007237 kernel: Built 1 zonelists, mobility grouping on. Total pages: 501318 Sep 13 01:08:48.007251 kernel: Policy zone: DMA32 Sep 13 01:08:48.007269 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=65d14b740db9e581daa1d0206188b16d2f1a39e5c5e0878b6855323cd7c584ec Sep 13 01:08:48.007285 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 13 01:08:48.007299 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 13 01:08:48.007314 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Sep 13 01:08:48.007328 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 13 01:08:48.007346 kernel: Memory: 1876640K/2037804K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 160904K reserved, 0K cma-reserved) Sep 13 01:08:48.007360 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 13 01:08:48.007374 kernel: Kernel/User page tables isolation: enabled Sep 13 01:08:48.007389 kernel: ftrace: allocating 34614 entries in 136 pages Sep 13 01:08:48.007403 kernel: ftrace: allocated 136 pages with 2 groups Sep 13 01:08:48.007417 kernel: rcu: Hierarchical RCU implementation. Sep 13 01:08:48.007433 kernel: rcu: RCU event tracing is enabled. Sep 13 01:08:48.007462 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 13 01:08:48.007477 kernel: Rude variant of Tasks RCU enabled. Sep 13 01:08:48.007492 kernel: Tracing variant of Tasks RCU enabled. Sep 13 01:08:48.007507 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 13 01:08:48.007523 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 13 01:08:48.007540 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Sep 13 01:08:48.007555 kernel: random: crng init done Sep 13 01:08:48.007570 kernel: Console: colour dummy device 80x25 Sep 13 01:08:48.007585 kernel: printk: console [tty0] enabled Sep 13 01:08:48.007600 kernel: printk: console [ttyS0] enabled Sep 13 01:08:48.007615 kernel: ACPI: Core revision 20210730 Sep 13 01:08:48.007630 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Sep 13 01:08:48.007648 kernel: APIC: Switch to symmetric I/O mode setup Sep 13 01:08:48.007677 kernel: x2apic enabled Sep 13 01:08:48.007692 kernel: Switched APIC routing to physical x2apic. Sep 13 01:08:48.007708 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093fa6a7c, max_idle_ns: 440795295209 ns Sep 13 01:08:48.007723 kernel: Calibrating delay loop (skipped) preset value.. 5000.01 BogoMIPS (lpj=2500006) Sep 13 01:08:48.007738 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Sep 13 01:08:48.007753 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Sep 13 01:08:48.007770 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 13 01:08:48.007783 kernel: Spectre V2 : Mitigation: Retpolines Sep 13 01:08:48.007794 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Sep 13 01:08:48.007805 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Sep 13 01:08:48.007816 kernel: RETBleed: Vulnerable Sep 13 01:08:48.007827 kernel: Speculative Store Bypass: Vulnerable Sep 13 01:08:48.007840 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Sep 13 01:08:48.007853 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Sep 13 01:08:48.007867 kernel: GDS: Unknown: Dependent on hypervisor status Sep 13 01:08:48.007878 kernel: active return thunk: its_return_thunk Sep 13 01:08:48.015730 kernel: ITS: Mitigation: Aligned branch/return thunks Sep 13 01:08:48.015764 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 13 01:08:48.015778 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 13 01:08:48.015790 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 13 01:08:48.015801 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Sep 13 01:08:48.015813 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Sep 13 01:08:48.015826 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Sep 13 01:08:48.015839 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Sep 13 01:08:48.015852 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Sep 13 01:08:48.015866 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Sep 13 01:08:48.015880 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 13 01:08:48.015895 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Sep 13 01:08:48.015911 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Sep 13 01:08:48.015925 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Sep 13 01:08:48.015938 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Sep 13 01:08:48.015951 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Sep 13 01:08:48.015964 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Sep 13 01:08:48.015977 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Sep 13 01:08:48.015991 kernel: Freeing SMP alternatives memory: 32K Sep 13 01:08:48.016002 kernel: pid_max: default: 32768 minimum: 301 Sep 13 01:08:48.016016 kernel: LSM: Security Framework initializing Sep 13 01:08:48.016031 kernel: SELinux: Initializing. Sep 13 01:08:48.016046 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Sep 13 01:08:48.016064 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Sep 13 01:08:48.016080 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Sep 13 01:08:48.016094 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Sep 13 01:08:48.016110 kernel: signal: max sigframe size: 3632 Sep 13 01:08:48.016126 kernel: rcu: Hierarchical SRCU implementation. Sep 13 01:08:48.016141 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Sep 13 01:08:48.016157 kernel: smp: Bringing up secondary CPUs ... Sep 13 01:08:48.016172 kernel: x86: Booting SMP configuration: Sep 13 01:08:48.016187 kernel: .... node #0, CPUs: #1 Sep 13 01:08:48.016203 kernel: kvm-clock: cpu 1, msr 2f19f041, secondary cpu clock Sep 13 01:08:48.016218 kernel: kvm-guest: stealtime: cpu 1, msr 7a51c0c0 Sep 13 01:08:48.016233 kernel: Transient Scheduler Attacks: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Sep 13 01:08:48.016247 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Sep 13 01:08:48.016262 kernel: smp: Brought up 1 node, 2 CPUs Sep 13 01:08:48.016277 kernel: smpboot: Max logical packages: 1 Sep 13 01:08:48.016292 kernel: smpboot: Total of 2 processors activated (10000.02 BogoMIPS) Sep 13 01:08:48.016308 kernel: devtmpfs: initialized Sep 13 01:08:48.016323 kernel: x86/mm: Memory block size: 128MB Sep 13 01:08:48.016341 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7895e000-0x789ddfff] (524288 bytes) Sep 13 01:08:48.016357 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 13 01:08:48.016373 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 13 01:08:48.016388 kernel: pinctrl core: initialized pinctrl subsystem Sep 13 01:08:48.016404 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 13 01:08:48.016419 kernel: audit: initializing netlink subsys (disabled) Sep 13 01:08:48.016435 kernel: audit: type=2000 audit(1757725727.211:1): state=initialized audit_enabled=0 res=1 Sep 13 01:08:48.016450 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 13 01:08:48.016465 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 13 01:08:48.016484 kernel: cpuidle: using governor menu Sep 13 01:08:48.016499 kernel: ACPI: bus type PCI registered Sep 13 01:08:48.016515 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 13 01:08:48.016530 kernel: dca service started, version 1.12.1 Sep 13 01:08:48.016547 kernel: PCI: Using configuration type 1 for base access Sep 13 01:08:48.016562 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 13 01:08:48.016577 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 13 01:08:48.016592 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 13 01:08:48.016607 kernel: ACPI: Added _OSI(Module Device) Sep 13 01:08:48.016625 kernel: ACPI: Added _OSI(Processor Device) Sep 13 01:08:48.016641 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 13 01:08:48.027273 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 13 01:08:48.027319 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 13 01:08:48.027335 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 13 01:08:48.027350 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Sep 13 01:08:48.027363 kernel: ACPI: Interpreter enabled Sep 13 01:08:48.027377 kernel: ACPI: PM: (supports S0 S5) Sep 13 01:08:48.027392 kernel: ACPI: Using IOAPIC for interrupt routing Sep 13 01:08:48.027414 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 13 01:08:48.027429 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Sep 13 01:08:48.027441 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Sep 13 01:08:48.027702 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Sep 13 01:08:48.027858 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Sep 13 01:08:48.027884 kernel: acpiphp: Slot [3] registered Sep 13 01:08:48.027900 kernel: acpiphp: Slot [4] registered Sep 13 01:08:48.027916 kernel: acpiphp: Slot [5] registered Sep 13 01:08:48.027936 kernel: acpiphp: Slot [6] registered Sep 13 01:08:48.027956 kernel: acpiphp: Slot [7] registered Sep 13 01:08:48.027971 kernel: acpiphp: Slot [8] registered Sep 13 01:08:48.027985 kernel: acpiphp: Slot [9] registered Sep 13 01:08:48.028000 kernel: acpiphp: Slot [10] registered Sep 13 01:08:48.028015 kernel: acpiphp: Slot [11] registered Sep 13 01:08:48.028030 kernel: acpiphp: Slot [12] registered Sep 13 01:08:48.028044 kernel: acpiphp: Slot [13] registered Sep 13 01:08:48.028059 kernel: acpiphp: Slot [14] registered Sep 13 01:08:48.028077 kernel: acpiphp: Slot [15] registered Sep 13 01:08:48.028092 kernel: acpiphp: Slot [16] registered Sep 13 01:08:48.028107 kernel: acpiphp: Slot [17] registered Sep 13 01:08:48.028122 kernel: acpiphp: Slot [18] registered Sep 13 01:08:48.028142 kernel: acpiphp: Slot [19] registered Sep 13 01:08:48.028158 kernel: acpiphp: Slot [20] registered Sep 13 01:08:48.028173 kernel: acpiphp: Slot [21] registered Sep 13 01:08:48.028188 kernel: acpiphp: Slot [22] registered Sep 13 01:08:48.028203 kernel: acpiphp: Slot [23] registered Sep 13 01:08:48.028217 kernel: acpiphp: Slot [24] registered Sep 13 01:08:48.028235 kernel: acpiphp: Slot [25] registered Sep 13 01:08:48.028250 kernel: acpiphp: Slot [26] registered Sep 13 01:08:48.028265 kernel: acpiphp: Slot [27] registered Sep 13 01:08:48.028279 kernel: acpiphp: Slot [28] registered Sep 13 01:08:48.028293 kernel: acpiphp: Slot [29] registered Sep 13 01:08:48.028313 kernel: acpiphp: Slot [30] registered Sep 13 01:08:48.028328 kernel: acpiphp: Slot [31] registered Sep 13 01:08:48.028343 kernel: PCI host bridge to bus 0000:00 Sep 13 01:08:48.028492 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Sep 13 01:08:48.028617 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Sep 13 01:08:48.028758 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Sep 13 01:08:48.028887 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Sep 13 01:08:48.029018 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x2000ffffffff window] Sep 13 01:08:48.029146 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Sep 13 01:08:48.029310 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Sep 13 01:08:48.029467 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Sep 13 01:08:48.029618 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Sep 13 01:08:48.029796 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Sep 13 01:08:48.029941 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Sep 13 01:08:48.030074 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Sep 13 01:08:48.030203 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Sep 13 01:08:48.030328 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Sep 13 01:08:48.030460 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Sep 13 01:08:48.030584 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Sep 13 01:08:48.035877 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Sep 13 01:08:48.036041 kernel: pci 0000:00:03.0: reg 0x10: [mem 0x80000000-0x803fffff pref] Sep 13 01:08:48.036171 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Sep 13 01:08:48.036294 kernel: pci 0000:00:03.0: BAR 0: assigned to efifb Sep 13 01:08:48.036422 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Sep 13 01:08:48.036565 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Sep 13 01:08:48.036731 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80404000-0x80407fff] Sep 13 01:08:48.036879 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Sep 13 01:08:48.037019 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80400000-0x80403fff] Sep 13 01:08:48.037039 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Sep 13 01:08:48.037055 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Sep 13 01:08:48.037071 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Sep 13 01:08:48.037092 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Sep 13 01:08:48.037107 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Sep 13 01:08:48.037123 kernel: iommu: Default domain type: Translated Sep 13 01:08:48.037139 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 13 01:08:48.037276 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Sep 13 01:08:48.037413 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Sep 13 01:08:48.037550 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Sep 13 01:08:48.037570 kernel: vgaarb: loaded Sep 13 01:08:48.037590 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 13 01:08:48.037606 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 13 01:08:48.037622 kernel: PTP clock support registered Sep 13 01:08:48.037637 kernel: Registered efivars operations Sep 13 01:08:48.037653 kernel: PCI: Using ACPI for IRQ routing Sep 13 01:08:48.037687 kernel: PCI: pci_cache_line_size set to 64 bytes Sep 13 01:08:48.037702 kernel: e820: reserve RAM buffer [mem 0x76813018-0x77ffffff] Sep 13 01:08:48.037717 kernel: e820: reserve RAM buffer [mem 0x786ce000-0x7bffffff] Sep 13 01:08:48.037743 kernel: e820: reserve RAM buffer [mem 0x7c97c000-0x7fffffff] Sep 13 01:08:48.037761 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Sep 13 01:08:48.037776 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Sep 13 01:08:48.037792 kernel: clocksource: Switched to clocksource kvm-clock Sep 13 01:08:48.037807 kernel: VFS: Disk quotas dquot_6.6.0 Sep 13 01:08:48.037822 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 13 01:08:48.037838 kernel: pnp: PnP ACPI init Sep 13 01:08:48.037853 kernel: pnp: PnP ACPI: found 5 devices Sep 13 01:08:48.037868 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 13 01:08:48.037883 kernel: NET: Registered PF_INET protocol family Sep 13 01:08:48.037902 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 13 01:08:48.037917 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Sep 13 01:08:48.037933 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 13 01:08:48.037948 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Sep 13 01:08:48.037964 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Sep 13 01:08:48.037979 kernel: TCP: Hash tables configured (established 16384 bind 16384) Sep 13 01:08:48.037995 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Sep 13 01:08:48.038010 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Sep 13 01:08:48.038025 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 13 01:08:48.038044 kernel: NET: Registered PF_XDP protocol family Sep 13 01:08:48.038187 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Sep 13 01:08:48.038309 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Sep 13 01:08:48.038424 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Sep 13 01:08:48.038535 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Sep 13 01:08:48.038647 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x2000ffffffff window] Sep 13 01:08:48.038798 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Sep 13 01:08:48.038927 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Sep 13 01:08:48.038951 kernel: PCI: CLS 0 bytes, default 64 Sep 13 01:08:48.038967 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Sep 13 01:08:48.038982 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093fa6a7c, max_idle_ns: 440795295209 ns Sep 13 01:08:48.038999 kernel: clocksource: Switched to clocksource tsc Sep 13 01:08:48.039015 kernel: Initialise system trusted keyrings Sep 13 01:08:48.039031 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Sep 13 01:08:48.039047 kernel: Key type asymmetric registered Sep 13 01:08:48.039063 kernel: Asymmetric key parser 'x509' registered Sep 13 01:08:48.039077 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 13 01:08:48.039097 kernel: io scheduler mq-deadline registered Sep 13 01:08:48.039112 kernel: io scheduler kyber registered Sep 13 01:08:48.039128 kernel: io scheduler bfq registered Sep 13 01:08:48.039143 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 13 01:08:48.039160 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 13 01:08:48.039175 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 13 01:08:48.039191 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Sep 13 01:08:48.039206 kernel: i8042: Warning: Keylock active Sep 13 01:08:48.039222 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Sep 13 01:08:48.039241 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Sep 13 01:08:48.039403 kernel: rtc_cmos 00:00: RTC can wake from S4 Sep 13 01:08:48.039523 kernel: rtc_cmos 00:00: registered as rtc0 Sep 13 01:08:48.039634 kernel: rtc_cmos 00:00: setting system clock to 2025-09-13T01:08:47 UTC (1757725727) Sep 13 01:08:48.048114 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Sep 13 01:08:48.048156 kernel: intel_pstate: CPU model not supported Sep 13 01:08:48.048172 kernel: efifb: probing for efifb Sep 13 01:08:48.048192 kernel: efifb: framebuffer at 0x80000000, using 1876k, total 1875k Sep 13 01:08:48.048206 kernel: efifb: mode is 800x600x32, linelength=3200, pages=1 Sep 13 01:08:48.048220 kernel: efifb: scrolling: redraw Sep 13 01:08:48.048234 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 13 01:08:48.048248 kernel: Console: switching to colour frame buffer device 100x37 Sep 13 01:08:48.048262 kernel: fb0: EFI VGA frame buffer device Sep 13 01:08:48.048298 kernel: pstore: Registered efi as persistent store backend Sep 13 01:08:48.048316 kernel: NET: Registered PF_INET6 protocol family Sep 13 01:08:48.048330 kernel: Segment Routing with IPv6 Sep 13 01:08:48.048348 kernel: In-situ OAM (IOAM) with IPv6 Sep 13 01:08:48.048363 kernel: NET: Registered PF_PACKET protocol family Sep 13 01:08:48.048377 kernel: Key type dns_resolver registered Sep 13 01:08:48.048391 kernel: IPI shorthand broadcast: enabled Sep 13 01:08:48.048407 kernel: sched_clock: Marking stable (373300463, 147452862)->(589888307, -69134982) Sep 13 01:08:48.048422 kernel: registered taskstats version 1 Sep 13 01:08:48.048436 kernel: Loading compiled-in X.509 certificates Sep 13 01:08:48.048450 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: d4931373bb0d9b9f95da11f02ae07d3649cc6c37' Sep 13 01:08:48.048466 kernel: Key type .fscrypt registered Sep 13 01:08:48.048481 kernel: Key type fscrypt-provisioning registered Sep 13 01:08:48.048498 kernel: pstore: Using crash dump compression: deflate Sep 13 01:08:48.048513 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 13 01:08:48.048530 kernel: ima: Allocated hash algorithm: sha1 Sep 13 01:08:48.048546 kernel: ima: No architecture policies found Sep 13 01:08:48.048561 kernel: clk: Disabling unused clocks Sep 13 01:08:48.048575 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 13 01:08:48.048590 kernel: Write protecting the kernel read-only data: 28672k Sep 13 01:08:48.048604 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 13 01:08:48.048621 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 13 01:08:48.048635 kernel: Run /init as init process Sep 13 01:08:48.048648 kernel: with arguments: Sep 13 01:08:48.048686 kernel: /init Sep 13 01:08:48.048699 kernel: with environment: Sep 13 01:08:48.048712 kernel: HOME=/ Sep 13 01:08:48.048725 kernel: TERM=linux Sep 13 01:08:48.048739 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 13 01:08:48.048756 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 01:08:48.048776 systemd[1]: Detected virtualization amazon. Sep 13 01:08:48.048791 systemd[1]: Detected architecture x86-64. Sep 13 01:08:48.048804 systemd[1]: Running in initrd. Sep 13 01:08:48.048817 systemd[1]: No hostname configured, using default hostname. Sep 13 01:08:48.048833 systemd[1]: Hostname set to . Sep 13 01:08:48.048847 systemd[1]: Initializing machine ID from VM UUID. Sep 13 01:08:48.048861 systemd[1]: Queued start job for default target initrd.target. Sep 13 01:08:48.048878 systemd[1]: Started systemd-ask-password-console.path. Sep 13 01:08:48.048892 systemd[1]: Reached target cryptsetup.target. Sep 13 01:08:48.048905 systemd[1]: Reached target paths.target. Sep 13 01:08:48.048919 systemd[1]: Reached target slices.target. Sep 13 01:08:48.048933 systemd[1]: Reached target swap.target. Sep 13 01:08:48.048947 systemd[1]: Reached target timers.target. Sep 13 01:08:48.048967 systemd[1]: Listening on iscsid.socket. Sep 13 01:08:48.048981 systemd[1]: Listening on iscsiuio.socket. Sep 13 01:08:48.048995 systemd[1]: Listening on systemd-journald-audit.socket. Sep 13 01:08:48.049010 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 13 01:08:48.049025 systemd[1]: Listening on systemd-journald.socket. Sep 13 01:08:48.049039 systemd[1]: Listening on systemd-networkd.socket. Sep 13 01:08:48.049055 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 01:08:48.049073 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 01:08:48.049089 systemd[1]: Reached target sockets.target. Sep 13 01:08:48.049106 systemd[1]: Starting kmod-static-nodes.service... Sep 13 01:08:48.049122 systemd[1]: Finished network-cleanup.service. Sep 13 01:08:48.049138 systemd[1]: Starting systemd-fsck-usr.service... Sep 13 01:08:48.049154 systemd[1]: Starting systemd-journald.service... Sep 13 01:08:48.049170 systemd[1]: Starting systemd-modules-load.service... Sep 13 01:08:48.049186 systemd[1]: Starting systemd-resolved.service... Sep 13 01:08:48.049202 systemd[1]: Starting systemd-vconsole-setup.service... Sep 13 01:08:48.049221 systemd[1]: Finished kmod-static-nodes.service. Sep 13 01:08:48.049238 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Sep 13 01:08:48.049255 kernel: audit: type=1130 audit(1757725728.006:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.049272 systemd[1]: Finished systemd-fsck-usr.service. Sep 13 01:08:48.049291 systemd[1]: Finished systemd-vconsole-setup.service. Sep 13 01:08:48.049307 kernel: audit: type=1130 audit(1757725728.016:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.049324 kernel: audit: type=1130 audit(1757725728.038:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.049346 systemd-journald[185]: Journal started Sep 13 01:08:48.049428 systemd-journald[185]: Runtime Journal (/run/log/journal/ec23ee777363c0fad7e0d678d99424e8) is 4.8M, max 38.3M, 33.5M free. Sep 13 01:08:48.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.043025 systemd-resolved[187]: Positive Trust Anchors: Sep 13 01:08:48.070865 systemd[1]: Starting dracut-cmdline-ask.service... Sep 13 01:08:48.070899 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 01:08:48.070918 systemd[1]: Started systemd-resolved.service. Sep 13 01:08:48.043038 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 01:08:48.043087 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 01:08:48.095143 kernel: audit: type=1130 audit(1757725728.082:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.095182 systemd[1]: Started systemd-journald.service. Sep 13 01:08:48.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.046781 systemd-resolved[187]: Defaulting to hostname 'linux'. Sep 13 01:08:48.052652 systemd-modules-load[186]: Inserted module 'overlay' Sep 13 01:08:48.102331 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 01:08:48.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.105302 systemd[1]: Finished dracut-cmdline-ask.service. Sep 13 01:08:48.130233 kernel: audit: type=1130 audit(1757725728.099:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.130272 kernel: audit: type=1130 audit(1757725728.103:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.130292 kernel: audit: type=1130 audit(1757725728.117:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.130312 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 13 01:08:48.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.119793 systemd[1]: Reached target nss-lookup.target. Sep 13 01:08:48.132387 systemd[1]: Starting dracut-cmdline.service... Sep 13 01:08:48.140030 systemd-modules-load[186]: Inserted module 'br_netfilter' Sep 13 01:08:48.141201 kernel: Bridge firewalling registered Sep 13 01:08:48.150356 dracut-cmdline[201]: dracut-dracut-053 Sep 13 01:08:48.154926 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=65d14b740db9e581daa1d0206188b16d2f1a39e5c5e0878b6855323cd7c584ec Sep 13 01:08:48.170689 kernel: SCSI subsystem initialized Sep 13 01:08:48.192232 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 13 01:08:48.192317 kernel: device-mapper: uevent: version 1.0.3 Sep 13 01:08:48.195187 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 13 01:08:48.199869 systemd-modules-load[186]: Inserted module 'dm_multipath' Sep 13 01:08:48.200802 systemd[1]: Finished systemd-modules-load.service. Sep 13 01:08:48.204586 systemd[1]: Starting systemd-sysctl.service... Sep 13 01:08:48.213103 kernel: audit: type=1130 audit(1757725728.201:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.221299 systemd[1]: Finished systemd-sysctl.service. Sep 13 01:08:48.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.230693 kernel: audit: type=1130 audit(1757725728.222:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.254687 kernel: Loading iSCSI transport class v2.0-870. Sep 13 01:08:48.273691 kernel: iscsi: registered transport (tcp) Sep 13 01:08:48.299065 kernel: iscsi: registered transport (qla4xxx) Sep 13 01:08:48.299137 kernel: QLogic iSCSI HBA Driver Sep 13 01:08:48.330931 systemd[1]: Finished dracut-cmdline.service. Sep 13 01:08:48.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.332910 systemd[1]: Starting dracut-pre-udev.service... Sep 13 01:08:48.384726 kernel: raid6: avx512x4 gen() 17424 MB/s Sep 13 01:08:48.402714 kernel: raid6: avx512x4 xor() 7595 MB/s Sep 13 01:08:48.420712 kernel: raid6: avx512x2 gen() 18193 MB/s Sep 13 01:08:48.438687 kernel: raid6: avx512x2 xor() 24252 MB/s Sep 13 01:08:48.456697 kernel: raid6: avx512x1 gen() 18202 MB/s Sep 13 01:08:48.474696 kernel: raid6: avx512x1 xor() 21943 MB/s Sep 13 01:08:48.492706 kernel: raid6: avx2x4 gen() 18152 MB/s Sep 13 01:08:48.510693 kernel: raid6: avx2x4 xor() 7153 MB/s Sep 13 01:08:48.528729 kernel: raid6: avx2x2 gen() 17737 MB/s Sep 13 01:08:48.546702 kernel: raid6: avx2x2 xor() 18153 MB/s Sep 13 01:08:48.564718 kernel: raid6: avx2x1 gen() 13230 MB/s Sep 13 01:08:48.582704 kernel: raid6: avx2x1 xor() 15057 MB/s Sep 13 01:08:48.600688 kernel: raid6: sse2x4 gen() 9544 MB/s Sep 13 01:08:48.618698 kernel: raid6: sse2x4 xor() 5956 MB/s Sep 13 01:08:48.636686 kernel: raid6: sse2x2 gen() 10533 MB/s Sep 13 01:08:48.654688 kernel: raid6: sse2x2 xor() 6116 MB/s Sep 13 01:08:48.672706 kernel: raid6: sse2x1 gen() 9042 MB/s Sep 13 01:08:48.691040 kernel: raid6: sse2x1 xor() 4680 MB/s Sep 13 01:08:48.691115 kernel: raid6: using algorithm avx512x1 gen() 18202 MB/s Sep 13 01:08:48.691136 kernel: raid6: .... xor() 21943 MB/s, rmw enabled Sep 13 01:08:48.692186 kernel: raid6: using avx512x2 recovery algorithm Sep 13 01:08:48.706687 kernel: xor: automatically using best checksumming function avx Sep 13 01:08:48.809688 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 13 01:08:48.818679 systemd[1]: Finished dracut-pre-udev.service. Sep 13 01:08:48.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.818000 audit: BPF prog-id=7 op=LOAD Sep 13 01:08:48.818000 audit: BPF prog-id=8 op=LOAD Sep 13 01:08:48.820265 systemd[1]: Starting systemd-udevd.service... Sep 13 01:08:48.833498 systemd-udevd[384]: Using default interface naming scheme 'v252'. Sep 13 01:08:48.838949 systemd[1]: Started systemd-udevd.service. Sep 13 01:08:48.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.841551 systemd[1]: Starting dracut-pre-trigger.service... Sep 13 01:08:48.860878 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Sep 13 01:08:48.893247 systemd[1]: Finished dracut-pre-trigger.service. Sep 13 01:08:48.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.894786 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 01:08:48.938920 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 01:08:48.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:48.995804 kernel: cryptd: max_cpu_qlen set to 1000 Sep 13 01:08:49.034348 kernel: AVX2 version of gcm_enc/dec engaged. Sep 13 01:08:49.034432 kernel: AES CTR mode by8 optimization enabled Sep 13 01:08:49.042624 kernel: ena 0000:00:05.0: ENA device version: 0.10 Sep 13 01:08:49.054283 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Sep 13 01:08:49.054461 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Sep 13 01:08:49.054606 kernel: nvme nvme0: pci function 0000:00:04.0 Sep 13 01:08:49.054788 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Sep 13 01:08:49.054812 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80400000, mac addr 06:51:83:3a:9d:2d Sep 13 01:08:49.062681 kernel: nvme nvme0: 2/0/0 default/read/poll queues Sep 13 01:08:49.069488 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 13 01:08:49.069572 kernel: GPT:9289727 != 16777215 Sep 13 01:08:49.069591 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 13 01:08:49.071025 kernel: GPT:9289727 != 16777215 Sep 13 01:08:49.072031 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 13 01:08:49.074376 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 01:08:49.077351 (udev-worker)[429]: Network interface NamePolicy= disabled on kernel command line. Sep 13 01:08:49.163014 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 13 01:08:49.179714 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (434) Sep 13 01:08:49.229108 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 01:08:49.240225 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 13 01:08:49.248270 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 13 01:08:49.249191 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 13 01:08:49.256327 systemd[1]: Starting disk-uuid.service... Sep 13 01:08:49.264768 disk-uuid[592]: Primary Header is updated. Sep 13 01:08:49.264768 disk-uuid[592]: Secondary Entries is updated. Sep 13 01:08:49.264768 disk-uuid[592]: Secondary Header is updated. Sep 13 01:08:49.272689 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 01:08:49.280690 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 01:08:49.287680 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 01:08:50.292689 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 01:08:50.293268 disk-uuid[593]: The operation has completed successfully. Sep 13 01:08:50.446357 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 13 01:08:50.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.446479 systemd[1]: Finished disk-uuid.service. Sep 13 01:08:50.453416 systemd[1]: Starting verity-setup.service... Sep 13 01:08:50.481680 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Sep 13 01:08:50.587900 systemd[1]: Found device dev-mapper-usr.device. Sep 13 01:08:50.589304 systemd[1]: Mounting sysusr-usr.mount... Sep 13 01:08:50.590862 systemd[1]: Finished verity-setup.service. Sep 13 01:08:50.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.683688 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 13 01:08:50.680492 systemd[1]: Mounted sysusr-usr.mount. Sep 13 01:08:50.681260 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 13 01:08:50.682154 systemd[1]: Starting ignition-setup.service... Sep 13 01:08:50.683355 systemd[1]: Starting parse-ip-for-networkd.service... Sep 13 01:08:50.708730 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Sep 13 01:08:50.708804 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 01:08:50.708824 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 01:08:50.763572 systemd[1]: Finished parse-ip-for-networkd.service. Sep 13 01:08:50.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.763000 audit: BPF prog-id=9 op=LOAD Sep 13 01:08:50.766175 systemd[1]: Starting systemd-networkd.service... Sep 13 01:08:50.789522 systemd-networkd[1097]: lo: Link UP Sep 13 01:08:50.789538 systemd-networkd[1097]: lo: Gained carrier Sep 13 01:08:50.790724 systemd-networkd[1097]: Enumeration completed Sep 13 01:08:50.791277 systemd-networkd[1097]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 01:08:50.792439 systemd[1]: Started systemd-networkd.service. Sep 13 01:08:50.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.794851 systemd[1]: Reached target network.target. Sep 13 01:08:50.796200 systemd-networkd[1097]: eth0: Link UP Sep 13 01:08:50.796206 systemd-networkd[1097]: eth0: Gained carrier Sep 13 01:08:50.799428 systemd[1]: Starting iscsiuio.service... Sep 13 01:08:50.806285 systemd[1]: Started iscsiuio.service. Sep 13 01:08:50.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.808182 systemd[1]: Starting iscsid.service... Sep 13 01:08:50.809900 systemd-networkd[1097]: eth0: DHCPv4 address 172.31.27.15/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 13 01:08:50.814368 iscsid[1102]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 13 01:08:50.814368 iscsid[1102]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 13 01:08:50.814368 iscsid[1102]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 13 01:08:50.814368 iscsid[1102]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 13 01:08:50.814368 iscsid[1102]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 13 01:08:50.814368 iscsid[1102]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 13 01:08:50.814368 iscsid[1102]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 13 01:08:50.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.815535 systemd[1]: Started iscsid.service. Sep 13 01:08:50.817959 systemd[1]: Starting dracut-initqueue.service... Sep 13 01:08:50.833708 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 01:08:50.837122 systemd[1]: Finished dracut-initqueue.service. Sep 13 01:08:50.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.838388 systemd[1]: Reached target remote-fs-pre.target. Sep 13 01:08:50.839403 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 01:08:50.843730 systemd[1]: Reached target remote-fs.target. Sep 13 01:08:50.847227 systemd[1]: Starting dracut-pre-mount.service... Sep 13 01:08:50.852223 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 13 01:08:50.859963 systemd[1]: Finished dracut-pre-mount.service. Sep 13 01:08:50.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:50.861185 systemd[1]: Finished ignition-setup.service. Sep 13 01:08:50.863160 systemd[1]: Starting ignition-fetch-offline.service... Sep 13 01:08:51.497327 ignition[1124]: Ignition 2.14.0 Sep 13 01:08:51.497340 ignition[1124]: Stage: fetch-offline Sep 13 01:08:51.497461 ignition[1124]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:08:51.497509 ignition[1124]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 01:08:51.511172 ignition[1124]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 01:08:51.511822 ignition[1124]: Ignition finished successfully Sep 13 01:08:51.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:51.513830 systemd[1]: Finished ignition-fetch-offline.service. Sep 13 01:08:51.515448 systemd[1]: Starting ignition-fetch.service... Sep 13 01:08:51.525376 ignition[1130]: Ignition 2.14.0 Sep 13 01:08:51.525390 ignition[1130]: Stage: fetch Sep 13 01:08:51.525607 ignition[1130]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:08:51.525640 ignition[1130]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 01:08:51.533145 ignition[1130]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 01:08:51.534171 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 01:08:51.582316 ignition[1130]: INFO : PUT result: OK Sep 13 01:08:51.592508 ignition[1130]: DEBUG : parsed url from cmdline: "" Sep 13 01:08:51.592508 ignition[1130]: INFO : no config URL provided Sep 13 01:08:51.592508 ignition[1130]: INFO : reading system config file "/usr/lib/ignition/user.ign" Sep 13 01:08:51.592508 ignition[1130]: INFO : no config at "/usr/lib/ignition/user.ign" Sep 13 01:08:51.594633 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 01:08:51.595789 ignition[1130]: INFO : PUT result: OK Sep 13 01:08:51.596305 ignition[1130]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Sep 13 01:08:51.597185 ignition[1130]: INFO : GET result: OK Sep 13 01:08:51.597185 ignition[1130]: DEBUG : parsing config with SHA512: 2cc47af4ed5e2892e5b1b21a7ee8483b13fe2dfdab7e8ba5201d920ed850cc7161309053a5817002146319fd76294c303273a7487f6e0477a9c1e97581c18167 Sep 13 01:08:51.606778 unknown[1130]: fetched base config from "system" Sep 13 01:08:51.606794 unknown[1130]: fetched base config from "system" Sep 13 01:08:51.607828 ignition[1130]: fetch: fetch complete Sep 13 01:08:51.606803 unknown[1130]: fetched user config from "aws" Sep 13 01:08:51.607837 ignition[1130]: fetch: fetch passed Sep 13 01:08:51.607900 ignition[1130]: Ignition finished successfully Sep 13 01:08:51.610875 systemd[1]: Finished ignition-fetch.service. Sep 13 01:08:51.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:51.612818 systemd[1]: Starting ignition-kargs.service... Sep 13 01:08:51.623834 ignition[1136]: Ignition 2.14.0 Sep 13 01:08:51.623846 ignition[1136]: Stage: kargs Sep 13 01:08:51.624081 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:08:51.624117 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 01:08:51.631745 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 01:08:51.632631 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 01:08:51.633411 ignition[1136]: INFO : PUT result: OK Sep 13 01:08:51.635294 ignition[1136]: kargs: kargs passed Sep 13 01:08:51.635367 ignition[1136]: Ignition finished successfully Sep 13 01:08:51.636489 systemd[1]: Finished ignition-kargs.service. Sep 13 01:08:51.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:51.638647 systemd[1]: Starting ignition-disks.service... Sep 13 01:08:51.648534 ignition[1142]: Ignition 2.14.0 Sep 13 01:08:51.648547 ignition[1142]: Stage: disks Sep 13 01:08:51.648784 ignition[1142]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:08:51.648818 ignition[1142]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 01:08:51.656180 ignition[1142]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 01:08:51.656958 ignition[1142]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 01:08:51.658046 ignition[1142]: INFO : PUT result: OK Sep 13 01:08:51.661005 ignition[1142]: disks: disks passed Sep 13 01:08:51.661066 ignition[1142]: Ignition finished successfully Sep 13 01:08:51.663165 systemd[1]: Finished ignition-disks.service. Sep 13 01:08:51.663818 systemd[1]: Reached target initrd-root-device.target. Sep 13 01:08:51.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:51.665059 systemd[1]: Reached target local-fs-pre.target. Sep 13 01:08:51.666436 systemd[1]: Reached target local-fs.target. Sep 13 01:08:51.667362 systemd[1]: Reached target sysinit.target. Sep 13 01:08:51.668398 systemd[1]: Reached target basic.target. Sep 13 01:08:51.670710 systemd[1]: Starting systemd-fsck-root.service... Sep 13 01:08:51.710090 systemd-fsck[1150]: ROOT: clean, 629/553520 files, 56028/553472 blocks Sep 13 01:08:51.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:51.715509 systemd[1]: Finished systemd-fsck-root.service. Sep 13 01:08:51.717506 systemd[1]: Mounting sysroot.mount... Sep 13 01:08:51.742690 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 13 01:08:51.743918 systemd[1]: Mounted sysroot.mount. Sep 13 01:08:51.746068 systemd[1]: Reached target initrd-root-fs.target. Sep 13 01:08:51.757683 systemd[1]: Mounting sysroot-usr.mount... Sep 13 01:08:51.759951 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 13 01:08:51.761055 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 13 01:08:51.761098 systemd[1]: Reached target ignition-diskful.target. Sep 13 01:08:51.762852 systemd[1]: Mounted sysroot-usr.mount. Sep 13 01:08:51.789923 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 01:08:51.792693 systemd[1]: Starting initrd-setup-root.service... Sep 13 01:08:51.807877 initrd-setup-root[1172]: cut: /sysroot/etc/passwd: No such file or directory Sep 13 01:08:51.810681 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1167) Sep 13 01:08:51.815736 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Sep 13 01:08:51.815829 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 01:08:51.815850 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 01:08:51.821396 initrd-setup-root[1196]: cut: /sysroot/etc/group: No such file or directory Sep 13 01:08:51.826689 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 01:08:51.829600 initrd-setup-root[1206]: cut: /sysroot/etc/shadow: No such file or directory Sep 13 01:08:51.835312 initrd-setup-root[1214]: cut: /sysroot/etc/gshadow: No such file or directory Sep 13 01:08:51.859350 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 01:08:52.019825 systemd-networkd[1097]: eth0: Gained IPv6LL Sep 13 01:08:52.241035 systemd[1]: Finished initrd-setup-root.service. Sep 13 01:08:52.248114 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 13 01:08:52.248173 kernel: audit: type=1130 audit(1757725732.240:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:52.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:52.242867 systemd[1]: Starting ignition-mount.service... Sep 13 01:08:52.250131 systemd[1]: Starting sysroot-boot.service... Sep 13 01:08:52.253991 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 13 01:08:52.254101 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 13 01:08:52.268369 ignition[1232]: INFO : Ignition 2.14.0 Sep 13 01:08:52.268369 ignition[1232]: INFO : Stage: mount Sep 13 01:08:52.272019 ignition[1232]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:08:52.272019 ignition[1232]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 01:08:52.283325 ignition[1232]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 01:08:52.284512 ignition[1232]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 01:08:52.286615 ignition[1232]: INFO : PUT result: OK Sep 13 01:08:52.290071 ignition[1232]: INFO : mount: mount passed Sep 13 01:08:52.291141 ignition[1232]: INFO : Ignition finished successfully Sep 13 01:08:52.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:52.293545 systemd[1]: Finished ignition-mount.service. Sep 13 01:08:52.303107 kernel: audit: type=1130 audit(1757725732.292:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:52.295507 systemd[1]: Starting ignition-files.service... Sep 13 01:08:52.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:52.305267 systemd[1]: Finished sysroot-boot.service. Sep 13 01:08:52.313737 kernel: audit: type=1130 audit(1757725732.304:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:52.314588 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 01:08:52.335678 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1242) Sep 13 01:08:52.340305 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Sep 13 01:08:52.340370 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 01:08:52.340383 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 01:08:52.370704 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 01:08:52.374489 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 01:08:52.385827 ignition[1261]: INFO : Ignition 2.14.0 Sep 13 01:08:52.385827 ignition[1261]: INFO : Stage: files Sep 13 01:08:52.388224 ignition[1261]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:08:52.388224 ignition[1261]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 01:08:52.396027 ignition[1261]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 01:08:52.396027 ignition[1261]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 01:08:52.397781 ignition[1261]: INFO : PUT result: OK Sep 13 01:08:52.400458 ignition[1261]: DEBUG : files: compiled without relabeling support, skipping Sep 13 01:08:52.407286 ignition[1261]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 13 01:08:52.407286 ignition[1261]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 13 01:08:52.420317 ignition[1261]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 13 01:08:52.421612 ignition[1261]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 13 01:08:52.422981 ignition[1261]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 13 01:08:52.422981 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 13 01:08:52.422981 ignition[1261]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Sep 13 01:08:52.421836 unknown[1261]: wrote ssh authorized keys file for user: core Sep 13 01:08:52.482673 ignition[1261]: INFO : GET result: OK Sep 13 01:08:53.150338 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 13 01:08:53.152132 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 13 01:08:53.152132 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 01:08:53.159908 ignition[1261]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2299709639" Sep 13 01:08:53.162014 ignition[1261]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2299709639": device or resource busy Sep 13 01:08:53.162014 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2299709639", trying btrfs: device or resource busy Sep 13 01:08:53.162014 ignition[1261]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2299709639" Sep 13 01:08:53.169118 ignition[1261]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2299709639" Sep 13 01:08:53.198310 ignition[1261]: INFO : op(3): [started] unmounting "/mnt/oem2299709639" Sep 13 01:08:53.198310 ignition[1261]: INFO : op(3): [finished] unmounting "/mnt/oem2299709639" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 01:08:53.201655 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 01:08:53.200527 systemd[1]: mnt-oem2299709639.mount: Deactivated successfully. Sep 13 01:08:53.215712 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 01:08:53.215712 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 01:08:53.215712 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 01:08:53.215712 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 01:08:53.215712 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 13 01:08:53.215712 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 01:08:53.215712 ignition[1261]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3950892552" Sep 13 01:08:53.215712 ignition[1261]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3950892552": device or resource busy Sep 13 01:08:53.215712 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3950892552", trying btrfs: device or resource busy Sep 13 01:08:53.215712 ignition[1261]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3950892552" Sep 13 01:08:53.215712 ignition[1261]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3950892552" Sep 13 01:08:53.215712 ignition[1261]: INFO : op(6): [started] unmounting "/mnt/oem3950892552" Sep 13 01:08:53.215712 ignition[1261]: INFO : op(6): [finished] unmounting "/mnt/oem3950892552" Sep 13 01:08:53.215712 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 13 01:08:53.215712 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 13 01:08:53.215712 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 01:08:53.212439 systemd[1]: mnt-oem3950892552.mount: Deactivated successfully. Sep 13 01:08:53.239703 ignition[1261]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375424223" Sep 13 01:08:53.239703 ignition[1261]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375424223": device or resource busy Sep 13 01:08:53.239703 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2375424223", trying btrfs: device or resource busy Sep 13 01:08:53.239703 ignition[1261]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375424223" Sep 13 01:08:53.239703 ignition[1261]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2375424223" Sep 13 01:08:53.239703 ignition[1261]: INFO : op(9): [started] unmounting "/mnt/oem2375424223" Sep 13 01:08:53.239703 ignition[1261]: INFO : op(9): [finished] unmounting "/mnt/oem2375424223" Sep 13 01:08:53.239703 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 13 01:08:53.239703 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 01:08:53.239703 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 01:08:53.239703 ignition[1261]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1261638092" Sep 13 01:08:53.239703 ignition[1261]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1261638092": device or resource busy Sep 13 01:08:53.239703 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1261638092", trying btrfs: device or resource busy Sep 13 01:08:53.239703 ignition[1261]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1261638092" Sep 13 01:08:53.239703 ignition[1261]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1261638092" Sep 13 01:08:53.239703 ignition[1261]: INFO : op(c): [started] unmounting "/mnt/oem1261638092" Sep 13 01:08:53.239703 ignition[1261]: INFO : op(c): [finished] unmounting "/mnt/oem1261638092" Sep 13 01:08:53.239703 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 01:08:53.239703 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 01:08:53.239703 ignition[1261]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Sep 13 01:08:53.822002 ignition[1261]: INFO : GET result: OK Sep 13 01:08:54.854972 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 01:08:54.854972 ignition[1261]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Sep 13 01:08:54.854972 ignition[1261]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(12): [started] processing unit "nvidia.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(12): [finished] processing unit "nvidia.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 13 01:08:54.862853 ignition[1261]: INFO : files: files passed Sep 13 01:08:54.955152 kernel: audit: type=1130 audit(1757725734.866:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.955189 kernel: audit: type=1130 audit(1757725734.884:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.955212 kernel: audit: type=1131 audit(1757725734.884:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.955232 kernel: audit: type=1130 audit(1757725734.898:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.955258 kernel: audit: type=1130 audit(1757725734.933:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.955278 kernel: audit: type=1131 audit(1757725734.933:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.955590 ignition[1261]: INFO : Ignition finished successfully Sep 13 01:08:54.865841 systemd[1]: Finished ignition-files.service. Sep 13 01:08:54.876345 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 13 01:08:54.959934 initrd-setup-root-after-ignition[1286]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 13 01:08:54.878959 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 13 01:08:54.880918 systemd[1]: Starting ignition-quench.service... Sep 13 01:08:54.885187 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 13 01:08:54.885352 systemd[1]: Finished ignition-quench.service. Sep 13 01:08:54.899237 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 13 01:08:54.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.900375 systemd[1]: Reached target ignition-complete.target. Sep 13 01:08:54.979239 kernel: audit: type=1130 audit(1757725734.968:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.910054 systemd[1]: Starting initrd-parse-etc.service... Sep 13 01:08:54.933457 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 13 01:08:54.933591 systemd[1]: Finished initrd-parse-etc.service. Sep 13 01:08:54.935698 systemd[1]: Reached target initrd-fs.target. Sep 13 01:08:54.948033 systemd[1]: Reached target initrd.target. Sep 13 01:08:54.950343 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 13 01:08:54.951702 systemd[1]: Starting dracut-pre-pivot.service... Sep 13 01:08:54.968936 systemd[1]: Finished dracut-pre-pivot.service. Sep 13 01:08:54.971653 systemd[1]: Starting initrd-cleanup.service... Sep 13 01:08:54.991470 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 13 01:08:54.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.991596 systemd[1]: Finished initrd-cleanup.service. Sep 13 01:08:54.993876 systemd[1]: Stopped target nss-lookup.target. Sep 13 01:08:54.994973 systemd[1]: Stopped target remote-cryptsetup.target. Sep 13 01:08:54.996109 systemd[1]: Stopped target timers.target. Sep 13 01:08:54.997248 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 13 01:08:54.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:54.997332 systemd[1]: Stopped dracut-pre-pivot.service. Sep 13 01:08:54.998559 systemd[1]: Stopped target initrd.target. Sep 13 01:08:54.999709 systemd[1]: Stopped target basic.target. Sep 13 01:08:55.000815 systemd[1]: Stopped target ignition-complete.target. Sep 13 01:08:55.001956 systemd[1]: Stopped target ignition-diskful.target. Sep 13 01:08:55.002987 systemd[1]: Stopped target initrd-root-device.target. Sep 13 01:08:55.004038 systemd[1]: Stopped target remote-fs.target. Sep 13 01:08:55.005069 systemd[1]: Stopped target remote-fs-pre.target. Sep 13 01:08:55.006257 systemd[1]: Stopped target sysinit.target. Sep 13 01:08:55.007269 systemd[1]: Stopped target local-fs.target. Sep 13 01:08:55.008279 systemd[1]: Stopped target local-fs-pre.target. Sep 13 01:08:55.009287 systemd[1]: Stopped target swap.target. Sep 13 01:08:55.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.010426 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 13 01:08:55.010513 systemd[1]: Stopped dracut-pre-mount.service. Sep 13 01:08:55.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.011550 systemd[1]: Stopped target cryptsetup.target. Sep 13 01:08:55.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.012565 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 13 01:08:55.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.012644 systemd[1]: Stopped dracut-initqueue.service. Sep 13 01:08:55.013860 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 13 01:08:55.013930 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 13 01:08:55.014985 systemd[1]: ignition-files.service: Deactivated successfully. Sep 13 01:08:55.015045 systemd[1]: Stopped ignition-files.service. Sep 13 01:08:55.017139 systemd[1]: Stopping ignition-mount.service... Sep 13 01:08:55.024701 systemd[1]: Stopping iscsiuio.service... Sep 13 01:08:55.026622 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 13 01:08:55.027736 systemd[1]: Stopped kmod-static-nodes.service. Sep 13 01:08:55.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.030873 systemd[1]: Stopping sysroot-boot.service... Sep 13 01:08:55.032842 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 13 01:08:55.033800 ignition[1299]: INFO : Ignition 2.14.0 Sep 13 01:08:55.033800 ignition[1299]: INFO : Stage: umount Sep 13 01:08:55.036953 ignition[1299]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:08:55.036953 ignition[1299]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 01:08:55.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.035997 systemd[1]: Stopped systemd-udev-trigger.service. Sep 13 01:08:55.053281 ignition[1299]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 01:08:55.053281 ignition[1299]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 01:08:55.053281 ignition[1299]: INFO : PUT result: OK Sep 13 01:08:55.038965 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 13 01:08:55.039046 systemd[1]: Stopped dracut-pre-trigger.service. Sep 13 01:08:55.040713 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 13 01:08:55.040850 systemd[1]: Stopped iscsiuio.service. Sep 13 01:08:55.065838 ignition[1299]: INFO : umount: umount passed Sep 13 01:08:55.065838 ignition[1299]: INFO : Ignition finished successfully Sep 13 01:08:55.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.066582 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 13 01:08:55.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.066727 systemd[1]: Stopped ignition-mount.service. Sep 13 01:08:55.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.067970 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 13 01:08:55.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.068037 systemd[1]: Stopped ignition-disks.service. Sep 13 01:08:55.069371 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 13 01:08:55.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.069435 systemd[1]: Stopped ignition-kargs.service. Sep 13 01:08:55.070813 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 13 01:08:55.070875 systemd[1]: Stopped ignition-fetch.service. Sep 13 01:08:55.071992 systemd[1]: Stopped target network.target. Sep 13 01:08:55.073784 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 13 01:08:55.073868 systemd[1]: Stopped ignition-fetch-offline.service. Sep 13 01:08:55.075368 systemd[1]: Stopped target paths.target. Sep 13 01:08:55.077633 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 13 01:08:55.079747 systemd[1]: Stopped systemd-ask-password-console.path. Sep 13 01:08:55.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.080423 systemd[1]: Stopped target slices.target. Sep 13 01:08:55.081512 systemd[1]: Stopped target sockets.target. Sep 13 01:08:55.082808 systemd[1]: iscsid.socket: Deactivated successfully. Sep 13 01:08:55.082850 systemd[1]: Closed iscsid.socket. Sep 13 01:08:55.083958 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 13 01:08:55.084011 systemd[1]: Closed iscsiuio.socket. Sep 13 01:08:55.085078 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 13 01:08:55.085141 systemd[1]: Stopped ignition-setup.service. Sep 13 01:08:55.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.086613 systemd[1]: Stopping systemd-networkd.service... Sep 13 01:08:55.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.087737 systemd[1]: Stopping systemd-resolved.service... Sep 13 01:08:55.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.089858 systemd-networkd[1097]: eth0: DHCPv6 lease lost Sep 13 01:08:55.097000 audit: BPF prog-id=9 op=UNLOAD Sep 13 01:08:55.097000 audit: BPF prog-id=6 op=UNLOAD Sep 13 01:08:55.091841 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 13 01:08:55.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.092583 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 13 01:08:55.094223 systemd[1]: Stopped systemd-networkd.service. Sep 13 01:08:55.095530 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 13 01:08:55.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.095689 systemd[1]: Stopped systemd-resolved.service. Sep 13 01:08:55.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.097079 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 13 01:08:55.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.097203 systemd[1]: Stopped sysroot-boot.service. Sep 13 01:08:55.098187 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 13 01:08:55.098230 systemd[1]: Closed systemd-networkd.socket. Sep 13 01:08:55.099373 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 13 01:08:55.099430 systemd[1]: Stopped initrd-setup-root.service. Sep 13 01:08:55.101491 systemd[1]: Stopping network-cleanup.service... Sep 13 01:08:55.103890 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 13 01:08:55.103966 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 13 01:08:55.105120 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 13 01:08:55.105178 systemd[1]: Stopped systemd-sysctl.service. Sep 13 01:08:55.106458 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 13 01:08:55.106514 systemd[1]: Stopped systemd-modules-load.service. Sep 13 01:08:55.114190 systemd[1]: Stopping systemd-udevd.service... Sep 13 01:08:55.117294 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 13 01:08:55.120760 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 13 01:08:55.120988 systemd[1]: Stopped systemd-udevd.service. Sep 13 01:08:55.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.126335 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 13 01:08:55.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.126458 systemd[1]: Stopped network-cleanup.service. Sep 13 01:08:55.127562 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 13 01:08:55.127616 systemd[1]: Closed systemd-udevd-control.socket. Sep 13 01:08:55.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.128574 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 13 01:08:55.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.128621 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 13 01:08:55.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.129636 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 13 01:08:55.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.129787 systemd[1]: Stopped dracut-pre-udev.service. Sep 13 01:08:55.130976 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 13 01:08:55.131036 systemd[1]: Stopped dracut-cmdline.service. Sep 13 01:08:55.132122 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 13 01:08:55.132178 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 13 01:08:55.134464 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 13 01:08:55.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:55.136691 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 13 01:08:55.136762 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 13 01:08:55.143755 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 13 01:08:55.143887 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 13 01:08:55.144639 systemd[1]: Reached target initrd-switch-root.target. Sep 13 01:08:55.146855 systemd[1]: Starting initrd-switch-root.service... Sep 13 01:08:55.161338 systemd[1]: Switching root. Sep 13 01:08:55.184754 iscsid[1102]: iscsid shutting down. Sep 13 01:08:55.186060 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). Sep 13 01:08:55.186145 systemd-journald[185]: Journal stopped Sep 13 01:09:02.640953 kernel: SELinux: Class mctp_socket not defined in policy. Sep 13 01:09:02.642782 kernel: SELinux: Class anon_inode not defined in policy. Sep 13 01:09:02.642833 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 13 01:09:02.642858 kernel: SELinux: policy capability network_peer_controls=1 Sep 13 01:09:02.642896 kernel: SELinux: policy capability open_perms=1 Sep 13 01:09:02.642917 kernel: SELinux: policy capability extended_socket_class=1 Sep 13 01:09:02.642938 kernel: SELinux: policy capability always_check_network=0 Sep 13 01:09:02.642958 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 13 01:09:02.642978 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 13 01:09:02.642998 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 13 01:09:02.643017 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 13 01:09:02.643043 systemd[1]: Successfully loaded SELinux policy in 120.074ms. Sep 13 01:09:02.643080 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.240ms. Sep 13 01:09:02.643103 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 01:09:02.645279 systemd[1]: Detected virtualization amazon. Sep 13 01:09:02.645322 systemd[1]: Detected architecture x86-64. Sep 13 01:09:02.645344 systemd[1]: Detected first boot. Sep 13 01:09:02.645374 systemd[1]: Initializing machine ID from VM UUID. Sep 13 01:09:02.645396 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 13 01:09:02.645424 systemd[1]: Populated /etc with preset unit settings. Sep 13 01:09:02.645453 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:09:02.645481 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:09:02.645506 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:09:02.645527 kernel: kauditd_printk_skb: 50 callbacks suppressed Sep 13 01:09:02.645547 kernel: audit: type=1334 audit(1757725741.614:87): prog-id=12 op=LOAD Sep 13 01:09:02.645567 kernel: audit: type=1334 audit(1757725741.614:88): prog-id=3 op=UNLOAD Sep 13 01:09:02.645592 kernel: audit: type=1334 audit(1757725741.621:89): prog-id=13 op=LOAD Sep 13 01:09:02.645611 kernel: audit: type=1334 audit(1757725741.623:90): prog-id=14 op=LOAD Sep 13 01:09:02.645631 kernel: audit: type=1334 audit(1757725741.623:91): prog-id=4 op=UNLOAD Sep 13 01:09:02.646776 kernel: audit: type=1334 audit(1757725741.624:92): prog-id=5 op=UNLOAD Sep 13 01:09:02.646818 kernel: audit: type=1131 audit(1757725741.635:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.647193 systemd[1]: iscsid.service: Deactivated successfully. Sep 13 01:09:02.647224 kernel: audit: type=1334 audit(1757725741.706:94): prog-id=12 op=UNLOAD Sep 13 01:09:02.647249 systemd[1]: Stopped iscsid.service. Sep 13 01:09:02.647269 kernel: audit: type=1131 audit(1757725741.722:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.647288 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 13 01:09:02.647307 systemd[1]: Stopped initrd-switch-root.service. Sep 13 01:09:02.647326 kernel: audit: type=1130 audit(1757725741.778:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.647344 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 13 01:09:02.647363 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 13 01:09:02.647382 systemd[1]: Created slice system-addon\x2drun.slice. Sep 13 01:09:02.647404 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Sep 13 01:09:02.647422 systemd[1]: Created slice system-getty.slice. Sep 13 01:09:02.647441 systemd[1]: Created slice system-modprobe.slice. Sep 13 01:09:02.647459 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 13 01:09:02.647479 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 13 01:09:02.647498 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 13 01:09:02.647520 systemd[1]: Created slice user.slice. Sep 13 01:09:02.647539 systemd[1]: Started systemd-ask-password-console.path. Sep 13 01:09:02.647559 systemd[1]: Started systemd-ask-password-wall.path. Sep 13 01:09:02.647584 systemd[1]: Set up automount boot.automount. Sep 13 01:09:02.647603 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 13 01:09:02.647621 systemd[1]: Stopped target initrd-switch-root.target. Sep 13 01:09:02.647641 systemd[1]: Stopped target initrd-fs.target. Sep 13 01:09:02.647673 systemd[1]: Stopped target initrd-root-fs.target. Sep 13 01:09:02.647701 systemd[1]: Reached target integritysetup.target. Sep 13 01:09:02.647724 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 01:09:02.647744 systemd[1]: Reached target remote-fs.target. Sep 13 01:09:02.647762 systemd[1]: Reached target slices.target. Sep 13 01:09:02.647782 systemd[1]: Reached target swap.target. Sep 13 01:09:02.647800 systemd[1]: Reached target torcx.target. Sep 13 01:09:02.656067 systemd[1]: Reached target veritysetup.target. Sep 13 01:09:02.656188 systemd[1]: Listening on systemd-coredump.socket. Sep 13 01:09:02.656214 systemd[1]: Listening on systemd-initctl.socket. Sep 13 01:09:02.656340 systemd[1]: Listening on systemd-networkd.socket. Sep 13 01:09:02.656367 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 01:09:02.656388 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 01:09:02.656409 systemd[1]: Listening on systemd-userdbd.socket. Sep 13 01:09:02.656431 systemd[1]: Mounting dev-hugepages.mount... Sep 13 01:09:02.656455 systemd[1]: Mounting dev-mqueue.mount... Sep 13 01:09:02.656476 systemd[1]: Mounting media.mount... Sep 13 01:09:02.656498 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:02.656523 systemd[1]: Mounting sys-kernel-debug.mount... Sep 13 01:09:02.656544 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 13 01:09:02.656565 systemd[1]: Mounting tmp.mount... Sep 13 01:09:02.656586 systemd[1]: Starting flatcar-tmpfiles.service... Sep 13 01:09:02.656607 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:09:02.656628 systemd[1]: Starting kmod-static-nodes.service... Sep 13 01:09:02.656649 systemd[1]: Starting modprobe@configfs.service... Sep 13 01:09:02.661746 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:09:02.661775 systemd[1]: Starting modprobe@drm.service... Sep 13 01:09:02.661804 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:09:02.661823 systemd[1]: Starting modprobe@fuse.service... Sep 13 01:09:02.661843 systemd[1]: Starting modprobe@loop.service... Sep 13 01:09:02.661866 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 13 01:09:02.661885 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 13 01:09:02.661905 systemd[1]: Stopped systemd-fsck-root.service. Sep 13 01:09:02.661923 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 13 01:09:02.661944 systemd[1]: Stopped systemd-fsck-usr.service. Sep 13 01:09:02.661964 systemd[1]: Stopped systemd-journald.service. Sep 13 01:09:02.662154 systemd[1]: Starting systemd-journald.service... Sep 13 01:09:02.662302 kernel: loop: module loaded Sep 13 01:09:02.662330 systemd[1]: Starting systemd-modules-load.service... Sep 13 01:09:02.662476 kernel: fuse: init (API version 7.34) Sep 13 01:09:02.662500 systemd[1]: Starting systemd-network-generator.service... Sep 13 01:09:02.663156 systemd[1]: Starting systemd-remount-fs.service... Sep 13 01:09:02.663309 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 01:09:02.663335 systemd[1]: verity-setup.service: Deactivated successfully. Sep 13 01:09:02.663472 systemd[1]: Stopped verity-setup.service. Sep 13 01:09:02.663497 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:02.663863 systemd[1]: Mounted dev-hugepages.mount. Sep 13 01:09:02.663895 systemd[1]: Mounted dev-mqueue.mount. Sep 13 01:09:02.663917 systemd[1]: Mounted media.mount. Sep 13 01:09:02.663939 systemd[1]: Mounted sys-kernel-debug.mount. Sep 13 01:09:02.663960 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 13 01:09:02.663981 systemd[1]: Mounted tmp.mount. Sep 13 01:09:02.664003 systemd[1]: Finished kmod-static-nodes.service. Sep 13 01:09:02.664030 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 13 01:09:02.664052 systemd[1]: Finished modprobe@configfs.service. Sep 13 01:09:02.664074 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:09:02.664096 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:09:02.664117 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 01:09:02.664139 systemd[1]: Finished modprobe@drm.service. Sep 13 01:09:02.664163 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:09:02.664184 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:09:02.664205 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 13 01:09:02.664234 systemd-journald[1414]: Journal started Sep 13 01:09:02.664323 systemd-journald[1414]: Runtime Journal (/run/log/journal/ec23ee777363c0fad7e0d678d99424e8) is 4.8M, max 38.3M, 33.5M free. Sep 13 01:08:56.068000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 13 01:08:56.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 01:08:56.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 01:08:56.259000 audit: BPF prog-id=10 op=LOAD Sep 13 01:08:56.259000 audit: BPF prog-id=10 op=UNLOAD Sep 13 01:08:56.259000 audit: BPF prog-id=11 op=LOAD Sep 13 01:08:56.259000 audit: BPF prog-id=11 op=UNLOAD Sep 13 01:08:56.532000 audit[1332]: AVC avc: denied { associate } for pid=1332 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 01:08:56.532000 audit[1332]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001058e4 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=1315 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:08:56.532000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 01:08:56.537000 audit[1332]: AVC avc: denied { associate } for pid=1332 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 13 01:08:56.537000 audit[1332]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001059c9 a2=1ed a3=0 items=2 ppid=1315 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:08:56.537000 audit: CWD cwd="/" Sep 13 01:08:56.537000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:02.679623 systemd[1]: Finished modprobe@fuse.service. Sep 13 01:08:56.537000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:08:56.537000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 01:09:01.614000 audit: BPF prog-id=12 op=LOAD Sep 13 01:09:01.614000 audit: BPF prog-id=3 op=UNLOAD Sep 13 01:09:01.621000 audit: BPF prog-id=13 op=LOAD Sep 13 01:09:01.623000 audit: BPF prog-id=14 op=LOAD Sep 13 01:09:01.623000 audit: BPF prog-id=4 op=UNLOAD Sep 13 01:09:01.624000 audit: BPF prog-id=5 op=UNLOAD Sep 13 01:09:01.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:01.706000 audit: BPF prog-id=12 op=UNLOAD Sep 13 01:09:01.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:01.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:01.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.391000 audit: BPF prog-id=15 op=LOAD Sep 13 01:09:02.391000 audit: BPF prog-id=16 op=LOAD Sep 13 01:09:02.391000 audit: BPF prog-id=17 op=LOAD Sep 13 01:09:02.391000 audit: BPF prog-id=13 op=UNLOAD Sep 13 01:09:02.391000 audit: BPF prog-id=14 op=UNLOAD Sep 13 01:09:02.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.623000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 13 01:09:02.623000 audit[1414]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffdf22a3430 a2=4000 a3=7ffdf22a34cc items=0 ppid=1 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:02.623000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 13 01:09:02.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.707742 systemd[1]: Started systemd-journald.service. Sep 13 01:09:02.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:01.611780 systemd[1]: Queued start job for default target multi-user.target. Sep 13 01:08:56.515701 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:09:02.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:01.611944 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Sep 13 01:08:56.516300 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 01:09:01.634774 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 13 01:08:56.516332 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 01:09:02.710253 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:08:56.516390 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 13 01:09:02.711740 systemd[1]: Finished modprobe@loop.service. Sep 13 01:08:56.516408 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 13 01:08:56.516455 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 13 01:08:56.516476 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 13 01:08:56.516767 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 13 01:09:02.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:08:56.516827 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 01:08:56.516849 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 01:08:56.525290 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 13 01:08:56.525357 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 13 01:08:56.525390 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 13 01:08:56.525415 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 13 01:08:56.525445 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 13 01:08:56.525469 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:08:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 13 01:09:00.472653 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:09:00Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:09:00.472933 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:09:00Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:09:00.473050 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:09:00Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:09:00.473253 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:09:00Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:09:00.473304 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:09:00Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 13 01:09:00.473362 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2025-09-13T01:09:00Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 13 01:09:02.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.730809 systemd[1]: Finished systemd-modules-load.service. Sep 13 01:09:02.732879 systemd[1]: Finished systemd-network-generator.service. Sep 13 01:09:02.734261 systemd[1]: Finished systemd-remount-fs.service. Sep 13 01:09:02.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.735985 systemd[1]: Reached target network-pre.target. Sep 13 01:09:02.745577 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 13 01:09:02.749381 systemd[1]: Mounting sys-kernel-config.mount... Sep 13 01:09:02.768353 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 13 01:09:02.782228 systemd[1]: Starting systemd-hwdb-update.service... Sep 13 01:09:02.790979 systemd[1]: Starting systemd-journal-flush.service... Sep 13 01:09:02.792708 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 01:09:02.797812 systemd[1]: Starting systemd-random-seed.service... Sep 13 01:09:02.802345 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 01:09:02.811975 systemd[1]: Starting systemd-sysctl.service... Sep 13 01:09:02.818031 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 13 01:09:02.819376 systemd[1]: Mounted sys-kernel-config.mount. Sep 13 01:09:02.862913 systemd-journald[1414]: Time spent on flushing to /var/log/journal/ec23ee777363c0fad7e0d678d99424e8 is 99.944ms for 1218 entries. Sep 13 01:09:02.862913 systemd-journald[1414]: System Journal (/var/log/journal/ec23ee777363c0fad7e0d678d99424e8) is 8.0M, max 195.6M, 187.6M free. Sep 13 01:09:03.016447 systemd-journald[1414]: Received client request to flush runtime journal. Sep 13 01:09:02.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:02.866727 systemd[1]: Finished flatcar-tmpfiles.service. Sep 13 01:09:02.874155 systemd[1]: Starting systemd-sysusers.service... Sep 13 01:09:03.018072 udevadm[1449]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Sep 13 01:09:02.883455 systemd[1]: Finished systemd-random-seed.service. Sep 13 01:09:02.884702 systemd[1]: Reached target first-boot-complete.target. Sep 13 01:09:02.950474 systemd[1]: Finished systemd-sysctl.service. Sep 13 01:09:02.952153 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 01:09:02.954868 systemd[1]: Starting systemd-udev-settle.service... Sep 13 01:09:03.019295 systemd[1]: Finished systemd-journal-flush.service. Sep 13 01:09:03.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:03.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:03.149761 systemd[1]: Finished systemd-sysusers.service. Sep 13 01:09:03.924352 systemd[1]: Finished systemd-hwdb-update.service. Sep 13 01:09:03.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:03.924000 audit: BPF prog-id=18 op=LOAD Sep 13 01:09:03.924000 audit: BPF prog-id=19 op=LOAD Sep 13 01:09:03.924000 audit: BPF prog-id=7 op=UNLOAD Sep 13 01:09:03.924000 audit: BPF prog-id=8 op=UNLOAD Sep 13 01:09:03.926722 systemd[1]: Starting systemd-udevd.service... Sep 13 01:09:03.947105 systemd-udevd[1451]: Using default interface naming scheme 'v252'. Sep 13 01:09:04.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:04.113000 audit: BPF prog-id=20 op=LOAD Sep 13 01:09:04.112620 systemd[1]: Started systemd-udevd.service. Sep 13 01:09:04.118767 systemd[1]: Starting systemd-networkd.service... Sep 13 01:09:04.152000 audit: BPF prog-id=21 op=LOAD Sep 13 01:09:04.152000 audit: BPF prog-id=22 op=LOAD Sep 13 01:09:04.152000 audit: BPF prog-id=23 op=LOAD Sep 13 01:09:04.155237 systemd[1]: Starting systemd-userdbd.service... Sep 13 01:09:04.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:04.213296 systemd[1]: Started systemd-userdbd.service. Sep 13 01:09:04.222822 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 13 01:09:04.229188 (udev-worker)[1455]: Network interface NamePolicy= disabled on kernel command line. Sep 13 01:09:04.306677 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Sep 13 01:09:04.328071 kernel: ACPI: button: Power Button [PWRF] Sep 13 01:09:04.312000 audit[1454]: AVC avc: denied { confidentiality } for pid=1454 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 13 01:09:04.312000 audit[1454]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55c9d5ea93a0 a1=338ec a2=7f192bed2bc5 a3=5 items=110 ppid=1451 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:04.312000 audit: CWD cwd="/" Sep 13 01:09:04.312000 audit: PATH item=0 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=1 name=(null) inode=15414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=2 name=(null) inode=15414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=3 name=(null) inode=15415 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=4 name=(null) inode=15414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=5 name=(null) inode=15416 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=6 name=(null) inode=15414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=7 name=(null) inode=15417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=8 name=(null) inode=15417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=9 name=(null) inode=15418 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=10 name=(null) inode=15417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=11 name=(null) inode=15419 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=12 name=(null) inode=15417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=13 name=(null) inode=15420 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=14 name=(null) inode=15417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=15 name=(null) inode=15421 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=16 name=(null) inode=15417 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=17 name=(null) inode=15422 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=18 name=(null) inode=15414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=19 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=20 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=21 name=(null) inode=15424 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=22 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=23 name=(null) inode=15425 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=24 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=25 name=(null) inode=15426 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=26 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=27 name=(null) inode=15427 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=28 name=(null) inode=15423 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=29 name=(null) inode=15428 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=30 name=(null) inode=15414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=31 name=(null) inode=15429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=32 name=(null) inode=15429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=33 name=(null) inode=15430 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=34 name=(null) inode=15429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=35 name=(null) inode=15431 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=36 name=(null) inode=15429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=37 name=(null) inode=15432 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=38 name=(null) inode=15429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=39 name=(null) inode=15433 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=40 name=(null) inode=15429 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=41 name=(null) inode=15434 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=42 name=(null) inode=15414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=43 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=44 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=45 name=(null) inode=15436 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=46 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=47 name=(null) inode=15437 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=48 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=49 name=(null) inode=15438 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=50 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=51 name=(null) inode=15439 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=52 name=(null) inode=15435 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=53 name=(null) inode=15440 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=54 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=55 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=56 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=57 name=(null) inode=15442 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=58 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=59 name=(null) inode=15443 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=60 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=61 name=(null) inode=15444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=62 name=(null) inode=15444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=63 name=(null) inode=15445 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=64 name=(null) inode=15444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=65 name=(null) inode=15446 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=66 name=(null) inode=15444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=67 name=(null) inode=15447 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=68 name=(null) inode=15444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=69 name=(null) inode=15448 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=70 name=(null) inode=15444 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=71 name=(null) inode=15449 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=72 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=73 name=(null) inode=15450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=74 name=(null) inode=15450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=75 name=(null) inode=15451 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=76 name=(null) inode=15450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=77 name=(null) inode=15452 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=78 name=(null) inode=15450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=79 name=(null) inode=15453 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=80 name=(null) inode=15450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=81 name=(null) inode=15454 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=82 name=(null) inode=15450 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=83 name=(null) inode=15455 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=84 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=85 name=(null) inode=15456 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=86 name=(null) inode=15456 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=87 name=(null) inode=15457 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=88 name=(null) inode=15456 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=89 name=(null) inode=15458 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=90 name=(null) inode=15456 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=91 name=(null) inode=15459 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=92 name=(null) inode=15456 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=93 name=(null) inode=15460 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=94 name=(null) inode=15456 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=95 name=(null) inode=15461 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=96 name=(null) inode=15441 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=97 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=98 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=99 name=(null) inode=15463 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=100 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=101 name=(null) inode=15464 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=102 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=103 name=(null) inode=15465 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=104 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=105 name=(null) inode=15466 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=106 name=(null) inode=15462 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=107 name=(null) inode=15467 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PATH item=109 name=(null) inode=15470 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:09:04.312000 audit: PROCTITLE proctitle="(udev-worker)" Sep 13 01:09:04.356687 kernel: piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr Sep 13 01:09:04.381905 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Sep 13 01:09:04.381943 kernel: ACPI: button: Sleep Button [SLPF] Sep 13 01:09:04.389622 systemd-networkd[1458]: lo: Link UP Sep 13 01:09:04.389650 systemd-networkd[1458]: lo: Gained carrier Sep 13 01:09:04.391017 systemd-networkd[1458]: Enumeration completed Sep 13 01:09:04.391151 systemd[1]: Started systemd-networkd.service. Sep 13 01:09:04.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:04.393747 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 13 01:09:04.393850 systemd-networkd[1458]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 01:09:04.400749 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:09:04.400982 systemd-networkd[1458]: eth0: Link UP Sep 13 01:09:04.401275 systemd-networkd[1458]: eth0: Gained carrier Sep 13 01:09:04.418697 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Sep 13 01:09:04.419924 systemd-networkd[1458]: eth0: DHCPv4 address 172.31.27.15/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 13 01:09:04.428706 kernel: mousedev: PS/2 mouse device common for all mice Sep 13 01:09:04.559277 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 01:09:04.562902 systemd[1]: Finished systemd-udev-settle.service. Sep 13 01:09:04.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:04.565438 systemd[1]: Starting lvm2-activation-early.service... Sep 13 01:09:04.627492 lvm[1565]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 01:09:04.655321 systemd[1]: Finished lvm2-activation-early.service. Sep 13 01:09:04.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:04.656047 systemd[1]: Reached target cryptsetup.target. Sep 13 01:09:04.657972 systemd[1]: Starting lvm2-activation.service... Sep 13 01:09:04.663194 lvm[1566]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 01:09:04.691133 systemd[1]: Finished lvm2-activation.service. Sep 13 01:09:04.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:04.691813 systemd[1]: Reached target local-fs-pre.target. Sep 13 01:09:04.692301 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 13 01:09:04.692330 systemd[1]: Reached target local-fs.target. Sep 13 01:09:04.692808 systemd[1]: Reached target machines.target. Sep 13 01:09:04.694936 systemd[1]: Starting ldconfig.service... Sep 13 01:09:04.696653 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:09:04.696830 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:09:04.698568 systemd[1]: Starting systemd-boot-update.service... Sep 13 01:09:04.700204 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 13 01:09:04.702458 systemd[1]: Starting systemd-machine-id-commit.service... Sep 13 01:09:04.705174 systemd[1]: Starting systemd-sysext.service... Sep 13 01:09:04.712747 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1568 (bootctl) Sep 13 01:09:04.714169 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 13 01:09:04.725458 systemd[1]: Unmounting usr-share-oem.mount... Sep 13 01:09:04.732960 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 13 01:09:04.733202 systemd[1]: Unmounted usr-share-oem.mount. Sep 13 01:09:04.751688 kernel: loop0: detected capacity change from 0 to 229808 Sep 13 01:09:04.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:04.880607 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 13 01:09:04.914948 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 13 01:09:04.915671 systemd[1]: Finished systemd-machine-id-commit.service. Sep 13 01:09:04.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.058492 systemd-fsck[1579]: fsck.fat 4.2 (2021-01-31) Sep 13 01:09:05.058492 systemd-fsck[1579]: /dev/nvme0n1p1: 790 files, 120761/258078 clusters Sep 13 01:09:05.061232 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 13 01:09:05.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.063821 systemd[1]: Mounting boot.mount... Sep 13 01:09:05.135673 systemd[1]: Mounted boot.mount. Sep 13 01:09:05.201833 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 13 01:09:05.212800 systemd[1]: Finished systemd-boot-update.service. Sep 13 01:09:05.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.231684 kernel: loop1: detected capacity change from 0 to 229808 Sep 13 01:09:05.274186 (sd-sysext)[1594]: Using extensions 'kubernetes'. Sep 13 01:09:05.274766 (sd-sysext)[1594]: Merged extensions into '/usr'. Sep 13 01:09:05.296898 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.298828 systemd[1]: Mounting usr-share-oem.mount... Sep 13 01:09:05.299625 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.303281 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:09:05.305172 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:09:05.308505 systemd[1]: Starting modprobe@loop.service... Sep 13 01:09:05.309088 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.309299 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:09:05.309579 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.313779 systemd[1]: Mounted usr-share-oem.mount. Sep 13 01:09:05.316716 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:09:05.316916 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:09:05.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.318133 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:09:05.318316 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:09:05.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.319801 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:09:05.319979 systemd[1]: Finished modprobe@loop.service. Sep 13 01:09:05.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.322371 systemd[1]: Finished systemd-sysext.service. Sep 13 01:09:05.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.325434 systemd[1]: Starting ensure-sysext.service... Sep 13 01:09:05.326397 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 01:09:05.326475 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.328114 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 13 01:09:05.336293 systemd[1]: Reloading. Sep 13 01:09:05.386403 systemd-tmpfiles[1601]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 13 01:09:05.406447 systemd-tmpfiles[1601]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 13 01:09:05.432437 systemd-tmpfiles[1601]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 13 01:09:05.434108 /usr/lib/systemd/system-generators/torcx-generator[1626]: time="2025-09-13T01:09:05Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:09:05.434152 /usr/lib/systemd/system-generators/torcx-generator[1626]: time="2025-09-13T01:09:05Z" level=info msg="torcx already run" Sep 13 01:09:05.559181 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:09:05.559206 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:09:05.584479 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:09:05.680000 audit: BPF prog-id=24 op=LOAD Sep 13 01:09:05.681000 audit: BPF prog-id=25 op=LOAD Sep 13 01:09:05.681000 audit: BPF prog-id=18 op=UNLOAD Sep 13 01:09:05.682000 audit: BPF prog-id=19 op=UNLOAD Sep 13 01:09:05.683000 audit: BPF prog-id=26 op=LOAD Sep 13 01:09:05.683000 audit: BPF prog-id=21 op=UNLOAD Sep 13 01:09:05.683000 audit: BPF prog-id=27 op=LOAD Sep 13 01:09:05.684000 audit: BPF prog-id=28 op=LOAD Sep 13 01:09:05.684000 audit: BPF prog-id=22 op=UNLOAD Sep 13 01:09:05.684000 audit: BPF prog-id=23 op=UNLOAD Sep 13 01:09:05.686000 audit: BPF prog-id=29 op=LOAD Sep 13 01:09:05.687000 audit: BPF prog-id=15 op=UNLOAD Sep 13 01:09:05.687000 audit: BPF prog-id=30 op=LOAD Sep 13 01:09:05.687000 audit: BPF prog-id=31 op=LOAD Sep 13 01:09:05.687000 audit: BPF prog-id=16 op=UNLOAD Sep 13 01:09:05.687000 audit: BPF prog-id=17 op=UNLOAD Sep 13 01:09:05.690000 audit: BPF prog-id=32 op=LOAD Sep 13 01:09:05.691000 audit: BPF prog-id=20 op=UNLOAD Sep 13 01:09:05.721134 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.723925 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:09:05.727697 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:09:05.730408 systemd[1]: Starting modprobe@loop.service... Sep 13 01:09:05.731488 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.731713 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:09:05.735528 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:09:05.735719 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:09:05.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.738103 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:09:05.738424 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:09:05.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.739907 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:09:05.740108 systemd[1]: Finished modprobe@loop.service. Sep 13 01:09:05.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.741182 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.741320 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 01:09:05.741475 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.741590 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.744428 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.744798 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.746610 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:09:05.749793 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:09:05.752815 systemd[1]: Starting modprobe@loop.service... Sep 13 01:09:05.753565 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.753844 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:09:05.754024 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.755329 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:09:05.755514 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:09:05.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.757283 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:09:05.757469 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:09:05.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.758739 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:09:05.758912 systemd[1]: Finished modprobe@loop.service. Sep 13 01:09:05.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.764383 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.764764 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.766463 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:09:05.769600 systemd[1]: Starting modprobe@drm.service... Sep 13 01:09:05.772819 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:09:05.775916 systemd[1]: Starting modprobe@loop.service... Sep 13 01:09:05.776739 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.776985 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:09:05.777235 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 01:09:05.778735 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:09:05.778929 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:09:05.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.781917 systemd[1]: Finished ensure-sysext.service. Sep 13 01:09:05.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.784492 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 01:09:05.784809 systemd[1]: Finished modprobe@drm.service. Sep 13 01:09:05.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.785861 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:09:05.786055 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:09:05.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.787232 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:09:05.787418 systemd[1]: Finished modprobe@loop.service. Sep 13 01:09:05.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.788254 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 01:09:05.788315 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 01:09:05.795927 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 13 01:09:05.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.798052 systemd[1]: Starting audit-rules.service... Sep 13 01:09:05.800122 systemd[1]: Starting clean-ca-certificates.service... Sep 13 01:09:05.803016 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 13 01:09:05.804000 audit: BPF prog-id=33 op=LOAD Sep 13 01:09:05.809000 audit: BPF prog-id=34 op=LOAD Sep 13 01:09:05.807226 systemd[1]: Starting systemd-resolved.service... Sep 13 01:09:05.812302 systemd[1]: Starting systemd-timesyncd.service... Sep 13 01:09:05.815866 systemd[1]: Starting systemd-update-utmp.service... Sep 13 01:09:05.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.831621 systemd[1]: Finished clean-ca-certificates.service. Sep 13 01:09:05.832372 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 01:09:05.836000 audit[1694]: SYSTEM_BOOT pid=1694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.839983 systemd[1]: Finished systemd-update-utmp.service. Sep 13 01:09:05.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.890105 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 13 01:09:05.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.907831 systemd-networkd[1458]: eth0: Gained IPv6LL Sep 13 01:09:05.913937 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 13 01:09:05.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.955428 systemd[1]: Started systemd-timesyncd.service. Sep 13 01:09:05.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:05.956127 systemd[1]: Reached target time-set.target. Sep 13 01:09:05.956774 systemd-resolved[1691]: Positive Trust Anchors: Sep 13 01:09:05.957344 systemd-resolved[1691]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 01:09:05.957496 systemd-resolved[1691]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 01:09:05.956000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 13 01:09:05.956000 audit[1708]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcf8a2f840 a2=420 a3=0 items=0 ppid=1688 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:05.956000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 13 01:09:05.958755 augenrules[1708]: No rules Sep 13 01:09:05.959344 systemd[1]: Finished audit-rules.service. Sep 13 01:09:06.058043 systemd-resolved[1691]: Defaulting to hostname 'linux'. Sep 13 01:09:06.059838 systemd[1]: Started systemd-resolved.service. Sep 13 01:09:06.060345 systemd[1]: Reached target network.target. Sep 13 01:09:06.060760 systemd[1]: Reached target network-online.target. Sep 13 01:09:06.061130 systemd[1]: Reached target nss-lookup.target. Sep 13 01:09:06.207237 systemd-timesyncd[1693]: Contacted time server 162.244.81.139:123 (0.flatcar.pool.ntp.org). Sep 13 01:09:06.207417 systemd-timesyncd[1693]: Initial clock synchronization to Sat 2025-09-13 01:09:06.427347 UTC. Sep 13 01:09:06.437261 ldconfig[1567]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 13 01:09:06.443724 systemd[1]: Finished ldconfig.service. Sep 13 01:09:06.445456 systemd[1]: Starting systemd-update-done.service... Sep 13 01:09:06.453894 systemd[1]: Finished systemd-update-done.service. Sep 13 01:09:06.454369 systemd[1]: Reached target sysinit.target. Sep 13 01:09:06.454797 systemd[1]: Started motdgen.path. Sep 13 01:09:06.455147 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 13 01:09:06.455619 systemd[1]: Started logrotate.timer. Sep 13 01:09:06.456033 systemd[1]: Started mdadm.timer. Sep 13 01:09:06.456347 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 13 01:09:06.456672 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 13 01:09:06.456700 systemd[1]: Reached target paths.target. Sep 13 01:09:06.457002 systemd[1]: Reached target timers.target. Sep 13 01:09:06.457621 systemd[1]: Listening on dbus.socket. Sep 13 01:09:06.459020 systemd[1]: Starting docker.socket... Sep 13 01:09:06.462967 systemd[1]: Listening on sshd.socket. Sep 13 01:09:06.463485 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:09:06.464033 systemd[1]: Listening on docker.socket. Sep 13 01:09:06.464625 systemd[1]: Reached target sockets.target. Sep 13 01:09:06.465032 systemd[1]: Reached target basic.target. Sep 13 01:09:06.465405 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 01:09:06.465435 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 01:09:06.466795 systemd[1]: Started amazon-ssm-agent.service. Sep 13 01:09:06.468379 systemd[1]: Starting containerd.service... Sep 13 01:09:06.469811 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Sep 13 01:09:06.472395 systemd[1]: Starting dbus.service... Sep 13 01:09:06.474293 systemd[1]: Starting enable-oem-cloudinit.service... Sep 13 01:09:06.476493 systemd[1]: Starting extend-filesystems.service... Sep 13 01:09:06.477159 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 13 01:09:06.496497 jq[1721]: false Sep 13 01:09:06.497795 extend-filesystems[1722]: Found loop1 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1p1 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1p2 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1p3 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found usr Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1p4 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1p6 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1p7 Sep 13 01:09:06.497795 extend-filesystems[1722]: Found nvme0n1p9 Sep 13 01:09:06.497795 extend-filesystems[1722]: Checking size of /dev/nvme0n1p9 Sep 13 01:09:06.509997 systemd[1]: Starting kubelet.service... Sep 13 01:09:06.512479 systemd[1]: Starting motdgen.service... Sep 13 01:09:06.515504 systemd[1]: Started nvidia.service. Sep 13 01:09:06.518982 systemd[1]: Starting prepare-helm.service... Sep 13 01:09:06.531903 extend-filesystems[1722]: Resized partition /dev/nvme0n1p9 Sep 13 01:09:06.521325 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 13 01:09:06.523648 systemd[1]: Starting sshd-keygen.service... Sep 13 01:09:06.533101 systemd[1]: Starting systemd-logind.service... Sep 13 01:09:06.533779 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:09:06.533882 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 13 01:09:06.536452 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 13 01:09:06.537597 systemd[1]: Starting update-engine.service... Sep 13 01:09:06.539951 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 13 01:09:06.544487 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 13 01:09:06.545997 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 13 01:09:06.594878 jq[1741]: true Sep 13 01:09:06.598794 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 13 01:09:06.599074 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 13 01:09:06.616313 extend-filesystems[1737]: resize2fs 1.46.5 (30-Dec-2021) Sep 13 01:09:06.632734 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Sep 13 01:09:06.642866 systemd[1]: motdgen.service: Deactivated successfully. Sep 13 01:09:06.643109 systemd[1]: Finished motdgen.service. Sep 13 01:09:06.658980 jq[1759]: true Sep 13 01:09:06.685870 dbus-daemon[1720]: [system] SELinux support is enabled Sep 13 01:09:06.686110 systemd[1]: Started dbus.service. Sep 13 01:09:06.690095 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 13 01:09:06.690137 systemd[1]: Reached target system-config.target. Sep 13 01:09:06.690872 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 13 01:09:06.690900 systemd[1]: Reached target user-config.target. Sep 13 01:09:06.692980 dbus-daemon[1720]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1458 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Sep 13 01:09:06.699793 systemd[1]: Starting systemd-hostnamed.service... Sep 13 01:09:06.728246 tar[1747]: linux-amd64/LICENSE Sep 13 01:09:06.730294 tar[1747]: linux-amd64/helm Sep 13 01:09:06.847253 env[1748]: time="2025-09-13T01:09:06.847185955Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 13 01:09:06.972359 update_engine[1740]: I0913 01:09:06.970957 1740 main.cc:92] Flatcar Update Engine starting Sep 13 01:09:06.998129 update_engine[1740]: I0913 01:09:06.989037 1740 update_check_scheduler.cc:74] Next update check in 3m15s Sep 13 01:09:06.988957 systemd[1]: Started update-engine.service. Sep 13 01:09:06.991970 systemd[1]: Started locksmithd.service. Sep 13 01:09:07.006716 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Sep 13 01:09:07.018135 amazon-ssm-agent[1717]: 2025/09/13 01:09:07 Failed to load instance info from vault. RegistrationKey does not exist. Sep 13 01:09:07.020387 amazon-ssm-agent[1717]: Initializing new seelog logger Sep 13 01:09:07.020751 amazon-ssm-agent[1717]: New Seelog Logger Creation Complete Sep 13 01:09:07.021265 systemd-logind[1738]: Watching system buttons on /dev/input/event1 (Power Button) Sep 13 01:09:07.021908 extend-filesystems[1737]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Sep 13 01:09:07.021908 extend-filesystems[1737]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 13 01:09:07.021908 extend-filesystems[1737]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Sep 13 01:09:07.026649 extend-filesystems[1722]: Resized filesystem in /dev/nvme0n1p9 Sep 13 01:09:07.027503 amazon-ssm-agent[1717]: 2025/09/13 01:09:07 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Sep 13 01:09:07.027503 amazon-ssm-agent[1717]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Sep 13 01:09:07.027503 amazon-ssm-agent[1717]: 2025/09/13 01:09:07 processing appconfig overrides Sep 13 01:09:07.022815 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 13 01:09:07.027758 bash[1794]: Updated "/home/core/.ssh/authorized_keys" Sep 13 01:09:07.023070 systemd[1]: Finished extend-filesystems.service. Sep 13 01:09:07.024576 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 13 01:09:07.027995 systemd-logind[1738]: Watching system buttons on /dev/input/event2 (Sleep Button) Sep 13 01:09:07.028026 systemd-logind[1738]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Sep 13 01:09:07.028391 systemd-logind[1738]: New seat seat0. Sep 13 01:09:07.034653 systemd[1]: Started systemd-logind.service. Sep 13 01:09:07.083890 env[1748]: time="2025-09-13T01:09:07.083833578Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 13 01:09:07.084052 env[1748]: time="2025-09-13T01:09:07.084026391Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:09:07.089991 env[1748]: time="2025-09-13T01:09:07.089931142Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 13 01:09:07.089991 env[1748]: time="2025-09-13T01:09:07.089987845Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:09:07.090342 env[1748]: time="2025-09-13T01:09:07.090311319Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 01:09:07.090410 env[1748]: time="2025-09-13T01:09:07.090344300Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 13 01:09:07.090410 env[1748]: time="2025-09-13T01:09:07.090364794Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 13 01:09:07.090410 env[1748]: time="2025-09-13T01:09:07.090380092Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 13 01:09:07.090552 env[1748]: time="2025-09-13T01:09:07.090498790Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:09:07.090841 env[1748]: time="2025-09-13T01:09:07.090814088Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:09:07.091073 env[1748]: time="2025-09-13T01:09:07.091043747Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 01:09:07.091135 env[1748]: time="2025-09-13T01:09:07.091075765Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 13 01:09:07.091181 env[1748]: time="2025-09-13T01:09:07.091155175Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 13 01:09:07.091181 env[1748]: time="2025-09-13T01:09:07.091174661Z" level=info msg="metadata content store policy set" policy=shared Sep 13 01:09:07.103170 systemd[1]: nvidia.service: Deactivated successfully. Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106599958Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106671238Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106714171Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106763546Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106785557Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106806526Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106826336Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106846488Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106867052Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106887488Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106913217Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.106936958Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.107091910Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 13 01:09:07.107904 env[1748]: time="2025-09-13T01:09:07.107193437Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 13 01:09:07.108551 env[1748]: time="2025-09-13T01:09:07.107543636Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 13 01:09:07.108551 env[1748]: time="2025-09-13T01:09:07.107584332Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.108551 env[1748]: time="2025-09-13T01:09:07.107606280Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 13 01:09:07.108551 env[1748]: time="2025-09-13T01:09:07.107671349Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109286190Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109397673Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109419250Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109439870Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109460174Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109480462Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109500548Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.110256 env[1748]: time="2025-09-13T01:09:07.109523670Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110728067Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110764511Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110786643Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110806993Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110831571Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110850125Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110875851Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 13 01:09:07.111771 env[1748]: time="2025-09-13T01:09:07.110922523Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 13 01:09:07.112126 env[1748]: time="2025-09-13T01:09:07.111225028Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 13 01:09:07.112126 env[1748]: time="2025-09-13T01:09:07.111309443Z" level=info msg="Connect containerd service" Sep 13 01:09:07.112126 env[1748]: time="2025-09-13T01:09:07.111357759Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 13 01:09:07.118840 env[1748]: time="2025-09-13T01:09:07.112890349Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 01:09:07.118840 env[1748]: time="2025-09-13T01:09:07.113205500Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 13 01:09:07.118840 env[1748]: time="2025-09-13T01:09:07.113260709Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 13 01:09:07.118840 env[1748]: time="2025-09-13T01:09:07.116791898Z" level=info msg="containerd successfully booted in 0.358014s" Sep 13 01:09:07.113412 systemd[1]: Started containerd.service. Sep 13 01:09:07.124585 env[1748]: time="2025-09-13T01:09:07.124477768Z" level=info msg="Start subscribing containerd event" Sep 13 01:09:07.124998 env[1748]: time="2025-09-13T01:09:07.124970107Z" level=info msg="Start recovering state" Sep 13 01:09:07.125201 env[1748]: time="2025-09-13T01:09:07.125186158Z" level=info msg="Start event monitor" Sep 13 01:09:07.125288 env[1748]: time="2025-09-13T01:09:07.125272478Z" level=info msg="Start snapshots syncer" Sep 13 01:09:07.125366 env[1748]: time="2025-09-13T01:09:07.125352251Z" level=info msg="Start cni network conf syncer for default" Sep 13 01:09:07.125439 env[1748]: time="2025-09-13T01:09:07.125426474Z" level=info msg="Start streaming server" Sep 13 01:09:07.129892 dbus-daemon[1720]: [system] Successfully activated service 'org.freedesktop.hostname1' Sep 13 01:09:07.130094 systemd[1]: Started systemd-hostnamed.service. Sep 13 01:09:07.132513 dbus-daemon[1720]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1776 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Sep 13 01:09:07.136581 systemd[1]: Starting polkit.service... Sep 13 01:09:07.168803 polkitd[1830]: Started polkitd version 121 Sep 13 01:09:07.201036 polkitd[1830]: Loading rules from directory /etc/polkit-1/rules.d Sep 13 01:09:07.201109 polkitd[1830]: Loading rules from directory /usr/share/polkit-1/rules.d Sep 13 01:09:07.203112 polkitd[1830]: Finished loading, compiling and executing 2 rules Sep 13 01:09:07.203853 dbus-daemon[1720]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Sep 13 01:09:07.204048 systemd[1]: Started polkit.service. Sep 13 01:09:07.206526 polkitd[1830]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Sep 13 01:09:07.228457 systemd-hostnamed[1776]: Hostname set to (transient) Sep 13 01:09:07.228590 systemd-resolved[1691]: System hostname changed to 'ip-172-31-27-15'. Sep 13 01:09:07.506936 coreos-metadata[1719]: Sep 13 01:09:07.506 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Sep 13 01:09:07.511993 coreos-metadata[1719]: Sep 13 01:09:07.511 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Sep 13 01:09:07.512612 coreos-metadata[1719]: Sep 13 01:09:07.512 INFO Fetch successful Sep 13 01:09:07.512612 coreos-metadata[1719]: Sep 13 01:09:07.512 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Sep 13 01:09:07.514258 coreos-metadata[1719]: Sep 13 01:09:07.513 INFO Fetch successful Sep 13 01:09:07.515269 unknown[1719]: wrote ssh authorized keys file for user: core Sep 13 01:09:07.531075 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Create new startup processor Sep 13 01:09:07.533274 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [LongRunningPluginsManager] registered plugins: {} Sep 13 01:09:07.533438 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing bookkeeping folders Sep 13 01:09:07.533520 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO removing the completed state files Sep 13 01:09:07.534516 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing bookkeeping folders for long running plugins Sep 13 01:09:07.534629 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Sep 13 01:09:07.534718 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing healthcheck folders for long running plugins Sep 13 01:09:07.534795 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing locations for inventory plugin Sep 13 01:09:07.534878 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing default location for custom inventory Sep 13 01:09:07.534943 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing default location for file inventory Sep 13 01:09:07.535050 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Initializing default location for role inventory Sep 13 01:09:07.535117 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Init the cloudwatchlogs publisher Sep 13 01:09:07.535669 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:configureDocker Sep 13 01:09:07.535797 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:runDockerAction Sep 13 01:09:07.535877 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:refreshAssociation Sep 13 01:09:07.535985 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:configurePackage Sep 13 01:09:07.536036 update-ssh-keys[1906]: Updated "/home/core/.ssh/authorized_keys" Sep 13 01:09:07.536349 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:softwareInventory Sep 13 01:09:07.536428 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:runPowerShellScript Sep 13 01:09:07.536495 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:updateSsmAgent Sep 13 01:09:07.536562 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:downloadContent Sep 13 01:09:07.536624 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform independent plugin aws:runDocument Sep 13 01:09:07.536701 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Successfully loaded platform dependent plugin aws:runShellScript Sep 13 01:09:07.536694 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Sep 13 01:09:07.537083 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Sep 13 01:09:07.537083 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO OS: linux, Arch: amd64 Sep 13 01:09:07.538577 amazon-ssm-agent[1717]: datastore file /var/lib/amazon/ssm/i-0a11f95cdb0a0f445/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Sep 13 01:09:07.632891 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] Starting session document processing engine... Sep 13 01:09:07.727262 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] [EngineProcessor] Starting Sep 13 01:09:07.821692 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Sep 13 01:09:07.916139 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0a11f95cdb0a0f445, requestId: a9bba1e8-dfb5-45c8-8014-7e8aae99fb2e Sep 13 01:09:08.010866 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] Starting document processing engine... Sep 13 01:09:08.096964 tar[1747]: linux-amd64/README.md Sep 13 01:09:08.104115 systemd[1]: Finished prepare-helm.service. Sep 13 01:09:08.105845 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] [EngineProcessor] Starting Sep 13 01:09:08.146576 sshd_keygen[1758]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 13 01:09:08.175986 systemd[1]: Finished sshd-keygen.service. Sep 13 01:09:08.178465 systemd[1]: Starting issuegen.service... Sep 13 01:09:08.185459 systemd[1]: issuegen.service: Deactivated successfully. Sep 13 01:09:08.185716 systemd[1]: Finished issuegen.service. Sep 13 01:09:08.188251 systemd[1]: Starting systemd-user-sessions.service... Sep 13 01:09:08.196498 systemd[1]: Finished systemd-user-sessions.service. Sep 13 01:09:08.199084 systemd[1]: Started getty@tty1.service. Sep 13 01:09:08.200958 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Sep 13 01:09:08.201752 systemd[1]: Started serial-getty@ttyS0.service. Sep 13 01:09:08.202704 systemd[1]: Reached target getty.target. Sep 13 01:09:08.296215 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] Starting message polling Sep 13 01:09:08.391814 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] Starting send replies to MDS Sep 13 01:09:08.405439 locksmithd[1812]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 13 01:09:08.487447 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [instanceID=i-0a11f95cdb0a0f445] Starting association polling Sep 13 01:09:08.583448 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Sep 13 01:09:08.680050 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] [Association] Launching response handler Sep 13 01:09:08.776857 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Sep 13 01:09:08.873415 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Sep 13 01:09:08.970186 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Sep 13 01:09:09.067431 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] listening reply. Sep 13 01:09:09.164603 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [HealthCheck] HealthCheck reporting agent health. Sep 13 01:09:09.261982 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [OfflineService] Starting document processing engine... Sep 13 01:09:09.359702 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [OfflineService] [EngineProcessor] Starting Sep 13 01:09:09.457387 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [OfflineService] [EngineProcessor] Initial processing Sep 13 01:09:09.555949 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [OfflineService] Starting message polling Sep 13 01:09:09.654567 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [OfflineService] Starting send replies to MDS Sep 13 01:09:09.752924 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [LongRunningPluginsManager] starting long running plugin manager Sep 13 01:09:09.851514 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Sep 13 01:09:09.950312 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Sep 13 01:09:10.049320 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [StartupProcessor] Executing startup processor tasks Sep 13 01:09:10.148846 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Sep 13 01:09:10.248628 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Sep 13 01:09:10.348037 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Sep 13 01:09:10.448122 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0a11f95cdb0a0f445?role=subscribe&stream=input Sep 13 01:09:10.547771 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0a11f95cdb0a0f445?role=subscribe&stream=input Sep 13 01:09:10.647916 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] Starting receiving message from control channel Sep 13 01:09:10.748740 amazon-ssm-agent[1717]: 2025-09-13 01:09:07 INFO [MessageGatewayService] [EngineProcessor] Initial processing Sep 13 01:09:15.138264 systemd[1]: Started kubelet.service. Sep 13 01:09:15.138926 systemd[1]: Reached target multi-user.target. Sep 13 01:09:15.140501 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 13 01:09:15.150431 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 13 01:09:15.150649 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 13 01:09:15.154805 systemd[1]: Startup finished in 615ms (kernel) + 8.160s (initrd) + 19.227s (userspace) = 28.004s. Sep 13 01:09:15.702643 systemd[1]: Created slice system-sshd.slice. Sep 13 01:09:15.704332 systemd[1]: Started sshd@0-172.31.27.15:22-147.75.109.163:33726.service. Sep 13 01:09:15.951090 sshd[1941]: Accepted publickey for core from 147.75.109.163 port 33726 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:09:15.954383 sshd[1941]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:15.971979 systemd[1]: Created slice user-500.slice. Sep 13 01:09:15.974266 systemd[1]: Starting user-runtime-dir@500.service... Sep 13 01:09:15.981735 systemd-logind[1738]: New session 1 of user core. Sep 13 01:09:15.988472 systemd[1]: Finished user-runtime-dir@500.service. Sep 13 01:09:15.990456 systemd[1]: Starting user@500.service... Sep 13 01:09:15.996096 (systemd)[1948]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:16.122418 systemd[1948]: Queued start job for default target default.target. Sep 13 01:09:16.122992 systemd[1948]: Reached target paths.target. Sep 13 01:09:16.123016 systemd[1948]: Reached target sockets.target. Sep 13 01:09:16.123029 systemd[1948]: Reached target timers.target. Sep 13 01:09:16.123041 systemd[1948]: Reached target basic.target. Sep 13 01:09:16.123149 systemd[1]: Started user@500.service. Sep 13 01:09:16.124094 systemd[1]: Started session-1.scope. Sep 13 01:09:16.124573 systemd[1948]: Reached target default.target. Sep 13 01:09:16.124734 systemd[1948]: Startup finished in 120ms. Sep 13 01:09:16.271859 systemd[1]: Started sshd@1-172.31.27.15:22-147.75.109.163:33736.service. Sep 13 01:09:16.437832 sshd[1958]: Accepted publickey for core from 147.75.109.163 port 33736 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:09:16.441364 sshd[1958]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:16.446739 systemd-logind[1738]: New session 2 of user core. Sep 13 01:09:16.447422 systemd[1]: Started session-2.scope. Sep 13 01:09:16.574349 sshd[1958]: pam_unix(sshd:session): session closed for user core Sep 13 01:09:16.577195 systemd[1]: sshd@1-172.31.27.15:22-147.75.109.163:33736.service: Deactivated successfully. Sep 13 01:09:16.578280 systemd[1]: session-2.scope: Deactivated successfully. Sep 13 01:09:16.579025 systemd-logind[1738]: Session 2 logged out. Waiting for processes to exit. Sep 13 01:09:16.579969 systemd-logind[1738]: Removed session 2. Sep 13 01:09:16.600742 systemd[1]: Started sshd@2-172.31.27.15:22-147.75.109.163:33752.service. Sep 13 01:09:16.765867 sshd[1965]: Accepted publickey for core from 147.75.109.163 port 33752 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:09:16.767374 sshd[1965]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:16.772861 systemd[1]: Started session-3.scope. Sep 13 01:09:16.773362 systemd-logind[1738]: New session 3 of user core. Sep 13 01:09:16.897768 sshd[1965]: pam_unix(sshd:session): session closed for user core Sep 13 01:09:16.901602 systemd[1]: sshd@2-172.31.27.15:22-147.75.109.163:33752.service: Deactivated successfully. Sep 13 01:09:16.902478 systemd[1]: session-3.scope: Deactivated successfully. Sep 13 01:09:16.903417 systemd-logind[1738]: Session 3 logged out. Waiting for processes to exit. Sep 13 01:09:16.904898 systemd-logind[1738]: Removed session 3. Sep 13 01:09:16.924103 systemd[1]: Started sshd@3-172.31.27.15:22-147.75.109.163:33754.service. Sep 13 01:09:17.090610 sshd[1971]: Accepted publickey for core from 147.75.109.163 port 33754 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:09:17.092075 sshd[1971]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:17.097958 systemd[1]: Started session-4.scope. Sep 13 01:09:17.098712 systemd-logind[1738]: New session 4 of user core. Sep 13 01:09:17.228774 sshd[1971]: pam_unix(sshd:session): session closed for user core Sep 13 01:09:17.232220 systemd[1]: sshd@3-172.31.27.15:22-147.75.109.163:33754.service: Deactivated successfully. Sep 13 01:09:17.233282 systemd[1]: session-4.scope: Deactivated successfully. Sep 13 01:09:17.233480 systemd-logind[1738]: Session 4 logged out. Waiting for processes to exit. Sep 13 01:09:17.234512 systemd-logind[1738]: Removed session 4. Sep 13 01:09:17.254003 systemd[1]: Started sshd@4-172.31.27.15:22-147.75.109.163:33760.service. Sep 13 01:09:17.422847 sshd[1977]: Accepted publickey for core from 147.75.109.163 port 33760 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:09:17.424731 sshd[1977]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:17.432789 systemd-logind[1738]: New session 5 of user core. Sep 13 01:09:17.434209 systemd[1]: Started session-5.scope. Sep 13 01:09:17.560349 sudo[1980]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 13 01:09:17.560593 sudo[1980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:09:17.572104 dbus-daemon[1720]: \xd0M\xef\x9c|U: received setenforce notice (enforcing=-547971360) Sep 13 01:09:17.572561 sudo[1980]: pam_unix(sudo:session): session closed for user root Sep 13 01:09:17.597929 sshd[1977]: pam_unix(sshd:session): session closed for user core Sep 13 01:09:17.600917 systemd[1]: sshd@4-172.31.27.15:22-147.75.109.163:33760.service: Deactivated successfully. Sep 13 01:09:17.601656 systemd[1]: session-5.scope: Deactivated successfully. Sep 13 01:09:17.603020 systemd-logind[1738]: Session 5 logged out. Waiting for processes to exit. Sep 13 01:09:17.603936 systemd-logind[1738]: Removed session 5. Sep 13 01:09:17.623223 systemd[1]: Started sshd@5-172.31.27.15:22-147.75.109.163:33762.service. Sep 13 01:09:17.789127 sshd[1984]: Accepted publickey for core from 147.75.109.163 port 33762 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:09:17.790025 sshd[1984]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:17.796374 systemd[1]: Started session-6.scope. Sep 13 01:09:17.796885 systemd-logind[1738]: New session 6 of user core. Sep 13 01:09:17.905922 sudo[1988]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 13 01:09:17.906973 sudo[1988]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:09:17.911012 sudo[1988]: pam_unix(sudo:session): session closed for user root Sep 13 01:09:17.918091 sudo[1987]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 13 01:09:17.918323 sudo[1987]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:09:17.931218 systemd[1]: Stopping audit-rules.service... Sep 13 01:09:17.932000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 01:09:17.934229 kernel: kauditd_printk_skb: 228 callbacks suppressed Sep 13 01:09:17.934295 kernel: audit: type=1305 audit(1757725757.932:208): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 01:09:17.932000 audit[1991]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff7f62ba60 a2=420 a3=0 items=0 ppid=1 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:17.937127 auditctl[1991]: No rules Sep 13 01:09:17.937772 systemd[1]: audit-rules.service: Deactivated successfully. Sep 13 01:09:17.937989 systemd[1]: Stopped audit-rules.service. Sep 13 01:09:17.946812 kernel: audit: type=1300 audit(1757725757.932:208): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff7f62ba60 a2=420 a3=0 items=0 ppid=1 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:17.946916 kernel: audit: type=1327 audit(1757725757.932:208): proctitle=2F7362696E2F617564697463746C002D44 Sep 13 01:09:17.946945 kernel: audit: type=1131 audit(1757725757.936:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.932000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 13 01:09:17.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.942993 systemd[1]: Starting audit-rules.service... Sep 13 01:09:17.966954 augenrules[2008]: No rules Sep 13 01:09:17.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.967642 systemd[1]: Finished audit-rules.service. Sep 13 01:09:17.972479 sudo[1987]: pam_unix(sudo:session): session closed for user root Sep 13 01:09:17.972693 kernel: audit: type=1130 audit(1757725757.967:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.971000 audit[1987]: USER_END pid=1987 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.978432 kernel: audit: type=1106 audit(1757725757.971:211): pid=1987 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.978583 kernel: audit: type=1104 audit(1757725757.971:212): pid=1987 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.971000 audit[1987]: CRED_DISP pid=1987 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.995555 sshd[1984]: pam_unix(sshd:session): session closed for user core Sep 13 01:09:17.996000 audit[1984]: USER_END pid=1984 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:17.998751 systemd[1]: sshd@5-172.31.27.15:22-147.75.109.163:33762.service: Deactivated successfully. Sep 13 01:09:17.999587 systemd[1]: session-6.scope: Deactivated successfully. Sep 13 01:09:18.001258 systemd-logind[1738]: Session 6 logged out. Waiting for processes to exit. Sep 13 01:09:17.996000 audit[1984]: CRED_DISP pid=1984 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:18.002258 systemd-logind[1738]: Removed session 6. Sep 13 01:09:18.006371 kernel: audit: type=1106 audit(1757725757.996:213): pid=1984 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:18.006472 kernel: audit: type=1104 audit(1757725757.996:214): pid=1984 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:18.006503 kernel: audit: type=1131 audit(1757725757.998:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.15:22-147.75.109.163:33762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:17.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.15:22-147.75.109.163:33762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:18.021703 systemd[1]: Started sshd@6-172.31.27.15:22-147.75.109.163:33768.service. Sep 13 01:09:18.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.15:22-147.75.109.163:33768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:18.184000 audit[2014]: USER_ACCT pid=2014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:18.186000 audit[2014]: CRED_ACQ pid=2014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:18.186000 audit[2014]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffae021300 a2=3 a3=0 items=0 ppid=1 pid=2014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.186000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:09:18.188380 sshd[2014]: Accepted publickey for core from 147.75.109.163 port 33768 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:09:18.188390 sshd[2014]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:09:18.194742 systemd-logind[1738]: New session 7 of user core. Sep 13 01:09:18.195568 systemd[1]: Started session-7.scope. Sep 13 01:09:18.202000 audit[2014]: USER_START pid=2014 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:18.204000 audit[2016]: CRED_ACQ pid=2016 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:09:18.301000 audit[2017]: USER_ACCT pid=2017 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:09:18.302778 sudo[2017]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 13 01:09:18.302000 audit[2017]: CRED_REFR pid=2017 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:09:18.303125 sudo[2017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:09:18.305000 audit[2017]: USER_START pid=2017 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:09:18.340014 systemd[1]: Starting docker.service... Sep 13 01:09:18.390391 kubelet[1938]: E0913 01:09:18.390340 1938 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:09:18.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:09:18.393472 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:09:18.394760 env[2027]: time="2025-09-13T01:09:18.393475192Z" level=info msg="Starting up" Sep 13 01:09:18.393654 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:09:18.394016 systemd[1]: kubelet.service: Consumed 1.176s CPU time. Sep 13 01:09:18.396398 env[2027]: time="2025-09-13T01:09:18.396361866Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 01:09:18.396514 env[2027]: time="2025-09-13T01:09:18.396395949Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 01:09:18.396514 env[2027]: time="2025-09-13T01:09:18.396427572Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 01:09:18.396514 env[2027]: time="2025-09-13T01:09:18.396447089Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 01:09:18.400753 env[2027]: time="2025-09-13T01:09:18.400712376Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 01:09:18.400871 env[2027]: time="2025-09-13T01:09:18.400860602Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 01:09:18.400929 env[2027]: time="2025-09-13T01:09:18.400917014Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 01:09:18.400987 env[2027]: time="2025-09-13T01:09:18.400979337Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 01:09:18.409407 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport738871141-merged.mount: Deactivated successfully. Sep 13 01:09:18.548085 env[2027]: time="2025-09-13T01:09:18.547083575Z" level=info msg="Loading containers: start." Sep 13 01:09:18.671000 audit[2057]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.671000 audit[2057]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffeaa4ab5f0 a2=0 a3=7ffeaa4ab5dc items=0 ppid=2027 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 13 01:09:18.673000 audit[2059]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.673000 audit[2059]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc800695f0 a2=0 a3=7ffc800695dc items=0 ppid=2027 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.673000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 13 01:09:18.675000 audit[2061]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.675000 audit[2061]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe97e16ee0 a2=0 a3=7ffe97e16ecc items=0 ppid=2027 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.675000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 01:09:18.677000 audit[2063]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.677000 audit[2063]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcaa673c40 a2=0 a3=7ffcaa673c2c items=0 ppid=2027 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.677000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 01:09:18.690000 audit[2065]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.690000 audit[2065]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe3e27dbd0 a2=0 a3=7ffe3e27dbbc items=0 ppid=2027 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.690000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 13 01:09:18.710000 audit[2070]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.710000 audit[2070]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe5b29c840 a2=0 a3=7ffe5b29c82c items=0 ppid=2027 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.710000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 13 01:09:18.719000 audit[2072]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.719000 audit[2072]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff2942dc60 a2=0 a3=7fff2942dc4c items=0 ppid=2027 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.719000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 13 01:09:18.722000 audit[2074]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.722000 audit[2074]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe0dac99e0 a2=0 a3=7ffe0dac99cc items=0 ppid=2027 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.722000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 13 01:09:18.725000 audit[2076]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.725000 audit[2076]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff9dab43c0 a2=0 a3=7fff9dab43ac items=0 ppid=2027 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.725000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:09:18.736000 audit[2080]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.736000 audit[2080]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffde9de660 a2=0 a3=7fffde9de64c items=0 ppid=2027 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.736000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:09:18.747000 audit[2081]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.747000 audit[2081]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe71f99ac0 a2=0 a3=7ffe71f99aac items=0 ppid=2027 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:09:18.774696 kernel: Initializing XFRM netlink socket Sep 13 01:09:18.837012 env[2027]: time="2025-09-13T01:09:18.836894177Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 13 01:09:18.839511 (udev-worker)[2037]: Network interface NamePolicy= disabled on kernel command line. Sep 13 01:09:18.883000 audit[2090]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.883000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffde324dbf0 a2=0 a3=7ffde324dbdc items=0 ppid=2027 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.883000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 13 01:09:18.895000 audit[2093]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.895000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffea7f42d20 a2=0 a3=7ffea7f42d0c items=0 ppid=2027 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.895000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 13 01:09:18.899000 audit[2096]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.899000 audit[2096]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdb7ebdb00 a2=0 a3=7ffdb7ebdaec items=0 ppid=2027 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.899000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 13 01:09:18.902000 audit[2098]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.902000 audit[2098]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc9b9d1800 a2=0 a3=7ffc9b9d17ec items=0 ppid=2027 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 13 01:09:18.904000 audit[2100]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.904000 audit[2100]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd41e11aa0 a2=0 a3=7ffd41e11a8c items=0 ppid=2027 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.904000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 13 01:09:18.907000 audit[2102]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.907000 audit[2102]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe33543430 a2=0 a3=7ffe3354341c items=0 ppid=2027 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.907000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 13 01:09:18.910000 audit[2104]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.910000 audit[2104]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff268d7c10 a2=0 a3=7fff268d7bfc items=0 ppid=2027 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.910000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 13 01:09:18.930000 audit[2107]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.930000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc150ec220 a2=0 a3=7ffc150ec20c items=0 ppid=2027 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.930000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 13 01:09:18.932000 audit[2109]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.932000 audit[2109]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe3c4c9530 a2=0 a3=7ffe3c4c951c items=0 ppid=2027 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.932000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 01:09:18.946000 audit[2111]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.946000 audit[2111]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffca22c0280 a2=0 a3=7ffca22c026c items=0 ppid=2027 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.946000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 01:09:18.949000 audit[2113]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.949000 audit[2113]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd7d4a7d60 a2=0 a3=7ffd7d4a7d4c items=0 ppid=2027 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.949000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 13 01:09:18.950682 systemd-networkd[1458]: docker0: Link UP Sep 13 01:09:18.964000 audit[2117]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2117 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.964000 audit[2117]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc34a34170 a2=0 a3=7ffc34a3415c items=0 ppid=2027 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.964000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:09:18.970000 audit[2118]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:18.970000 audit[2118]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdeb51db60 a2=0 a3=7ffdeb51db4c items=0 ppid=2027 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:18.970000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:09:18.972772 env[2027]: time="2025-09-13T01:09:18.972739387Z" level=info msg="Loading containers: done." Sep 13 01:09:18.986419 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1644591809-merged.mount: Deactivated successfully. Sep 13 01:09:18.999420 env[2027]: time="2025-09-13T01:09:18.999357919Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 13 01:09:18.999634 env[2027]: time="2025-09-13T01:09:18.999554394Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 13 01:09:18.999716 env[2027]: time="2025-09-13T01:09:18.999652997Z" level=info msg="Daemon has completed initialization" Sep 13 01:09:19.037954 systemd[1]: Started docker.service. Sep 13 01:09:19.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:19.051698 env[2027]: time="2025-09-13T01:09:19.051621438Z" level=info msg="API listen on /run/docker.sock" Sep 13 01:09:21.276863 env[1748]: time="2025-09-13T01:09:21.276813032Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Sep 13 01:09:21.774006 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1201866825.mount: Deactivated successfully. Sep 13 01:09:24.320814 env[1748]: time="2025-09-13T01:09:24.320759784Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:24.326639 env[1748]: time="2025-09-13T01:09:24.326582612Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:24.328952 env[1748]: time="2025-09-13T01:09:24.328905487Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:24.331195 env[1748]: time="2025-09-13T01:09:24.331145521Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:24.332031 env[1748]: time="2025-09-13T01:09:24.331990144Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62\"" Sep 13 01:09:24.332721 env[1748]: time="2025-09-13T01:09:24.332692081Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Sep 13 01:09:26.853197 env[1748]: time="2025-09-13T01:09:26.853130480Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:26.855306 env[1748]: time="2025-09-13T01:09:26.855164306Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:26.857435 env[1748]: time="2025-09-13T01:09:26.857391970Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:26.859175 env[1748]: time="2025-09-13T01:09:26.859136460Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:26.860342 env[1748]: time="2025-09-13T01:09:26.860303179Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668\"" Sep 13 01:09:26.861420 env[1748]: time="2025-09-13T01:09:26.861386507Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Sep 13 01:09:27.193024 amazon-ssm-agent[1717]: 2025-09-13 01:09:27 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Sep 13 01:09:28.496297 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 13 01:09:28.496564 systemd[1]: Stopped kubelet.service. Sep 13 01:09:28.496631 systemd[1]: kubelet.service: Consumed 1.176s CPU time. Sep 13 01:09:28.509096 kernel: kauditd_printk_skb: 85 callbacks suppressed Sep 13 01:09:28.509230 kernel: audit: type=1130 audit(1757725768.494:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:28.509268 kernel: audit: type=1131 audit(1757725768.494:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:28.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:28.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:28.503877 systemd[1]: Starting kubelet.service... Sep 13 01:09:28.569384 env[1748]: time="2025-09-13T01:09:28.569335166Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:28.578246 env[1748]: time="2025-09-13T01:09:28.578198632Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:28.585056 env[1748]: time="2025-09-13T01:09:28.585014802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:28.589795 env[1748]: time="2025-09-13T01:09:28.589745077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:28.590950 env[1748]: time="2025-09-13T01:09:28.590909900Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf\"" Sep 13 01:09:28.591670 env[1748]: time="2025-09-13T01:09:28.591632436Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Sep 13 01:09:28.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:28.736670 kernel: audit: type=1130 audit(1757725768.731:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:28.732071 systemd[1]: Started kubelet.service. Sep 13 01:09:28.785925 kubelet[2157]: E0913 01:09:28.785761 2157 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:09:28.789872 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:09:28.790060 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:09:28.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:09:28.794806 kernel: audit: type=1131 audit(1757725768.789:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:09:29.912302 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2485026731.mount: Deactivated successfully. Sep 13 01:09:30.974629 env[1748]: time="2025-09-13T01:09:30.974572100Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:30.984678 env[1748]: time="2025-09-13T01:09:30.984622326Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:30.988291 env[1748]: time="2025-09-13T01:09:30.988248586Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:30.992548 env[1748]: time="2025-09-13T01:09:30.992446222Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:30.993243 env[1748]: time="2025-09-13T01:09:30.993203525Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3\"" Sep 13 01:09:30.996185 env[1748]: time="2025-09-13T01:09:30.993936214Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Sep 13 01:09:31.487381 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3134879824.mount: Deactivated successfully. Sep 13 01:09:33.880310 env[1748]: time="2025-09-13T01:09:33.880256732Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.046029 env[1748]: time="2025-09-13T01:09:34.045979097Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.174083 env[1748]: time="2025-09-13T01:09:34.173771965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.179822 env[1748]: time="2025-09-13T01:09:34.179761317Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.180598 env[1748]: time="2025-09-13T01:09:34.180563153Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Sep 13 01:09:34.181409 env[1748]: time="2025-09-13T01:09:34.181388696Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 13 01:09:34.656507 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1095303565.mount: Deactivated successfully. Sep 13 01:09:34.666616 env[1748]: time="2025-09-13T01:09:34.666548525Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.669798 env[1748]: time="2025-09-13T01:09:34.669756801Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.672195 env[1748]: time="2025-09-13T01:09:34.672146508Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.674775 env[1748]: time="2025-09-13T01:09:34.674734071Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:34.675141 env[1748]: time="2025-09-13T01:09:34.675084344Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 13 01:09:34.675819 env[1748]: time="2025-09-13T01:09:34.675792165Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Sep 13 01:09:35.144532 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3465688458.mount: Deactivated successfully. Sep 13 01:09:37.238899 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Sep 13 01:09:37.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:37.244675 kernel: audit: type=1131 audit(1757725777.238:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:37.260000 audit: BPF prog-id=40 op=UNLOAD Sep 13 01:09:37.260000 audit: BPF prog-id=39 op=UNLOAD Sep 13 01:09:37.263683 kernel: audit: type=1334 audit(1757725777.260:256): prog-id=40 op=UNLOAD Sep 13 01:09:37.263762 kernel: audit: type=1334 audit(1757725777.260:257): prog-id=39 op=UNLOAD Sep 13 01:09:37.263805 kernel: audit: type=1334 audit(1757725777.260:258): prog-id=38 op=UNLOAD Sep 13 01:09:37.260000 audit: BPF prog-id=38 op=UNLOAD Sep 13 01:09:38.997325 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 13 01:09:38.997647 systemd[1]: Stopped kubelet.service. Sep 13 01:09:38.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:39.000250 systemd[1]: Starting kubelet.service... Sep 13 01:09:38.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:39.007624 kernel: audit: type=1130 audit(1757725778.997:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:39.008052 kernel: audit: type=1131 audit(1757725778.997:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:39.446295 env[1748]: time="2025-09-13T01:09:39.446162188Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:39.460697 env[1748]: time="2025-09-13T01:09:39.460223927Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:39.473082 env[1748]: time="2025-09-13T01:09:39.472993898Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:39.483652 env[1748]: time="2025-09-13T01:09:39.483603121Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:39.484770 env[1748]: time="2025-09-13T01:09:39.484727175Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Sep 13 01:09:40.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:40.612910 systemd[1]: Started kubelet.service. Sep 13 01:09:40.617695 kernel: audit: type=1130 audit(1757725780.611:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:40.701894 kubelet[2187]: E0913 01:09:40.701842 2187 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:09:40.717986 kernel: audit: type=1131 audit(1757725780.703:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:09:40.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:09:40.705204 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:09:40.705374 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:09:43.134965 systemd[1]: Stopped kubelet.service. Sep 13 01:09:43.141677 kernel: audit: type=1130 audit(1757725783.133:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:43.141804 kernel: audit: type=1131 audit(1757725783.136:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:43.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:43.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:43.145568 systemd[1]: Starting kubelet.service... Sep 13 01:09:43.187613 systemd[1]: Reloading. Sep 13 01:09:43.314112 /usr/lib/systemd/system-generators/torcx-generator[2220]: time="2025-09-13T01:09:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:09:43.314148 /usr/lib/systemd/system-generators/torcx-generator[2220]: time="2025-09-13T01:09:43Z" level=info msg="torcx already run" Sep 13 01:09:43.433977 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:09:43.434001 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:09:43.453411 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.552101 kernel: audit: type=1400 audit(1757725783.537:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.552254 kernel: audit: type=1400 audit(1757725783.537:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559545 kernel: audit: type=1400 audit(1757725783.537:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.574301 kernel: audit: type=1400 audit(1757725783.537:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.574442 kernel: audit: type=1400 audit(1757725783.537:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.574482 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.583282 kernel: audit: type=1400 audit(1757725783.537:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.583417 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit: BPF prog-id=43 op=LOAD Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit: BPF prog-id=44 op=LOAD Sep 13 01:09:43.551000 audit: BPF prog-id=24 op=UNLOAD Sep 13 01:09:43.551000 audit: BPF prog-id=25 op=UNLOAD Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit: BPF prog-id=45 op=LOAD Sep 13 01:09:43.559000 audit: BPF prog-id=26 op=UNLOAD Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit: BPF prog-id=46 op=LOAD Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit: BPF prog-id=47 op=LOAD Sep 13 01:09:43.559000 audit: BPF prog-id=27 op=UNLOAD Sep 13 01:09:43.559000 audit: BPF prog-id=28 op=UNLOAD Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.567000 audit: BPF prog-id=48 op=LOAD Sep 13 01:09:43.567000 audit: BPF prog-id=35 op=UNLOAD Sep 13 01:09:43.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit: BPF prog-id=49 op=LOAD Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.585000 audit: BPF prog-id=50 op=LOAD Sep 13 01:09:43.585000 audit: BPF prog-id=36 op=UNLOAD Sep 13 01:09:43.585000 audit: BPF prog-id=37 op=UNLOAD Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.586000 audit: BPF prog-id=51 op=LOAD Sep 13 01:09:43.586000 audit: BPF prog-id=33 op=UNLOAD Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.587000 audit: BPF prog-id=52 op=LOAD Sep 13 01:09:43.587000 audit: BPF prog-id=41 op=UNLOAD Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit: BPF prog-id=53 op=LOAD Sep 13 01:09:43.589000 audit: BPF prog-id=29 op=UNLOAD Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit: BPF prog-id=54 op=LOAD Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.590000 audit: BPF prog-id=55 op=LOAD Sep 13 01:09:43.590000 audit: BPF prog-id=30 op=UNLOAD Sep 13 01:09:43.590000 audit: BPF prog-id=31 op=UNLOAD Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.591000 audit: BPF prog-id=56 op=LOAD Sep 13 01:09:43.591000 audit: BPF prog-id=34 op=UNLOAD Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:43.594000 audit: BPF prog-id=57 op=LOAD Sep 13 01:09:43.594000 audit: BPF prog-id=32 op=UNLOAD Sep 13 01:09:43.675290 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Sep 13 01:09:43.675396 systemd[1]: kubelet.service: Failed with result 'signal'. Sep 13 01:09:43.675730 systemd[1]: Stopped kubelet.service. Sep 13 01:09:43.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:09:43.677991 systemd[1]: Starting kubelet.service... Sep 13 01:09:44.442423 systemd[1]: Started kubelet.service. Sep 13 01:09:44.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:09:44.537425 kubelet[2280]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:09:44.537425 kubelet[2280]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 01:09:44.537425 kubelet[2280]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:09:44.537951 kubelet[2280]: I0913 01:09:44.537551 2280 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 01:09:45.373479 kubelet[2280]: I0913 01:09:45.373431 2280 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 13 01:09:45.373806 kubelet[2280]: I0913 01:09:45.373790 2280 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 01:09:45.374737 kubelet[2280]: I0913 01:09:45.374714 2280 server.go:956] "Client rotation is on, will bootstrap in background" Sep 13 01:09:45.442940 kubelet[2280]: E0913 01:09:45.442889 2280 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.27.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 13 01:09:45.445378 kubelet[2280]: I0913 01:09:45.445340 2280 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 01:09:45.460391 kubelet[2280]: E0913 01:09:45.460312 2280 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 01:09:45.460391 kubelet[2280]: I0913 01:09:45.460390 2280 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 01:09:45.464835 kubelet[2280]: I0913 01:09:45.464771 2280 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 01:09:45.465474 kubelet[2280]: I0913 01:09:45.465428 2280 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 01:09:45.465786 kubelet[2280]: I0913 01:09:45.465468 2280 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-15","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 01:09:45.465786 kubelet[2280]: I0913 01:09:45.465776 2280 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 01:09:45.465786 kubelet[2280]: I0913 01:09:45.465788 2280 container_manager_linux.go:303] "Creating device plugin manager" Sep 13 01:09:45.467330 kubelet[2280]: I0913 01:09:45.467295 2280 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:09:45.471231 kubelet[2280]: I0913 01:09:45.471195 2280 kubelet.go:480] "Attempting to sync node with API server" Sep 13 01:09:45.471231 kubelet[2280]: I0913 01:09:45.471238 2280 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 01:09:45.478054 kubelet[2280]: I0913 01:09:45.477998 2280 kubelet.go:386] "Adding apiserver pod source" Sep 13 01:09:45.495562 kubelet[2280]: I0913 01:09:45.495520 2280 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 01:09:45.518711 kubelet[2280]: E0913 01:09:45.518024 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.27.15:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 13 01:09:45.518711 kubelet[2280]: E0913 01:09:45.518102 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.27.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-15&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 13 01:09:45.519216 kubelet[2280]: I0913 01:09:45.519193 2280 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 01:09:45.519708 kubelet[2280]: I0913 01:09:45.519688 2280 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 13 01:09:45.520695 kubelet[2280]: W0913 01:09:45.520669 2280 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 13 01:09:45.525779 kubelet[2280]: I0913 01:09:45.525750 2280 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 01:09:45.525929 kubelet[2280]: I0913 01:09:45.525836 2280 server.go:1289] "Started kubelet" Sep 13 01:09:45.535270 kubelet[2280]: I0913 01:09:45.535230 2280 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 01:09:45.533000 audit[2280]: AVC avc: denied { mac_admin } for pid=2280 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:45.533000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:09:45.533000 audit[2280]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000abc570 a1=c000a34990 a2=c000abc540 a3=25 items=0 ppid=1 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.533000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:09:45.534000 audit[2280]: AVC avc: denied { mac_admin } for pid=2280 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:45.534000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:09:45.534000 audit[2280]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a19c20 a1=c000a349a8 a2=c000abc600 a3=25 items=0 ppid=1 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.536247 kubelet[2280]: I0913 01:09:45.536221 2280 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 01:09:45.534000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:09:45.543399 kubelet[2280]: I0913 01:09:45.543346 2280 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 01:09:45.547043 kubelet[2280]: E0913 01:09:45.543757 2280 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.27.15:6443/api/v1/namespaces/default/events\": dial tcp 172.31.27.15:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-27-15.1864b24a02cef129 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-27-15,UID:ip-172-31-27-15,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-27-15,},FirstTimestamp:2025-09-13 01:09:45.525776681 +0000 UTC m=+1.076906018,LastTimestamp:2025-09-13 01:09:45.525776681 +0000 UTC m=+1.076906018,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-27-15,}" Sep 13 01:09:45.547396 kubelet[2280]: I0913 01:09:45.547336 2280 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 01:09:45.547901 kubelet[2280]: I0913 01:09:45.547884 2280 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 01:09:45.548424 kubelet[2280]: I0913 01:09:45.548387 2280 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 01:09:45.551200 kubelet[2280]: I0913 01:09:45.551172 2280 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 01:09:45.556523 kubelet[2280]: I0913 01:09:45.556494 2280 server.go:317] "Adding debug handlers to kubelet server" Sep 13 01:09:45.555000 audit[2296]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.555000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffc67ff720 a2=0 a3=7fffc67ff70c items=0 ppid=2280 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.555000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 01:09:45.557000 audit[2297]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.557000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0522af00 a2=0 a3=7fff0522aeec items=0 ppid=2280 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.557000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 01:09:45.563546 kubelet[2280]: I0913 01:09:45.563521 2280 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 01:09:45.563917 kubelet[2280]: I0913 01:09:45.563901 2280 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 01:09:45.564063 kubelet[2280]: I0913 01:09:45.564052 2280 reconciler.go:26] "Reconciler: start to sync state" Sep 13 01:09:45.564453 kubelet[2280]: E0913 01:09:45.564431 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:45.565728 kubelet[2280]: I0913 01:09:45.565707 2280 factory.go:223] Registration of the systemd container factory successfully Sep 13 01:09:45.565980 kubelet[2280]: I0913 01:09:45.565959 2280 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 01:09:45.566564 kubelet[2280]: E0913 01:09:45.566534 2280 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": dial tcp 172.31.27.15:6443: connect: connection refused" interval="200ms" Sep 13 01:09:45.567089 kubelet[2280]: E0913 01:09:45.567058 2280 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 01:09:45.569675 kubelet[2280]: I0913 01:09:45.569643 2280 factory.go:223] Registration of the containerd container factory successfully Sep 13 01:09:45.568000 audit[2299]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.568000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcc8775f50 a2=0 a3=7ffcc8775f3c items=0 ppid=2280 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:09:45.571000 audit[2301]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.571000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcf44cdee0 a2=0 a3=7ffcf44cdecc items=0 ppid=2280 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.571000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:09:45.577926 kubelet[2280]: E0913 01:09:45.577885 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.27.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 13 01:09:45.581000 audit[2304]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.581000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe062dac60 a2=0 a3=7ffe062dac4c items=0 ppid=2280 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 13 01:09:45.584352 kubelet[2280]: I0913 01:09:45.583824 2280 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 13 01:09:45.583000 audit[2305]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:09:45.583000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdd5c0b1c0 a2=0 a3=7ffdd5c0b1ac items=0 ppid=2280 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 01:09:45.586232 kubelet[2280]: I0913 01:09:45.586208 2280 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 13 01:09:45.586364 kubelet[2280]: I0913 01:09:45.586353 2280 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 13 01:09:45.586476 kubelet[2280]: I0913 01:09:45.586463 2280 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 01:09:45.586541 kubelet[2280]: I0913 01:09:45.586533 2280 kubelet.go:2436] "Starting kubelet main sync loop" Sep 13 01:09:45.586703 kubelet[2280]: E0913 01:09:45.586644 2280 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 01:09:45.586000 audit[2306]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.586000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa69bc610 a2=0 a3=7fffa69bc5fc items=0 ppid=2280 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.586000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 01:09:45.589000 audit[2307]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.589000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc299a4f20 a2=0 a3=7ffc299a4f0c items=0 ppid=2280 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.589000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 01:09:45.590000 audit[2309]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:09:45.590000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff43d5c310 a2=0 a3=7fff43d5c2fc items=0 ppid=2280 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.590000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 01:09:45.591000 audit[2310]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:09:45.591000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc53a1000 a2=0 a3=7fffc53a0fec items=0 ppid=2280 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.591000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 01:09:45.592000 audit[2311]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:09:45.592000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffe7c056490 a2=0 a3=7ffe7c05647c items=0 ppid=2280 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.592000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 01:09:45.593000 audit[2312]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:09:45.593000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe0cb05ae0 a2=0 a3=7ffe0cb05acc items=0 ppid=2280 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.593000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 01:09:45.596503 kubelet[2280]: E0913 01:09:45.596471 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.27.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 13 01:09:45.605873 kubelet[2280]: I0913 01:09:45.605836 2280 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 01:09:45.605873 kubelet[2280]: I0913 01:09:45.605855 2280 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 01:09:45.605873 kubelet[2280]: I0913 01:09:45.605880 2280 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:09:45.608220 kubelet[2280]: I0913 01:09:45.608186 2280 policy_none.go:49] "None policy: Start" Sep 13 01:09:45.608220 kubelet[2280]: I0913 01:09:45.608217 2280 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 01:09:45.608220 kubelet[2280]: I0913 01:09:45.608230 2280 state_mem.go:35] "Initializing new in-memory state store" Sep 13 01:09:45.614485 systemd[1]: Created slice kubepods.slice. Sep 13 01:09:45.619917 systemd[1]: Created slice kubepods-burstable.slice. Sep 13 01:09:45.623421 systemd[1]: Created slice kubepods-besteffort.slice. Sep 13 01:09:45.633708 kubelet[2280]: E0913 01:09:45.633652 2280 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 13 01:09:45.633708 kubelet[2280]: E0913 01:09:45.633735 2280 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 13 01:09:45.632000 audit[2280]: AVC avc: denied { mac_admin } for pid=2280 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:45.632000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:09:45.632000 audit[2280]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a76450 a1=c000a6f8a8 a2=c000a76420 a3=25 items=0 ppid=1 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:45.632000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:09:45.634087 kubelet[2280]: I0913 01:09:45.633909 2280 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 01:09:45.634087 kubelet[2280]: I0913 01:09:45.633940 2280 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 01:09:45.634898 kubelet[2280]: I0913 01:09:45.634777 2280 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 01:09:45.636321 kubelet[2280]: E0913 01:09:45.636039 2280 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 01:09:45.636321 kubelet[2280]: E0913 01:09:45.636085 2280 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-27-15\" not found" Sep 13 01:09:45.700939 systemd[1]: Created slice kubepods-burstable-podf89a231eaa89f848e48ff7f21693064c.slice. Sep 13 01:09:45.708668 kubelet[2280]: E0913 01:09:45.708612 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:45.712953 systemd[1]: Created slice kubepods-burstable-pod198687fdd63363b9bb456dfc9667ce66.slice. Sep 13 01:09:45.715639 kubelet[2280]: E0913 01:09:45.715602 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:45.718844 systemd[1]: Created slice kubepods-burstable-pod6ecf7d45774b9814d9e4af007c89b6e1.slice. Sep 13 01:09:45.720845 kubelet[2280]: E0913 01:09:45.720816 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:45.738959 kubelet[2280]: I0913 01:09:45.738927 2280 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:09:45.743053 kubelet[2280]: E0913 01:09:45.742848 2280 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.15:6443/api/v1/nodes\": dial tcp 172.31.27.15:6443: connect: connection refused" node="ip-172-31-27-15" Sep 13 01:09:45.765846 kubelet[2280]: I0913 01:09:45.765772 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6ecf7d45774b9814d9e4af007c89b6e1-ca-certs\") pod \"kube-apiserver-ip-172-31-27-15\" (UID: \"6ecf7d45774b9814d9e4af007c89b6e1\") " pod="kube-system/kube-apiserver-ip-172-31-27-15" Sep 13 01:09:45.765846 kubelet[2280]: I0913 01:09:45.765814 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6ecf7d45774b9814d9e4af007c89b6e1-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-15\" (UID: \"6ecf7d45774b9814d9e4af007c89b6e1\") " pod="kube-system/kube-apiserver-ip-172-31-27-15" Sep 13 01:09:45.765846 kubelet[2280]: I0913 01:09:45.765835 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6ecf7d45774b9814d9e4af007c89b6e1-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-15\" (UID: \"6ecf7d45774b9814d9e4af007c89b6e1\") " pod="kube-system/kube-apiserver-ip-172-31-27-15" Sep 13 01:09:45.765846 kubelet[2280]: I0913 01:09:45.765857 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:09:45.766105 kubelet[2280]: I0913 01:09:45.765876 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:09:45.766105 kubelet[2280]: I0913 01:09:45.765910 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/198687fdd63363b9bb456dfc9667ce66-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-15\" (UID: \"198687fdd63363b9bb456dfc9667ce66\") " pod="kube-system/kube-scheduler-ip-172-31-27-15" Sep 13 01:09:45.766105 kubelet[2280]: I0913 01:09:45.765929 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:09:45.766105 kubelet[2280]: I0913 01:09:45.765950 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:09:45.766105 kubelet[2280]: I0913 01:09:45.765979 2280 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:09:45.767203 kubelet[2280]: E0913 01:09:45.767166 2280 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": dial tcp 172.31.27.15:6443: connect: connection refused" interval="400ms" Sep 13 01:09:45.946971 kubelet[2280]: I0913 01:09:45.945716 2280 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:09:45.947248 kubelet[2280]: E0913 01:09:45.947208 2280 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.15:6443/api/v1/nodes\": dial tcp 172.31.27.15:6443: connect: connection refused" node="ip-172-31-27-15" Sep 13 01:09:46.010158 env[1748]: time="2025-09-13T01:09:46.010082742Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-15,Uid:f89a231eaa89f848e48ff7f21693064c,Namespace:kube-system,Attempt:0,}" Sep 13 01:09:46.016881 env[1748]: time="2025-09-13T01:09:46.016813924Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-15,Uid:198687fdd63363b9bb456dfc9667ce66,Namespace:kube-system,Attempt:0,}" Sep 13 01:09:46.022804 env[1748]: time="2025-09-13T01:09:46.022757815Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-15,Uid:6ecf7d45774b9814d9e4af007c89b6e1,Namespace:kube-system,Attempt:0,}" Sep 13 01:09:46.167643 kubelet[2280]: E0913 01:09:46.167595 2280 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": dial tcp 172.31.27.15:6443: connect: connection refused" interval="800ms" Sep 13 01:09:46.349220 kubelet[2280]: I0913 01:09:46.349194 2280 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:09:46.349614 kubelet[2280]: E0913 01:09:46.349569 2280 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.15:6443/api/v1/nodes\": dial tcp 172.31.27.15:6443: connect: connection refused" node="ip-172-31-27-15" Sep 13 01:09:46.450243 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4210376697.mount: Deactivated successfully. Sep 13 01:09:46.461424 env[1748]: time="2025-09-13T01:09:46.461366681Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.465540 env[1748]: time="2025-09-13T01:09:46.465474284Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.469303 env[1748]: time="2025-09-13T01:09:46.469252055Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.470874 env[1748]: time="2025-09-13T01:09:46.470794106Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.472124 env[1748]: time="2025-09-13T01:09:46.472085811Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.473099 env[1748]: time="2025-09-13T01:09:46.473059783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.473838 env[1748]: time="2025-09-13T01:09:46.473805510Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.474758 env[1748]: time="2025-09-13T01:09:46.474728536Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.477602 env[1748]: time="2025-09-13T01:09:46.477562346Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.478342 env[1748]: time="2025-09-13T01:09:46.478311139Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.481167 env[1748]: time="2025-09-13T01:09:46.481130255Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.481910 env[1748]: time="2025-09-13T01:09:46.481875259Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:09:46.526813 kubelet[2280]: E0913 01:09:46.523307 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.27.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-15&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 13 01:09:46.528135 env[1748]: time="2025-09-13T01:09:46.527844067Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:09:46.528135 env[1748]: time="2025-09-13T01:09:46.527910684Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:09:46.528135 env[1748]: time="2025-09-13T01:09:46.527928913Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:09:46.528135 env[1748]: time="2025-09-13T01:09:46.528101917Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/541d1f62ef28879d54d07878b9af4404d92895a429420b7c8b04d883face7055 pid=2332 runtime=io.containerd.runc.v2 Sep 13 01:09:46.533059 env[1748]: time="2025-09-13T01:09:46.532973723Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:09:46.533059 env[1748]: time="2025-09-13T01:09:46.533024799Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:09:46.533423 env[1748]: time="2025-09-13T01:09:46.533039828Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:09:46.533423 env[1748]: time="2025-09-13T01:09:46.533178805Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/04b83926d29c4cb8896081cb53ac4b16ae997941a63bc74651c9d368afbf1535 pid=2324 runtime=io.containerd.runc.v2 Sep 13 01:09:46.544073 env[1748]: time="2025-09-13T01:09:46.543977451Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:09:46.544073 env[1748]: time="2025-09-13T01:09:46.544020177Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:09:46.544073 env[1748]: time="2025-09-13T01:09:46.544036551Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:09:46.544564 env[1748]: time="2025-09-13T01:09:46.544509787Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/51e78500f1052d152525502eb35e206e74bc54678b03662a7a37badbfec34135 pid=2359 runtime=io.containerd.runc.v2 Sep 13 01:09:46.564894 systemd[1]: Started cri-containerd-541d1f62ef28879d54d07878b9af4404d92895a429420b7c8b04d883face7055.scope. Sep 13 01:09:46.583785 kubelet[2280]: E0913 01:09:46.581758 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.27.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 13 01:09:46.587032 systemd[1]: Started cri-containerd-04b83926d29c4cb8896081cb53ac4b16ae997941a63bc74651c9d368afbf1535.scope. Sep 13 01:09:46.598288 systemd[1]: Started cri-containerd-51e78500f1052d152525502eb35e206e74bc54678b03662a7a37badbfec34135.scope. Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.606000 audit: BPF prog-id=58 op=LOAD Sep 13 01:09:46.609000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.609000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=2332 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316431663632656632383837396435346430373837386239616634 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=8 items=0 ppid=2332 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316431663632656632383837396435346430373837386239616634 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit: BPF prog-id=59 op=LOAD Sep 13 01:09:46.610000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c000270240 items=0 ppid=2332 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316431663632656632383837396435346430373837386239616634 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.610000 audit: BPF prog-id=60 op=LOAD Sep 13 01:09:46.610000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c000270288 items=0 ppid=2332 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316431663632656632383837396435346430373837386239616634 Sep 13 01:09:46.611000 audit: BPF prog-id=60 op=UNLOAD Sep 13 01:09:46.611000 audit: BPF prog-id=59 op=UNLOAD Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { perfmon } for pid=2360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit[2360]: AVC avc: denied { bpf } for pid=2360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.611000 audit: BPF prog-id=61 op=LOAD Sep 13 01:09:46.611000 audit[2360]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c000270698 items=0 ppid=2332 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534316431663632656632383837396435346430373837386239616634 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.631000 audit: BPF prog-id=62 op=LOAD Sep 13 01:09:46.632000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.632000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2324 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623833393236643239633463623838393630383163623533616334 Sep 13 01:09:46.632000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.632000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2324 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623833393236643239633463623838393630383163623533616334 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.633000 audit: BPF prog-id=63 op=LOAD Sep 13 01:09:46.633000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d7ce0 items=0 ppid=2324 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623833393236643239633463623838393630383163623533616334 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.634000 audit: BPF prog-id=64 op=LOAD Sep 13 01:09:46.634000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d7d28 items=0 ppid=2324 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623833393236643239633463623838393630383163623533616334 Sep 13 01:09:46.635000 audit: BPF prog-id=64 op=UNLOAD Sep 13 01:09:46.635000 audit: BPF prog-id=63 op=UNLOAD Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.635000 audit: BPF prog-id=65 op=LOAD Sep 13 01:09:46.635000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d6138 items=0 ppid=2324 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623833393236643239633463623838393630383163623533616334 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.644000 audit: BPF prog-id=66 op=LOAD Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2359 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653738353030663130353264313532353235353032656233356532 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2359 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653738353030663130353264313532353235353032656233356532 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit: BPF prog-id=67 op=LOAD Sep 13 01:09:46.646000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003f67f0 items=0 ppid=2359 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653738353030663130353264313532353235353032656233356532 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit: BPF prog-id=68 op=LOAD Sep 13 01:09:46.646000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003f6838 items=0 ppid=2359 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653738353030663130353264313532353235353032656233356532 Sep 13 01:09:46.646000 audit: BPF prog-id=68 op=UNLOAD Sep 13 01:09:46.646000 audit: BPF prog-id=67 op=UNLOAD Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { perfmon } for pid=2377 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit[2377]: AVC avc: denied { bpf } for pid=2377 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.646000 audit: BPF prog-id=69 op=LOAD Sep 13 01:09:46.646000 audit[2377]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003f6c48 items=0 ppid=2359 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531653738353030663130353264313532353235353032656233356532 Sep 13 01:09:46.667489 kubelet[2280]: E0913 01:09:46.667438 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.27.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 13 01:09:46.672377 env[1748]: time="2025-09-13T01:09:46.672313976Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-15,Uid:6ecf7d45774b9814d9e4af007c89b6e1,Namespace:kube-system,Attempt:0,} returns sandbox id \"541d1f62ef28879d54d07878b9af4404d92895a429420b7c8b04d883face7055\"" Sep 13 01:09:46.678543 env[1748]: time="2025-09-13T01:09:46.678501017Z" level=info msg="CreateContainer within sandbox \"541d1f62ef28879d54d07878b9af4404d92895a429420b7c8b04d883face7055\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 13 01:09:46.704622 env[1748]: time="2025-09-13T01:09:46.704557761Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-15,Uid:198687fdd63363b9bb456dfc9667ce66,Namespace:kube-system,Attempt:0,} returns sandbox id \"04b83926d29c4cb8896081cb53ac4b16ae997941a63bc74651c9d368afbf1535\"" Sep 13 01:09:46.709672 env[1748]: time="2025-09-13T01:09:46.709591656Z" level=info msg="CreateContainer within sandbox \"04b83926d29c4cb8896081cb53ac4b16ae997941a63bc74651c9d368afbf1535\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 13 01:09:46.718255 env[1748]: time="2025-09-13T01:09:46.718209233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-15,Uid:f89a231eaa89f848e48ff7f21693064c,Namespace:kube-system,Attempt:0,} returns sandbox id \"51e78500f1052d152525502eb35e206e74bc54678b03662a7a37badbfec34135\"" Sep 13 01:09:46.723145 env[1748]: time="2025-09-13T01:09:46.723096002Z" level=info msg="CreateContainer within sandbox \"51e78500f1052d152525502eb35e206e74bc54678b03662a7a37badbfec34135\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 13 01:09:46.731693 kubelet[2280]: E0913 01:09:46.731488 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.27.15:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 13 01:09:46.765061 env[1748]: time="2025-09-13T01:09:46.764979927Z" level=info msg="CreateContainer within sandbox \"541d1f62ef28879d54d07878b9af4404d92895a429420b7c8b04d883face7055\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"6246f2191f3a8324df47a43ff9db3d61db64a6ebcbdc44cb8ea20abb9a482563\"" Sep 13 01:09:46.765881 env[1748]: time="2025-09-13T01:09:46.765844243Z" level=info msg="StartContainer for \"6246f2191f3a8324df47a43ff9db3d61db64a6ebcbdc44cb8ea20abb9a482563\"" Sep 13 01:09:46.769827 env[1748]: time="2025-09-13T01:09:46.769790644Z" level=info msg="CreateContainer within sandbox \"04b83926d29c4cb8896081cb53ac4b16ae997941a63bc74651c9d368afbf1535\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b\"" Sep 13 01:09:46.771723 env[1748]: time="2025-09-13T01:09:46.771074580Z" level=info msg="CreateContainer within sandbox \"51e78500f1052d152525502eb35e206e74bc54678b03662a7a37badbfec34135\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319\"" Sep 13 01:09:46.772237 env[1748]: time="2025-09-13T01:09:46.772191960Z" level=info msg="StartContainer for \"c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b\"" Sep 13 01:09:46.772395 env[1748]: time="2025-09-13T01:09:46.772371503Z" level=info msg="StartContainer for \"35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319\"" Sep 13 01:09:46.798237 systemd[1]: Started cri-containerd-35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319.scope. Sep 13 01:09:46.830198 systemd[1]: Started cri-containerd-c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b.scope. Sep 13 01:09:46.843385 systemd[1]: Started cri-containerd-6246f2191f3a8324df47a43ff9db3d61db64a6ebcbdc44cb8ea20abb9a482563.scope. Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.846000 audit: BPF prog-id=70 op=LOAD Sep 13 01:09:46.846000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.846000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2359 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335656164336563376633326632323937666563326434303263323635 Sep 13 01:09:46.846000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.846000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2359 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335656164336563376633326632323937666563326434303263323635 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit: BPF prog-id=71 op=LOAD Sep 13 01:09:46.847000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003bab00 items=0 ppid=2359 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335656164336563376633326632323937666563326434303263323635 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit: BPF prog-id=72 op=LOAD Sep 13 01:09:46.847000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003bab48 items=0 ppid=2359 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335656164336563376633326632323937666563326434303263323635 Sep 13 01:09:46.847000 audit: BPF prog-id=72 op=UNLOAD Sep 13 01:09:46.847000 audit: BPF prog-id=71 op=UNLOAD Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.847000 audit: BPF prog-id=73 op=LOAD Sep 13 01:09:46.847000 audit[2469]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003baf58 items=0 ppid=2359 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335656164336563376633326632323937666563326434303263323635 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit: BPF prog-id=74 op=LOAD Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2332 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343666323139316633613833323464663437613433666639646233 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2332 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343666323139316633613833323464663437613433666639646233 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit: BPF prog-id=75 op=LOAD Sep 13 01:09:46.872000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000366b00 items=0 ppid=2332 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343666323139316633613833323464663437613433666639646233 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.872000 audit: BPF prog-id=76 op=LOAD Sep 13 01:09:46.872000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000366b48 items=0 ppid=2332 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343666323139316633613833323464663437613433666639646233 Sep 13 01:09:46.873000 audit: BPF prog-id=76 op=UNLOAD Sep 13 01:09:46.873000 audit: BPF prog-id=75 op=UNLOAD Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.873000 audit: BPF prog-id=77 op=LOAD Sep 13 01:09:46.873000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000366f58 items=0 ppid=2332 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343666323139316633613833323464663437613433666639646233 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.899000 audit: BPF prog-id=78 op=LOAD Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2324 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336643139373230323961356333656530623965353732613138396462 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2324 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336643139373230323961356333656530623965353732613138396462 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit: BPF prog-id=79 op=LOAD Sep 13 01:09:46.900000 audit[2479]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025220 items=0 ppid=2324 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336643139373230323961356333656530623965353732613138396462 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit: BPF prog-id=80 op=LOAD Sep 13 01:09:46.900000 audit[2479]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025268 items=0 ppid=2324 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336643139373230323961356333656530623965353732613138396462 Sep 13 01:09:46.900000 audit: BPF prog-id=80 op=UNLOAD Sep 13 01:09:46.900000 audit: BPF prog-id=79 op=UNLOAD Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:09:46.900000 audit: BPF prog-id=81 op=LOAD Sep 13 01:09:46.900000 audit[2479]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025678 items=0 ppid=2324 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:09:46.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336643139373230323961356333656530623965353732613138396462 Sep 13 01:09:46.930345 env[1748]: time="2025-09-13T01:09:46.930295864Z" level=info msg="StartContainer for \"35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319\" returns successfully" Sep 13 01:09:46.943379 env[1748]: time="2025-09-13T01:09:46.942667227Z" level=info msg="StartContainer for \"6246f2191f3a8324df47a43ff9db3d61db64a6ebcbdc44cb8ea20abb9a482563\" returns successfully" Sep 13 01:09:46.958795 env[1748]: time="2025-09-13T01:09:46.958623438Z" level=info msg="StartContainer for \"c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b\" returns successfully" Sep 13 01:09:46.968461 kubelet[2280]: E0913 01:09:46.968408 2280 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": dial tcp 172.31.27.15:6443: connect: connection refused" interval="1.6s" Sep 13 01:09:47.152290 kubelet[2280]: I0913 01:09:47.152188 2280 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:09:47.154265 kubelet[2280]: E0913 01:09:47.152556 2280 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.15:6443/api/v1/nodes\": dial tcp 172.31.27.15:6443: connect: connection refused" node="ip-172-31-27-15" Sep 13 01:09:47.527292 kubelet[2280]: E0913 01:09:47.527244 2280 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.27.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 13 01:09:47.609024 kubelet[2280]: E0913 01:09:47.608718 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:47.612257 kubelet[2280]: E0913 01:09:47.611979 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:47.615269 kubelet[2280]: E0913 01:09:47.614954 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:48.569418 kubelet[2280]: E0913 01:09:48.569374 2280 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": dial tcp 172.31.27.15:6443: connect: connection refused" interval="3.2s" Sep 13 01:09:48.616708 kubelet[2280]: E0913 01:09:48.616687 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:48.617079 kubelet[2280]: E0913 01:09:48.616770 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:48.729041 kubelet[2280]: E0913 01:09:48.728997 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.27.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 13 01:09:48.754894 kubelet[2280]: I0913 01:09:48.754867 2280 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:09:48.755397 kubelet[2280]: E0913 01:09:48.755364 2280 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.15:6443/api/v1/nodes\": dial tcp 172.31.27.15:6443: connect: connection refused" node="ip-172-31-27-15" Sep 13 01:09:48.786451 kubelet[2280]: E0913 01:09:48.786406 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.27.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 13 01:09:48.846558 kubelet[2280]: E0913 01:09:48.846417 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.27.15:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 13 01:09:49.509696 kubelet[2280]: E0913 01:09:49.509620 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.27.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-15&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 13 01:09:51.078000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:51.082365 kernel: kauditd_printk_skb: 558 callbacks suppressed Sep 13 01:09:51.082475 kernel: audit: type=1400 audit(1757725791.078:561): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:51.078000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000c8c000 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:09:51.096087 kernel: audit: type=1300 audit(1757725791.078:561): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000c8c000 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:09:51.096205 kernel: audit: type=1327 audit(1757725791.078:561): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:09:51.078000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:09:51.080000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:51.109486 kernel: audit: type=1400 audit(1757725791.080:562): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:51.109635 kernel: audit: type=1300 audit(1757725791.080:562): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c66dc0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:09:51.080000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c66dc0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:09:51.080000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:09:51.124644 kernel: audit: type=1327 audit(1757725791.080:562): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:09:51.654036 kubelet[2280]: E0913 01:09:51.653990 2280 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.27.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 13 01:09:51.770614 kubelet[2280]: E0913 01:09:51.770550 2280 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": dial tcp 172.31.27.15:6443: connect: connection refused" interval="6.4s" Sep 13 01:09:51.957624 kubelet[2280]: I0913 01:09:51.957529 2280 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:09:51.957989 kubelet[2280]: E0913 01:09:51.957920 2280 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.15:6443/api/v1/nodes\": dial tcp 172.31.27.15:6443: connect: connection refused" node="ip-172-31-27-15" Sep 13 01:09:52.156980 update_engine[1740]: I0913 01:09:52.156903 1740 update_attempter.cc:509] Updating boot flags... Sep 13 01:09:52.689044 kubelet[2280]: E0913 01:09:52.688992 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.27.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 13 01:09:52.776882 kubelet[2280]: E0913 01:09:52.776764 2280 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.27.15:6443/api/v1/namespaces/default/events\": dial tcp 172.31.27.15:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-27-15.1864b24a02cef129 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-27-15,UID:ip-172-31-27-15,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-27-15,},FirstTimestamp:2025-09-13 01:09:45.525776681 +0000 UTC m=+1.076906018,LastTimestamp:2025-09-13 01:09:45.525776681 +0000 UTC m=+1.076906018,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-27-15,}" Sep 13 01:09:52.931347 kubelet[2280]: E0913 01:09:52.931286 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:53.171684 kubelet[2280]: E0913 01:09:53.171644 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:53.174472 kubelet[2280]: E0913 01:09:53.174424 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.27.15:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 13 01:09:53.175478 kubelet[2280]: E0913 01:09:53.175449 2280 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:53.490383 kubelet[2280]: E0913 01:09:53.490276 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.27.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-15&limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 13 01:09:53.909276 kubelet[2280]: E0913 01:09:53.909233 2280 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.27.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.15:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 13 01:09:55.636563 kubelet[2280]: E0913 01:09:55.636461 2280 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-27-15\" not found" Sep 13 01:09:57.220153 amazon-ssm-agent[1717]: 2025-09-13 01:09:57 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Sep 13 01:09:57.256000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.256000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0036b9950 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.277882 kernel: audit: type=1400 audit(1757725797.256:563): avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.278055 kernel: audit: type=1300 audit(1757725797.256:563): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0036b9950 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.278101 kernel: audit: type=1327 audit(1757725797.256:563): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.256000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.257000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.297019 kernel: audit: type=1400 audit(1757725797.257:564): avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.297180 kernel: audit: type=1300 audit(1757725797.257:564): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0093078a0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.257000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0093078a0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.257000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.331684 kernel: audit: type=1327 audit(1757725797.257:564): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.257000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.345690 kernel: audit: type=1400 audit(1757725797.257:565): avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.257000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0069520c0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.366682 kernel: audit: type=1300 audit(1757725797.257:565): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0069520c0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.257000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.387687 kernel: audit: type=1327 audit(1757725797.257:565): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.257000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.257000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c006952240 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.257000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.359000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.359000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=89 a1=c00437a760 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.359000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.359000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=89 a1=c0067ebaa0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:09:57.359000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:09:57.400685 kernel: audit: type=1400 audit(1757725797.257:566): avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:09:57.844837 kubelet[2280]: E0913 01:09:57.844798 2280 csi_plugin.go:397] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-27-15" not found Sep 13 01:09:58.176280 kubelet[2280]: E0913 01:09:58.176169 2280 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-27-15\" not found" node="ip-172-31-27-15" Sep 13 01:09:58.210284 kubelet[2280]: E0913 01:09:58.210243 2280 csi_plugin.go:397] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ip-172-31-27-15" not found Sep 13 01:09:58.359845 kubelet[2280]: I0913 01:09:58.359810 2280 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:09:58.376753 kubelet[2280]: I0913 01:09:58.376709 2280 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-15" Sep 13 01:09:58.376753 kubelet[2280]: E0913 01:09:58.376757 2280 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ip-172-31-27-15\": node \"ip-172-31-27-15\" not found" Sep 13 01:09:58.388251 kubelet[2280]: E0913 01:09:58.388207 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:58.489294 kubelet[2280]: E0913 01:09:58.489156 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:58.590386 kubelet[2280]: E0913 01:09:58.590345 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:58.690848 kubelet[2280]: E0913 01:09:58.690803 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:58.791626 kubelet[2280]: E0913 01:09:58.791505 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:58.892313 kubelet[2280]: E0913 01:09:58.892269 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:58.992426 kubelet[2280]: E0913 01:09:58.992375 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.093694 kubelet[2280]: E0913 01:09:59.093573 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.194020 kubelet[2280]: E0913 01:09:59.193943 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.295017 kubelet[2280]: E0913 01:09:59.294944 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.396163 kubelet[2280]: E0913 01:09:59.395999 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.497068 kubelet[2280]: E0913 01:09:59.497022 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.598224 kubelet[2280]: E0913 01:09:59.598178 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.699436 kubelet[2280]: E0913 01:09:59.699329 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.800151 kubelet[2280]: E0913 01:09:59.800104 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.900984 kubelet[2280]: E0913 01:09:59.900881 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:09:59.994393 systemd[1]: Reloading. Sep 13 01:10:00.014208 kubelet[2280]: E0913 01:10:00.014149 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:10:00.114947 kubelet[2280]: E0913 01:10:00.114897 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:10:00.119348 /usr/lib/systemd/system-generators/torcx-generator[2850]: time="2025-09-13T01:10:00Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:10:00.119391 /usr/lib/systemd/system-generators/torcx-generator[2850]: time="2025-09-13T01:10:00Z" level=info msg="torcx already run" Sep 13 01:10:00.215705 kubelet[2280]: E0913 01:10:00.215642 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:10:00.274084 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:10:00.274113 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:10:00.297313 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:10:00.316822 kubelet[2280]: E0913 01:10:00.316775 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.409000 audit: BPF prog-id=82 op=LOAD Sep 13 01:10:00.409000 audit: BPF prog-id=66 op=UNLOAD Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.411000 audit: BPF prog-id=83 op=LOAD Sep 13 01:10:00.411000 audit: BPF prog-id=78 op=UNLOAD Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit: BPF prog-id=84 op=LOAD Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.412000 audit: BPF prog-id=85 op=LOAD Sep 13 01:10:00.412000 audit: BPF prog-id=43 op=UNLOAD Sep 13 01:10:00.412000 audit: BPF prog-id=44 op=UNLOAD Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.413000 audit: BPF prog-id=86 op=LOAD Sep 13 01:10:00.413000 audit: BPF prog-id=62 op=UNLOAD Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit: BPF prog-id=87 op=LOAD Sep 13 01:10:00.415000 audit: BPF prog-id=45 op=UNLOAD Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit: BPF prog-id=88 op=LOAD Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.415000 audit: BPF prog-id=89 op=LOAD Sep 13 01:10:00.415000 audit: BPF prog-id=46 op=UNLOAD Sep 13 01:10:00.415000 audit: BPF prog-id=47 op=UNLOAD Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit: BPF prog-id=90 op=LOAD Sep 13 01:10:00.417000 audit: BPF prog-id=48 op=UNLOAD Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit: BPF prog-id=91 op=LOAD Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.417000 audit: BPF prog-id=92 op=LOAD Sep 13 01:10:00.417000 audit: BPF prog-id=49 op=UNLOAD Sep 13 01:10:00.417000 audit: BPF prog-id=50 op=UNLOAD Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.418000 audit: BPF prog-id=93 op=LOAD Sep 13 01:10:00.418000 audit: BPF prog-id=51 op=UNLOAD Sep 13 01:10:00.420689 kubelet[2280]: E0913 01:10:00.417224 2280 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit: BPF prog-id=94 op=LOAD Sep 13 01:10:00.420000 audit: BPF prog-id=52 op=UNLOAD Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit: BPF prog-id=95 op=LOAD Sep 13 01:10:00.421000 audit: BPF prog-id=58 op=UNLOAD Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.421000 audit: BPF prog-id=96 op=LOAD Sep 13 01:10:00.421000 audit: BPF prog-id=70 op=UNLOAD Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit: BPF prog-id=97 op=LOAD Sep 13 01:10:00.424000 audit: BPF prog-id=53 op=UNLOAD Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit: BPF prog-id=98 op=LOAD Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.424000 audit: BPF prog-id=99 op=LOAD Sep 13 01:10:00.424000 audit: BPF prog-id=54 op=UNLOAD Sep 13 01:10:00.424000 audit: BPF prog-id=55 op=UNLOAD Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.426000 audit: BPF prog-id=100 op=LOAD Sep 13 01:10:00.426000 audit: BPF prog-id=56 op=UNLOAD Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.427000 audit: BPF prog-id=101 op=LOAD Sep 13 01:10:00.427000 audit: BPF prog-id=74 op=UNLOAD Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:00.429000 audit: BPF prog-id=102 op=LOAD Sep 13 01:10:00.429000 audit: BPF prog-id=57 op=UNLOAD Sep 13 01:10:00.450093 systemd[1]: Stopping kubelet.service... Sep 13 01:10:00.476092 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 01:10:00.476678 systemd[1]: Stopped kubelet.service. Sep 13 01:10:00.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:10:00.476767 systemd[1]: kubelet.service: Consumed 1.392s CPU time. Sep 13 01:10:00.479273 systemd[1]: Starting kubelet.service... Sep 13 01:10:02.901395 kernel: kauditd_printk_skb: 253 callbacks suppressed Sep 13 01:10:02.901646 kernel: audit: type=1400 audit(1757725802.884:814): avc: denied { watch } for pid=2489 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 01:10:02.884000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 01:10:02.884000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ba4e00 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:02.949911 kernel: audit: type=1300 audit(1757725802.884:814): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ba4e00 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:02.950092 kernel: audit: type=1327 audit(1757725802.884:814): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:02.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:03.365107 systemd[1]: Started kubelet.service. Sep 13 01:10:03.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:10:03.388703 kernel: audit: type=1130 audit(1757725803.363:815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:10:03.709910 kubelet[2911]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:10:03.709910 kubelet[2911]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 01:10:03.709910 kubelet[2911]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:10:03.709910 kubelet[2911]: I0913 01:10:03.706036 2911 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 01:10:03.755000 kubelet[2911]: I0913 01:10:03.754967 2911 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 13 01:10:03.755172 kubelet[2911]: I0913 01:10:03.755163 2911 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 01:10:03.755565 kubelet[2911]: I0913 01:10:03.755547 2911 server.go:956] "Client rotation is on, will bootstrap in background" Sep 13 01:10:03.758647 kubelet[2911]: I0913 01:10:03.757309 2911 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Sep 13 01:10:03.823551 kubelet[2911]: I0913 01:10:03.823506 2911 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 01:10:03.844818 kubelet[2911]: E0913 01:10:03.844779 2911 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 01:10:03.855483 kubelet[2911]: I0913 01:10:03.847430 2911 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 01:10:03.857741 kubelet[2911]: I0913 01:10:03.857691 2911 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 01:10:03.858001 kubelet[2911]: I0913 01:10:03.857963 2911 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 01:10:03.859401 kubelet[2911]: I0913 01:10:03.857998 2911 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-15","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 01:10:03.859401 kubelet[2911]: I0913 01:10:03.858254 2911 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 01:10:03.859401 kubelet[2911]: I0913 01:10:03.858273 2911 container_manager_linux.go:303] "Creating device plugin manager" Sep 13 01:10:03.859401 kubelet[2911]: I0913 01:10:03.858339 2911 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:10:03.859401 kubelet[2911]: I0913 01:10:03.858494 2911 kubelet.go:480] "Attempting to sync node with API server" Sep 13 01:10:03.859797 kubelet[2911]: I0913 01:10:03.858509 2911 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 01:10:03.859797 kubelet[2911]: I0913 01:10:03.858540 2911 kubelet.go:386] "Adding apiserver pod source" Sep 13 01:10:03.859797 kubelet[2911]: I0913 01:10:03.858557 2911 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 01:10:03.886966 kubelet[2911]: I0913 01:10:03.886933 2911 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 01:10:03.887963 kubelet[2911]: I0913 01:10:03.887937 2911 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 13 01:10:03.909583 kubelet[2911]: I0913 01:10:03.909558 2911 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 01:10:03.909844 kubelet[2911]: I0913 01:10:03.909831 2911 server.go:1289] "Started kubelet" Sep 13 01:10:04.054592 kubelet[2911]: I0913 01:10:04.054543 2911 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 01:10:04.053000 audit[2911]: AVC avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:04.072467 kubelet[2911]: I0913 01:10:04.054609 2911 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 01:10:04.053000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:10:04.081390 kubelet[2911]: I0913 01:10:04.077401 2911 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 01:10:04.081390 kubelet[2911]: I0913 01:10:04.079079 2911 server.go:317] "Adding debug handlers to kubelet server" Sep 13 01:10:04.083145 kernel: audit: type=1400 audit(1757725804.053:816): avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:04.083230 kernel: audit: type=1401 audit(1757725804.053:816): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:10:04.053000 audit[2911]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b4d680 a1=c0008777b8 a2=c000b4d650 a3=25 items=0 ppid=1 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:04.096266 kernel: audit: type=1300 audit(1757725804.053:816): arch=c000003e syscall=188 success=no exit=-22 a0=c000b4d680 a1=c0008777b8 a2=c000b4d650 a3=25 items=0 ppid=1 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:04.097849 kernel: audit: type=1327 audit(1757725804.053:816): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:10:04.053000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:10:04.099063 kubelet[2911]: I0913 01:10:04.098984 2911 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 01:10:04.099574 kubelet[2911]: I0913 01:10:04.099548 2911 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 01:10:04.100008 kubelet[2911]: I0913 01:10:04.099989 2911 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 01:10:04.103238 kubelet[2911]: I0913 01:10:04.103167 2911 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 01:10:04.116640 kernel: audit: type=1400 audit(1757725804.053:817): avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:04.053000 audit[2911]: AVC avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:04.053000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:10:04.122383 kubelet[2911]: I0913 01:10:04.120632 2911 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 01:10:04.122383 kubelet[2911]: E0913 01:10:04.121091 2911 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-15\" not found" Sep 13 01:10:04.124329 kernel: audit: type=1401 audit(1757725804.053:817): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:10:04.053000 audit[2911]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006da840 a1=c0008777d0 a2=c000b4d710 a3=25 items=0 ppid=1 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:04.053000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:10:04.126904 kubelet[2911]: I0913 01:10:04.126874 2911 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 01:10:04.127035 kubelet[2911]: I0913 01:10:04.127022 2911 reconciler.go:26] "Reconciler: start to sync state" Sep 13 01:10:04.131311 kubelet[2911]: I0913 01:10:04.129679 2911 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 13 01:10:04.131612 kubelet[2911]: I0913 01:10:04.131492 2911 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 13 01:10:04.131612 kubelet[2911]: I0913 01:10:04.131528 2911 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 13 01:10:04.131612 kubelet[2911]: I0913 01:10:04.131555 2911 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 01:10:04.131612 kubelet[2911]: I0913 01:10:04.131563 2911 kubelet.go:2436] "Starting kubelet main sync loop" Sep 13 01:10:04.131825 kubelet[2911]: E0913 01:10:04.131619 2911 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 01:10:04.147432 kubelet[2911]: I0913 01:10:04.147394 2911 factory.go:223] Registration of the systemd container factory successfully Sep 13 01:10:04.147802 kubelet[2911]: I0913 01:10:04.147595 2911 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 01:10:04.162043 kubelet[2911]: I0913 01:10:04.161163 2911 factory.go:223] Registration of the containerd container factory successfully Sep 13 01:10:04.169050 kubelet[2911]: E0913 01:10:04.167834 2911 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 01:10:04.276552 kubelet[2911]: E0913 01:10:04.275622 2911 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 13 01:10:04.501000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:04.501000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000716300 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:04.501000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:04.508000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:04.508000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0000de440 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:04.508000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:04.514000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:04.514000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:04.514000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000716ea0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:04.514000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:04.514000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0000de620 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:04.514000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:04.638144 kubelet[2911]: E0913 01:10:04.638095 2911 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 13 01:10:04.696786 kubelet[2911]: I0913 01:10:04.696757 2911 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 01:10:04.697025 kubelet[2911]: I0913 01:10:04.697004 2911 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 01:10:04.697095 kubelet[2911]: I0913 01:10:04.697067 2911 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:10:04.697330 kubelet[2911]: I0913 01:10:04.697313 2911 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 13 01:10:04.697413 kubelet[2911]: I0913 01:10:04.697332 2911 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 13 01:10:04.697413 kubelet[2911]: I0913 01:10:04.697355 2911 policy_none.go:49] "None policy: Start" Sep 13 01:10:04.697413 kubelet[2911]: I0913 01:10:04.697369 2911 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 01:10:04.697413 kubelet[2911]: I0913 01:10:04.697384 2911 state_mem.go:35] "Initializing new in-memory state store" Sep 13 01:10:04.697933 kubelet[2911]: I0913 01:10:04.697918 2911 state_mem.go:75] "Updated machine memory state" Sep 13 01:10:04.707482 kubelet[2911]: E0913 01:10:04.707456 2911 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 13 01:10:04.707773 kubelet[2911]: E0913 01:10:04.707753 2911 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 13 01:10:04.706000 audit[2911]: AVC avc: denied { mac_admin } for pid=2911 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:04.706000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:10:04.706000 audit[2911]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0000795c0 a1=c000c5c258 a2=c000079500 a3=25 items=0 ppid=1 pid=2911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:04.706000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:10:04.708450 kubelet[2911]: I0913 01:10:04.708074 2911 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 01:10:04.708450 kubelet[2911]: I0913 01:10:04.708106 2911 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 01:10:04.712370 kubelet[2911]: I0913 01:10:04.710936 2911 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 01:10:04.731064 kubelet[2911]: E0913 01:10:04.722093 2911 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 01:10:04.854505 kubelet[2911]: I0913 01:10:04.853384 2911 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-15" Sep 13 01:10:04.867011 kubelet[2911]: I0913 01:10:04.866981 2911 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-27-15" Sep 13 01:10:04.867406 kubelet[2911]: I0913 01:10:04.867386 2911 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-15" Sep 13 01:10:04.882759 kubelet[2911]: I0913 01:10:04.882723 2911 apiserver.go:52] "Watching apiserver" Sep 13 01:10:05.043105 kubelet[2911]: I0913 01:10:05.042771 2911 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-15" Sep 13 01:10:05.044772 kubelet[2911]: I0913 01:10:05.043393 2911 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-15" Sep 13 01:10:05.097733 kubelet[2911]: I0913 01:10:05.043515 2911 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:10:05.128032 kubelet[2911]: I0913 01:10:05.127886 2911 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 13 01:10:05.201338 kubelet[2911]: I0913 01:10:05.201293 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6ecf7d45774b9814d9e4af007c89b6e1-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-15\" (UID: \"6ecf7d45774b9814d9e4af007c89b6e1\") " pod="kube-system/kube-apiserver-ip-172-31-27-15" Sep 13 01:10:05.201542 kubelet[2911]: I0913 01:10:05.201351 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:10:05.201542 kubelet[2911]: I0913 01:10:05.201377 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:10:05.201542 kubelet[2911]: I0913 01:10:05.201403 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:10:05.201542 kubelet[2911]: I0913 01:10:05.201427 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:10:05.201542 kubelet[2911]: I0913 01:10:05.201449 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/198687fdd63363b9bb456dfc9667ce66-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-15\" (UID: \"198687fdd63363b9bb456dfc9667ce66\") " pod="kube-system/kube-scheduler-ip-172-31-27-15" Sep 13 01:10:05.201798 kubelet[2911]: I0913 01:10:05.201469 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6ecf7d45774b9814d9e4af007c89b6e1-ca-certs\") pod \"kube-apiserver-ip-172-31-27-15\" (UID: \"6ecf7d45774b9814d9e4af007c89b6e1\") " pod="kube-system/kube-apiserver-ip-172-31-27-15" Sep 13 01:10:05.201798 kubelet[2911]: I0913 01:10:05.201503 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6ecf7d45774b9814d9e4af007c89b6e1-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-15\" (UID: \"6ecf7d45774b9814d9e4af007c89b6e1\") " pod="kube-system/kube-apiserver-ip-172-31-27-15" Sep 13 01:10:05.201798 kubelet[2911]: I0913 01:10:05.201524 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f89a231eaa89f848e48ff7f21693064c-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-15\" (UID: \"f89a231eaa89f848e48ff7f21693064c\") " pod="kube-system/kube-controller-manager-ip-172-31-27-15" Sep 13 01:10:05.474837 kubelet[2911]: I0913 01:10:05.474649 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-27-15" podStartSLOduration=0.474629716 podStartE2EDuration="474.629716ms" podCreationTimestamp="2025-09-13 01:10:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:10:05.45711683 +0000 UTC m=+2.033068598" watchObservedRunningTime="2025-09-13 01:10:05.474629716 +0000 UTC m=+2.050581483" Sep 13 01:10:05.509112 kubelet[2911]: I0913 01:10:05.509063 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-27-15" podStartSLOduration=0.509047722 podStartE2EDuration="509.047722ms" podCreationTimestamp="2025-09-13 01:10:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:10:05.478796898 +0000 UTC m=+2.054748665" watchObservedRunningTime="2025-09-13 01:10:05.509047722 +0000 UTC m=+2.084999465" Sep 13 01:10:05.829551 kubelet[2911]: I0913 01:10:05.829525 2911 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 13 01:10:05.830572 env[1748]: time="2025-09-13T01:10:05.830354458Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 13 01:10:05.831150 kubelet[2911]: I0913 01:10:05.831134 2911 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 13 01:10:06.001520 kubelet[2911]: I0913 01:10:06.001454 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-27-15" podStartSLOduration=1.001433854 podStartE2EDuration="1.001433854s" podCreationTimestamp="2025-09-13 01:10:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:10:05.50954145 +0000 UTC m=+2.085493208" watchObservedRunningTime="2025-09-13 01:10:06.001433854 +0000 UTC m=+2.577385620" Sep 13 01:10:10.115550 systemd[1]: Created slice kubepods-besteffort-pod5ed7fb61_594c_475e_98a5_fdf95591636b.slice. Sep 13 01:10:10.147573 systemd[1]: Created slice kubepods-besteffort-pod24b3e339_36fc_42aa_b17c_1dc6baca355d.slice. Sep 13 01:10:10.234524 kubelet[2911]: I0913 01:10:10.234481 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xb9dw\" (UniqueName: \"kubernetes.io/projected/24b3e339-36fc-42aa-b17c-1dc6baca355d-kube-api-access-xb9dw\") pod \"tigera-operator-755d956888-6k52x\" (UID: \"24b3e339-36fc-42aa-b17c-1dc6baca355d\") " pod="tigera-operator/tigera-operator-755d956888-6k52x" Sep 13 01:10:10.235118 kubelet[2911]: I0913 01:10:10.234580 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5ed7fb61-594c-475e-98a5-fdf95591636b-xtables-lock\") pod \"kube-proxy-dd5vg\" (UID: \"5ed7fb61-594c-475e-98a5-fdf95591636b\") " pod="kube-system/kube-proxy-dd5vg" Sep 13 01:10:10.235118 kubelet[2911]: I0913 01:10:10.234631 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5ed7fb61-594c-475e-98a5-fdf95591636b-lib-modules\") pod \"kube-proxy-dd5vg\" (UID: \"5ed7fb61-594c-475e-98a5-fdf95591636b\") " pod="kube-system/kube-proxy-dd5vg" Sep 13 01:10:10.235118 kubelet[2911]: I0913 01:10:10.234650 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/24b3e339-36fc-42aa-b17c-1dc6baca355d-var-lib-calico\") pod \"tigera-operator-755d956888-6k52x\" (UID: \"24b3e339-36fc-42aa-b17c-1dc6baca355d\") " pod="tigera-operator/tigera-operator-755d956888-6k52x" Sep 13 01:10:10.235118 kubelet[2911]: I0913 01:10:10.234696 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/5ed7fb61-594c-475e-98a5-fdf95591636b-kube-proxy\") pod \"kube-proxy-dd5vg\" (UID: \"5ed7fb61-594c-475e-98a5-fdf95591636b\") " pod="kube-system/kube-proxy-dd5vg" Sep 13 01:10:10.235118 kubelet[2911]: I0913 01:10:10.234713 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6h2lt\" (UniqueName: \"kubernetes.io/projected/5ed7fb61-594c-475e-98a5-fdf95591636b-kube-api-access-6h2lt\") pod \"kube-proxy-dd5vg\" (UID: \"5ed7fb61-594c-475e-98a5-fdf95591636b\") " pod="kube-system/kube-proxy-dd5vg" Sep 13 01:10:10.341382 kubelet[2911]: I0913 01:10:10.341352 2911 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 13 01:10:10.425113 env[1748]: time="2025-09-13T01:10:10.424697834Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dd5vg,Uid:5ed7fb61-594c-475e-98a5-fdf95591636b,Namespace:kube-system,Attempt:0,}" Sep 13 01:10:10.452968 env[1748]: time="2025-09-13T01:10:10.452927131Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-6k52x,Uid:24b3e339-36fc-42aa-b17c-1dc6baca355d,Namespace:tigera-operator,Attempt:0,}" Sep 13 01:10:10.453566 env[1748]: time="2025-09-13T01:10:10.453504784Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:10:10.453687 env[1748]: time="2025-09-13T01:10:10.453552830Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:10:10.453687 env[1748]: time="2025-09-13T01:10:10.453563756Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:10:10.453805 env[1748]: time="2025-09-13T01:10:10.453748196Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c84a416ca0c90725350a76ef1866e0e1af92e7a6b7d1a749ec68a39a0c7fca9d pid=2967 runtime=io.containerd.runc.v2 Sep 13 01:10:10.514937 systemd[1]: Started cri-containerd-c84a416ca0c90725350a76ef1866e0e1af92e7a6b7d1a749ec68a39a0c7fca9d.scope. Sep 13 01:10:10.532065 env[1748]: time="2025-09-13T01:10:10.531976134Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:10:10.532301 env[1748]: time="2025-09-13T01:10:10.532044422Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:10:10.532301 env[1748]: time="2025-09-13T01:10:10.532065994Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:10:10.533273 env[1748]: time="2025-09-13T01:10:10.532330697Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d817f6db42849e723efc792fb1577474bb5f909d7966d3044fbbfb3d2f8fe265 pid=3002 runtime=io.containerd.runc.v2 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.544338 kernel: kauditd_printk_skb: 18 callbacks suppressed Sep 13 01:10:10.544479 kernel: audit: type=1400 audit(1757725810.540:823): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.558844 kernel: audit: type=1400 audit(1757725810.540:824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.566532 kernel: audit: type=1400 audit(1757725810.540:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.581942 kernel: audit: type=1400 audit(1757725810.540:826): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.581524 systemd[1]: Started cri-containerd-d817f6db42849e723efc792fb1577474bb5f909d7966d3044fbbfb3d2f8fe265.scope. Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.590991 kernel: audit: type=1400 audit(1757725810.540:827): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.602686 kernel: audit: type=1400 audit(1757725810.540:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.612479 env[1748]: time="2025-09-13T01:10:10.612092714Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dd5vg,Uid:5ed7fb61-594c-475e-98a5-fdf95591636b,Namespace:kube-system,Attempt:0,} returns sandbox id \"c84a416ca0c90725350a76ef1866e0e1af92e7a6b7d1a749ec68a39a0c7fca9d\"" Sep 13 01:10:10.619856 kernel: audit: type=1400 audit(1757725810.540:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.619998 kernel: audit: type=1400 audit(1757725810.540:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.627625 kernel: audit: type=1400 audit(1757725810.540:831): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.639716 kernel: audit: type=1400 audit(1757725810.541:832): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.541000 audit: BPF prog-id=103 op=LOAD Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2967 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346134313663613063393037323533353061373665663138363665 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2967 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346134313663613063393037323533353061373665663138363665 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.552000 audit: BPF prog-id=104 op=LOAD Sep 13 01:10:10.552000 audit[2978]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002891c0 items=0 ppid=2967 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346134313663613063393037323533353061373665663138363665 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit: BPF prog-id=105 op=LOAD Sep 13 01:10:10.567000 audit[2978]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000289208 items=0 ppid=2967 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346134313663613063393037323533353061373665663138363665 Sep 13 01:10:10.567000 audit: BPF prog-id=105 op=UNLOAD Sep 13 01:10:10.567000 audit: BPF prog-id=104 op=UNLOAD Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { perfmon } for pid=2978 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit[2978]: AVC avc: denied { bpf } for pid=2978 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.567000 audit: BPF prog-id=106 op=LOAD Sep 13 01:10:10.567000 audit[2978]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000289618 items=0 ppid=2967 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338346134313663613063393037323533353061373665663138363665 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.642000 audit: BPF prog-id=107 op=LOAD Sep 13 01:10:10.651443 env[1748]: time="2025-09-13T01:10:10.640564656Z" level=info msg="CreateContainer within sandbox \"c84a416ca0c90725350a76ef1866e0e1af92e7a6b7d1a749ec68a39a0c7fca9d\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3002 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438313766366462343238343965373233656663373932666231353737 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3002 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438313766366462343238343965373233656663373932666231353737 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.651000 audit: BPF prog-id=108 op=LOAD Sep 13 01:10:10.651000 audit[3014]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000357ff0 items=0 ppid=3002 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438313766366462343238343965373233656663373932666231353737 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.652000 audit: BPF prog-id=109 op=LOAD Sep 13 01:10:10.652000 audit[3014]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003d6038 items=0 ppid=3002 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438313766366462343238343965373233656663373932666231353737 Sep 13 01:10:10.653000 audit: BPF prog-id=109 op=UNLOAD Sep 13 01:10:10.653000 audit: BPF prog-id=108 op=UNLOAD Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.653000 audit: BPF prog-id=110 op=LOAD Sep 13 01:10:10.653000 audit[3014]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d6448 items=0 ppid=3002 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438313766366462343238343965373233656663373932666231353737 Sep 13 01:10:10.688899 env[1748]: time="2025-09-13T01:10:10.688771030Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-6k52x,Uid:24b3e339-36fc-42aa-b17c-1dc6baca355d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"d817f6db42849e723efc792fb1577474bb5f909d7966d3044fbbfb3d2f8fe265\"" Sep 13 01:10:10.693903 env[1748]: time="2025-09-13T01:10:10.693862441Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 13 01:10:10.706800 env[1748]: time="2025-09-13T01:10:10.706644958Z" level=info msg="CreateContainer within sandbox \"c84a416ca0c90725350a76ef1866e0e1af92e7a6b7d1a749ec68a39a0c7fca9d\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"990d254fc5e5d71558e038e029bc65e8817030488d98a29a8f66378325011327\"" Sep 13 01:10:10.709030 env[1748]: time="2025-09-13T01:10:10.708999599Z" level=info msg="StartContainer for \"990d254fc5e5d71558e038e029bc65e8817030488d98a29a8f66378325011327\"" Sep 13 01:10:10.730313 systemd[1]: Started cri-containerd-990d254fc5e5d71558e038e029bc65e8817030488d98a29a8f66378325011327.scope. Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fac34098f98 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939306432353466633565356437313535386530333865303239626336 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.749000 audit: BPF prog-id=111 op=LOAD Sep 13 01:10:10.749000 audit[3052]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00036e218 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939306432353466633565356437313535386530333865303239626336 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.750000 audit: BPF prog-id=112 op=LOAD Sep 13 01:10:10.750000 audit[3052]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00036e268 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939306432353466633565356437313535386530333865303239626336 Sep 13 01:10:10.751000 audit: BPF prog-id=112 op=UNLOAD Sep 13 01:10:10.751000 audit: BPF prog-id=111 op=UNLOAD Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { perfmon } for pid=3052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit[3052]: AVC avc: denied { bpf } for pid=3052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:10.751000 audit: BPF prog-id=113 op=LOAD Sep 13 01:10:10.751000 audit[3052]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00036e2f8 items=0 ppid=2967 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:10.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939306432353466633565356437313535386530333865303239626336 Sep 13 01:10:10.772281 env[1748]: time="2025-09-13T01:10:10.772231802Z" level=info msg="StartContainer for \"990d254fc5e5d71558e038e029bc65e8817030488d98a29a8f66378325011327\" returns successfully" Sep 13 01:10:11.371455 systemd[1]: run-containerd-runc-k8s.io-c84a416ca0c90725350a76ef1866e0e1af92e7a6b7d1a749ec68a39a0c7fca9d-runc.fWcLhw.mount: Deactivated successfully. Sep 13 01:10:11.404210 kubelet[2911]: I0913 01:10:11.404098 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-dd5vg" podStartSLOduration=5.404063901 podStartE2EDuration="5.404063901s" podCreationTimestamp="2025-09-13 01:10:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:10:11.403823037 +0000 UTC m=+7.979774816" watchObservedRunningTime="2025-09-13 01:10:11.404063901 +0000 UTC m=+7.980015671" Sep 13 01:10:12.344107 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3351229720.mount: Deactivated successfully. Sep 13 01:10:13.284271 env[1748]: time="2025-09-13T01:10:13.284214681Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:13.287428 env[1748]: time="2025-09-13T01:10:13.287374136Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:13.290743 env[1748]: time="2025-09-13T01:10:13.290681579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:13.293403 env[1748]: time="2025-09-13T01:10:13.293359917Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:13.294303 env[1748]: time="2025-09-13T01:10:13.294253122Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 13 01:10:13.300049 env[1748]: time="2025-09-13T01:10:13.300005117Z" level=info msg="CreateContainer within sandbox \"d817f6db42849e723efc792fb1577474bb5f909d7966d3044fbbfb3d2f8fe265\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 13 01:10:13.318497 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2188990944.mount: Deactivated successfully. Sep 13 01:10:13.325218 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount976827318.mount: Deactivated successfully. Sep 13 01:10:13.335468 env[1748]: time="2025-09-13T01:10:13.335397377Z" level=info msg="CreateContainer within sandbox \"d817f6db42849e723efc792fb1577474bb5f909d7966d3044fbbfb3d2f8fe265\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0\"" Sep 13 01:10:13.337464 env[1748]: time="2025-09-13T01:10:13.337373487Z" level=info msg="StartContainer for \"e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0\"" Sep 13 01:10:13.361036 systemd[1]: Started cri-containerd-e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0.scope. Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.384000 audit: BPF prog-id=114 op=LOAD Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3002 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:13.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323636313962303433306366646535396637653164363632393165 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3002 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:13.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323636313962303433306366646535396637653164363632393165 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit: BPF prog-id=115 op=LOAD Sep 13 01:10:13.387000 audit[3089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000221c70 items=0 ppid=3002 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:13.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323636313962303433306366646535396637653164363632393165 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit: BPF prog-id=116 op=LOAD Sep 13 01:10:13.387000 audit[3089]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000221cb8 items=0 ppid=3002 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:13.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323636313962303433306366646535396637653164363632393165 Sep 13 01:10:13.387000 audit: BPF prog-id=116 op=UNLOAD Sep 13 01:10:13.387000 audit: BPF prog-id=115 op=UNLOAD Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { perfmon } for pid=3089 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit[3089]: AVC avc: denied { bpf } for pid=3089 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:13.387000 audit: BPF prog-id=117 op=LOAD Sep 13 01:10:13.387000 audit[3089]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003160c8 items=0 ppid=3002 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:13.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323636313962303433306366646535396637653164363632393165 Sep 13 01:10:13.411886 env[1748]: time="2025-09-13T01:10:13.411836060Z" level=info msg="StartContainer for \"e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0\" returns successfully" Sep 13 01:10:16.854320 kernel: kauditd_printk_skb: 204 callbacks suppressed Sep 13 01:10:16.854530 kernel: audit: type=1325 audit(1757725816.845:883): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:16.845000 audit[3157]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:16.845000 audit[3157]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffec573d20 a2=0 a3=7fffec573d0c items=0 ppid=3065 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 01:10:16.868004 kernel: audit: type=1300 audit(1757725816.845:883): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffec573d20 a2=0 a3=7fffec573d0c items=0 ppid=3065 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.868058 kernel: audit: type=1327 audit(1757725816.845:883): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 01:10:16.869726 kernel: audit: type=1325 audit(1757725816.845:884): table=nat:39 family=2 entries=1 op=nft_register_chain pid=3158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:16.845000 audit[3158]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:16.845000 audit[3158]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea91df520 a2=0 a3=7ffea91df50c items=0 ppid=3065 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 01:10:16.886741 kernel: audit: type=1300 audit(1757725816.845:884): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea91df520 a2=0 a3=7ffea91df50c items=0 ppid=3065 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.886900 kernel: audit: type=1327 audit(1757725816.845:884): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 01:10:16.887113 kernel: audit: type=1325 audit(1757725816.848:885): table=filter:40 family=2 entries=1 op=nft_register_chain pid=3159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:16.848000 audit[3159]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=3159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:16.848000 audit[3159]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd2d501d80 a2=0 a3=7ffd2d501d6c items=0 ppid=3065 pid=3159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.900264 kernel: audit: type=1300 audit(1757725816.848:885): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd2d501d80 a2=0 a3=7ffd2d501d6c items=0 ppid=3065 pid=3159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.848000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 01:10:16.848000 audit[3160]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:16.912231 kernel: audit: type=1327 audit(1757725816.848:885): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 01:10:16.912383 kernel: audit: type=1325 audit(1757725816.848:886): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:16.848000 audit[3160]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff414bfaf0 a2=0 a3=7fff414bfadc items=0 ppid=3065 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.848000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 01:10:16.848000 audit[3161]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:16.848000 audit[3161]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff79f10830 a2=0 a3=7fff79f1081c items=0 ppid=3065 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.848000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 01:10:16.854000 audit[3162]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:16.854000 audit[3162]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb1002740 a2=0 a3=7fffb100272c items=0 ppid=3065 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 01:10:16.996000 audit[3165]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:16.996000 audit[3165]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc89a1b590 a2=0 a3=7ffc89a1b57c items=0 ppid=3065 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:16.996000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 01:10:17.036000 audit[3167]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.036000 audit[3167]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff6643efd0 a2=0 a3=7fff6643efbc items=0 ppid=3065 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.036000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 13 01:10:17.078000 audit[3170]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.078000 audit[3170]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd97ac5620 a2=0 a3=7ffd97ac560c items=0 ppid=3065 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 13 01:10:17.080000 audit[3171]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.080000 audit[3171]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc7b14b10 a2=0 a3=7ffcc7b14afc items=0 ppid=3065 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.080000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 01:10:17.084000 audit[3173]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.084000 audit[3173]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff24d25e50 a2=0 a3=7fff24d25e3c items=0 ppid=3065 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.084000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 01:10:17.087000 audit[3174]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.087000 audit[3174]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0736d020 a2=0 a3=7fff0736d00c items=0 ppid=3065 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 01:10:17.091000 audit[3176]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.091000 audit[3176]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe2a0137f0 a2=0 a3=7ffe2a0137dc items=0 ppid=3065 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 01:10:17.096000 audit[3179]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.096000 audit[3179]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc003d67b0 a2=0 a3=7ffc003d679c items=0 ppid=3065 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 13 01:10:17.098000 audit[3180]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.098000 audit[3180]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd4e0d650 a2=0 a3=7ffcd4e0d63c items=0 ppid=3065 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.098000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 01:10:17.102000 audit[3182]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.102000 audit[3182]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc204c5580 a2=0 a3=7ffc204c556c items=0 ppid=3065 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.102000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 01:10:17.104000 audit[3183]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.104000 audit[3183]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfa50a150 a2=0 a3=7ffcfa50a13c items=0 ppid=3065 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.104000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 01:10:17.108000 audit[3185]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.108000 audit[3185]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff83b16700 a2=0 a3=7fff83b166ec items=0 ppid=3065 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 01:10:17.113000 audit[3188]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.113000 audit[3188]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeb1fdd560 a2=0 a3=7ffeb1fdd54c items=0 ppid=3065 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 01:10:17.118000 audit[3191]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.118000 audit[3191]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdb13eab00 a2=0 a3=7ffdb13eaaec items=0 ppid=3065 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 01:10:17.120000 audit[3192]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.120000 audit[3192]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffed4344720 a2=0 a3=7ffed434470c items=0 ppid=3065 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.120000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 01:10:17.125000 audit[3194]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.125000 audit[3194]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe2da870f0 a2=0 a3=7ffe2da870dc items=0 ppid=3065 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:10:17.131000 audit[3197]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.131000 audit[3197]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeb76fd9e0 a2=0 a3=7ffeb76fd9cc items=0 ppid=3065 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.131000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:10:17.133000 audit[3198]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.133000 audit[3198]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbc1e3e00 a2=0 a3=7ffcbc1e3dec items=0 ppid=3065 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.133000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 01:10:17.136000 audit[3200]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:10:17.136000 audit[3200]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff722be040 a2=0 a3=7fff722be02c items=0 ppid=3065 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.136000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 01:10:17.282000 audit[3206]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:17.282000 audit[3206]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd03598300 a2=0 a3=7ffd035982ec items=0 ppid=3065 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.282000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:17.291000 audit[3206]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:17.291000 audit[3206]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd03598300 a2=0 a3=7ffd035982ec items=0 ppid=3065 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:17.294000 audit[3211]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.294000 audit[3211]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcaec55650 a2=0 a3=7ffcaec5563c items=0 ppid=3065 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.294000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 01:10:17.302000 audit[3213]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.302000 audit[3213]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe842346d0 a2=0 a3=7ffe842346bc items=0 ppid=3065 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.302000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 13 01:10:17.308000 audit[3216]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.308000 audit[3216]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd74618fe0 a2=0 a3=7ffd74618fcc items=0 ppid=3065 pid=3216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.308000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 13 01:10:17.309000 audit[3217]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.309000 audit[3217]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff8e90cd60 a2=0 a3=7fff8e90cd4c items=0 ppid=3065 pid=3217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.309000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 01:10:17.316000 audit[3219]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.316000 audit[3219]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc2edb0480 a2=0 a3=7ffc2edb046c items=0 ppid=3065 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.316000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 01:10:17.318000 audit[3220]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.318000 audit[3220]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffe840180 a2=0 a3=7ffffe84016c items=0 ppid=3065 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.318000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 01:10:17.325000 audit[3222]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.325000 audit[3222]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd6ed39d70 a2=0 a3=7ffd6ed39d5c items=0 ppid=3065 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.325000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 13 01:10:17.330000 audit[3225]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.330000 audit[3225]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd2ae58790 a2=0 a3=7ffd2ae5877c items=0 ppid=3065 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.330000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 01:10:17.332000 audit[3226]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.332000 audit[3226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfed698b0 a2=0 a3=7ffcfed6989c items=0 ppid=3065 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.332000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 01:10:17.336000 audit[3228]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.336000 audit[3228]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdbe2bfd20 a2=0 a3=7ffdbe2bfd0c items=0 ppid=3065 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.336000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 01:10:17.337000 audit[3229]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.337000 audit[3229]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5da09f50 a2=0 a3=7ffe5da09f3c items=0 ppid=3065 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.337000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 01:10:17.341000 audit[3231]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.341000 audit[3231]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcfba4b9e0 a2=0 a3=7ffcfba4b9cc items=0 ppid=3065 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 01:10:17.345000 audit[3234]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.345000 audit[3234]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcd84dd860 a2=0 a3=7ffcd84dd84c items=0 ppid=3065 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.345000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 01:10:17.350000 audit[3237]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.350000 audit[3237]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffda2107020 a2=0 a3=7ffda210700c items=0 ppid=3065 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.350000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 13 01:10:17.351000 audit[3238]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.351000 audit[3238]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdf6d04b40 a2=0 a3=7ffdf6d04b2c items=0 ppid=3065 pid=3238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.351000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 01:10:17.354000 audit[3240]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.354000 audit[3240]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe203f1090 a2=0 a3=7ffe203f107c items=0 ppid=3065 pid=3240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.354000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:10:17.360000 audit[3243]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.360000 audit[3243]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc2c0d3b90 a2=0 a3=7ffc2c0d3b7c items=0 ppid=3065 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:10:17.362000 audit[3244]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.362000 audit[3244]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdde96b410 a2=0 a3=7ffdde96b3fc items=0 ppid=3065 pid=3244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.362000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 01:10:17.365000 audit[3246]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.365000 audit[3246]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffeb9a1d720 a2=0 a3=7ffeb9a1d70c items=0 ppid=3065 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.365000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 01:10:17.367000 audit[3247]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.367000 audit[3247]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5d911010 a2=0 a3=7fff5d910ffc items=0 ppid=3065 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.367000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 01:10:17.370000 audit[3249]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.370000 audit[3249]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc2bc8ecd0 a2=0 a3=7ffc2bc8ecbc items=0 ppid=3065 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.370000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:10:17.374000 audit[3252]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:10:17.374000 audit[3252]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe0446b8b0 a2=0 a3=7ffe0446b89c items=0 ppid=3065 pid=3252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.374000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:10:17.379000 audit[3254]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 01:10:17.379000 audit[3254]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fffc6dec780 a2=0 a3=7fffc6dec76c items=0 ppid=3065 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.379000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:17.379000 audit[3254]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 01:10:17.379000 audit[3254]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffc6dec780 a2=0 a3=7fffc6dec76c items=0 ppid=3065 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:17.379000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:49.679429 sudo[2017]: pam_unix(sudo:session): session closed for user root Sep 13 01:10:49.691390 kernel: kauditd_printk_skb: 143 callbacks suppressed Sep 13 01:10:49.691571 kernel: audit: type=1106 audit(1757725849.678:934): pid=2017 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:10:49.678000 audit[2017]: USER_END pid=2017 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:10:49.679000 audit[2017]: CRED_DISP pid=2017 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:10:49.704696 kernel: audit: type=1104 audit(1757725849.679:935): pid=2017 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:10:49.730945 sshd[2014]: pam_unix(sshd:session): session closed for user core Sep 13 01:10:49.737000 audit[2014]: USER_END pid=2014 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:10:49.747934 kernel: audit: type=1106 audit(1757725849.737:936): pid=2014 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:10:49.750796 systemd[1]: sshd@6-172.31.27.15:22-147.75.109.163:33768.service: Deactivated successfully. Sep 13 01:10:49.737000 audit[2014]: CRED_DISP pid=2014 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:10:49.753088 systemd[1]: session-7.scope: Deactivated successfully. Sep 13 01:10:49.753275 systemd[1]: session-7.scope: Consumed 5.529s CPU time. Sep 13 01:10:49.760951 systemd-logind[1738]: Session 7 logged out. Waiting for processes to exit. Sep 13 01:10:49.761732 kernel: audit: type=1104 audit(1757725849.737:937): pid=2014 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:10:49.762333 systemd-logind[1738]: Removed session 7. Sep 13 01:10:49.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.15:22-147.75.109.163:33768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:10:49.775698 kernel: audit: type=1131 audit(1757725849.750:938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.15:22-147.75.109.163:33768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:10:51.069000 audit[3304]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:51.076688 kernel: audit: type=1325 audit(1757725851.069:939): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:51.069000 audit[3304]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fffb9f31450 a2=0 a3=7fffb9f3143c items=0 ppid=3065 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:51.092681 kernel: audit: type=1300 audit(1757725851.069:939): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fffb9f31450 a2=0 a3=7fffb9f3143c items=0 ppid=3065 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:51.080000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:51.107695 kernel: audit: type=1400 audit(1757725851.080:940): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:51.080000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001ff5ef0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:51.121686 kernel: audit: type=1300 audit(1757725851.080:940): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001ff5ef0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:51.080000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:51.138721 kernel: audit: type=1327 audit(1757725851.080:940): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:51.080000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:51.080000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002b18d00 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:10:51.080000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:10:51.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:51.092000 audit[3304]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:51.092000 audit[3304]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb9f31450 a2=0 a3=0 items=0 ppid=3065 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:51.092000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:51.125000 audit[3306]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:51.125000 audit[3306]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffce74bd640 a2=0 a3=7ffce74bd62c items=0 ppid=3065 pid=3306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:51.125000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:51.141000 audit[3306]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:51.141000 audit[3306]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffce74bd640 a2=0 a3=0 items=0 ppid=3065 pid=3306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:51.141000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:53.976000 audit[3308]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3308 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:53.976000 audit[3308]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe96ae1a60 a2=0 a3=7ffe96ae1a4c items=0 ppid=3065 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:53.976000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:53.981000 audit[3308]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3308 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:53.981000 audit[3308]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe96ae1a60 a2=0 a3=0 items=0 ppid=3065 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:53.981000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:53.998000 audit[3310]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3310 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:53.998000 audit[3310]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd045588a0 a2=0 a3=7ffd0455888c items=0 ppid=3065 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:53.998000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:54.003000 audit[3310]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3310 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:54.003000 audit[3310]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd045588a0 a2=0 a3=0 items=0 ppid=3065 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.003000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:54.075333 kubelet[2911]: I0913 01:10:54.075252 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-6k52x" podStartSLOduration=44.471373847 podStartE2EDuration="47.075230723s" podCreationTimestamp="2025-09-13 01:10:07 +0000 UTC" firstStartedPulling="2025-09-13 01:10:10.691327989 +0000 UTC m=+7.267279734" lastFinishedPulling="2025-09-13 01:10:13.295184866 +0000 UTC m=+9.871136610" observedRunningTime="2025-09-13 01:10:14.429592631 +0000 UTC m=+11.005544399" watchObservedRunningTime="2025-09-13 01:10:54.075230723 +0000 UTC m=+50.651182483" Sep 13 01:10:54.117915 systemd[1]: Created slice kubepods-besteffort-pod55f4ed2d_eef6_4758_a3f7_ff57c3b35eab.slice. Sep 13 01:10:54.226168 kubelet[2911]: I0913 01:10:54.226130 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/55f4ed2d-eef6-4758-a3f7-ff57c3b35eab-typha-certs\") pod \"calico-typha-bd8cf84b5-kn6dr\" (UID: \"55f4ed2d-eef6-4758-a3f7-ff57c3b35eab\") " pod="calico-system/calico-typha-bd8cf84b5-kn6dr" Sep 13 01:10:54.226414 kubelet[2911]: I0913 01:10:54.226396 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nc6x4\" (UniqueName: \"kubernetes.io/projected/55f4ed2d-eef6-4758-a3f7-ff57c3b35eab-kube-api-access-nc6x4\") pod \"calico-typha-bd8cf84b5-kn6dr\" (UID: \"55f4ed2d-eef6-4758-a3f7-ff57c3b35eab\") " pod="calico-system/calico-typha-bd8cf84b5-kn6dr" Sep 13 01:10:54.226495 kubelet[2911]: I0913 01:10:54.226485 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/55f4ed2d-eef6-4758-a3f7-ff57c3b35eab-tigera-ca-bundle\") pod \"calico-typha-bd8cf84b5-kn6dr\" (UID: \"55f4ed2d-eef6-4758-a3f7-ff57c3b35eab\") " pod="calico-system/calico-typha-bd8cf84b5-kn6dr" Sep 13 01:10:54.362715 systemd[1]: Created slice kubepods-besteffort-pode0bfdf7a_f964_4715_a67e_07fd12a64dcf.slice. Sep 13 01:10:54.426622 env[1748]: time="2025-09-13T01:10:54.426255000Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-bd8cf84b5-kn6dr,Uid:55f4ed2d-eef6-4758-a3f7-ff57c3b35eab,Namespace:calico-system,Attempt:0,}" Sep 13 01:10:54.427907 kubelet[2911]: I0913 01:10:54.427877 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-cni-net-dir\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.427907 kubelet[2911]: I0913 01:10:54.427909 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-var-lib-calico\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428059 kubelet[2911]: I0913 01:10:54.427924 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-xtables-lock\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428059 kubelet[2911]: I0913 01:10:54.427946 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-node-certs\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428059 kubelet[2911]: I0913 01:10:54.427960 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-lib-modules\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428059 kubelet[2911]: I0913 01:10:54.427975 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-policysync\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428059 kubelet[2911]: I0913 01:10:54.427990 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-tigera-ca-bundle\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428192 kubelet[2911]: I0913 01:10:54.428005 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-var-run-calico\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428192 kubelet[2911]: I0913 01:10:54.428028 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-flexvol-driver-host\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428192 kubelet[2911]: I0913 01:10:54.428063 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jk5c4\" (UniqueName: \"kubernetes.io/projected/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-kube-api-access-jk5c4\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428192 kubelet[2911]: I0913 01:10:54.428084 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-cni-bin-dir\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.428192 kubelet[2911]: I0913 01:10:54.428100 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/e0bfdf7a-f964-4715-a67e-07fd12a64dcf-cni-log-dir\") pod \"calico-node-c8q7j\" (UID: \"e0bfdf7a-f964-4715-a67e-07fd12a64dcf\") " pod="calico-system/calico-node-c8q7j" Sep 13 01:10:54.459506 env[1748]: time="2025-09-13T01:10:54.459416099Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:10:54.459715 env[1748]: time="2025-09-13T01:10:54.459527400Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:10:54.459715 env[1748]: time="2025-09-13T01:10:54.459561371Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:10:54.459992 env[1748]: time="2025-09-13T01:10:54.459941955Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/53ca4a88f0907c633843cc1512ce60591967e1d952938818069939210bc659cb pid=3320 runtime=io.containerd.runc.v2 Sep 13 01:10:54.485415 systemd[1]: Started cri-containerd-53ca4a88f0907c633843cc1512ce60591967e1d952938818069939210bc659cb.scope. Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.518000 audit: BPF prog-id=118 op=LOAD Sep 13 01:10:54.518000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.518000 audit[3330]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3320 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533636134613838663039303763363333383433636331353132636536 Sep 13 01:10:54.518000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.518000 audit[3330]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3320 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533636134613838663039303763363333383433636331353132636536 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.519000 audit: BPF prog-id=119 op=LOAD Sep 13 01:10:54.519000 audit[3330]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003d0240 items=0 ppid=3320 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533636134613838663039303763363333383433636331353132636536 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.520000 audit: BPF prog-id=120 op=LOAD Sep 13 01:10:54.520000 audit[3330]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003d0288 items=0 ppid=3320 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533636134613838663039303763363333383433636331353132636536 Sep 13 01:10:54.521000 audit: BPF prog-id=120 op=UNLOAD Sep 13 01:10:54.521000 audit: BPF prog-id=119 op=UNLOAD Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { perfmon } for pid=3330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit[3330]: AVC avc: denied { bpf } for pid=3330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.521000 audit: BPF prog-id=121 op=LOAD Sep 13 01:10:54.521000 audit[3330]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003d0698 items=0 ppid=3320 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533636134613838663039303763363333383433636331353132636536 Sep 13 01:10:54.532731 kubelet[2911]: E0913 01:10:54.532697 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.532731 kubelet[2911]: W0913 01:10:54.532727 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.532945 kubelet[2911]: E0913 01:10:54.532754 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.536143 kubelet[2911]: E0913 01:10:54.536006 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.536143 kubelet[2911]: W0913 01:10:54.536029 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.536143 kubelet[2911]: E0913 01:10:54.536051 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.546334 kubelet[2911]: E0913 01:10:54.546289 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.546334 kubelet[2911]: W0913 01:10:54.546322 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.546560 kubelet[2911]: E0913 01:10:54.546345 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.563073 env[1748]: time="2025-09-13T01:10:54.563016462Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-bd8cf84b5-kn6dr,Uid:55f4ed2d-eef6-4758-a3f7-ff57c3b35eab,Namespace:calico-system,Attempt:0,} returns sandbox id \"53ca4a88f0907c633843cc1512ce60591967e1d952938818069939210bc659cb\"" Sep 13 01:10:54.567739 env[1748]: time="2025-09-13T01:10:54.566956898Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 13 01:10:54.647440 kubelet[2911]: E0913 01:10:54.647326 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:10:54.666101 env[1748]: time="2025-09-13T01:10:54.666054563Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-c8q7j,Uid:e0bfdf7a-f964-4715-a67e-07fd12a64dcf,Namespace:calico-system,Attempt:0,}" Sep 13 01:10:54.666737 kubelet[2911]: E0913 01:10:54.666707 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.666737 kubelet[2911]: W0913 01:10:54.666736 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.666922 kubelet[2911]: E0913 01:10:54.666761 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.667024 kubelet[2911]: E0913 01:10:54.667007 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.667024 kubelet[2911]: W0913 01:10:54.667019 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.667129 kubelet[2911]: E0913 01:10:54.667032 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.667349 kubelet[2911]: E0913 01:10:54.667332 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.667349 kubelet[2911]: W0913 01:10:54.667348 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.667488 kubelet[2911]: E0913 01:10:54.667363 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.667671 kubelet[2911]: E0913 01:10:54.667644 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.667671 kubelet[2911]: W0913 01:10:54.667670 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.667811 kubelet[2911]: E0913 01:10:54.667685 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.667929 kubelet[2911]: E0913 01:10:54.667910 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.667929 kubelet[2911]: W0913 01:10:54.667929 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.668057 kubelet[2911]: E0913 01:10:54.667942 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.668160 kubelet[2911]: E0913 01:10:54.668145 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.668214 kubelet[2911]: W0913 01:10:54.668161 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.668214 kubelet[2911]: E0913 01:10:54.668174 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.668409 kubelet[2911]: E0913 01:10:54.668368 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.668409 kubelet[2911]: W0913 01:10:54.668385 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.668600 kubelet[2911]: E0913 01:10:54.668409 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.668649 kubelet[2911]: E0913 01:10:54.668614 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.668649 kubelet[2911]: W0913 01:10:54.668626 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.668649 kubelet[2911]: E0913 01:10:54.668638 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.668887 kubelet[2911]: E0913 01:10:54.668873 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.668956 kubelet[2911]: W0913 01:10:54.668889 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.668956 kubelet[2911]: E0913 01:10:54.668902 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.669173 kubelet[2911]: E0913 01:10:54.669111 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.669173 kubelet[2911]: W0913 01:10:54.669121 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.669173 kubelet[2911]: E0913 01:10:54.669152 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.669433 kubelet[2911]: E0913 01:10:54.669416 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.669505 kubelet[2911]: W0913 01:10:54.669438 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.669505 kubelet[2911]: E0913 01:10:54.669455 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.669737 kubelet[2911]: E0913 01:10:54.669721 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.669813 kubelet[2911]: W0913 01:10:54.669738 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.669813 kubelet[2911]: E0913 01:10:54.669752 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.669978 kubelet[2911]: E0913 01:10:54.669963 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.670040 kubelet[2911]: W0913 01:10:54.669980 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.670040 kubelet[2911]: E0913 01:10:54.669992 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.670197 kubelet[2911]: E0913 01:10:54.670182 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.670252 kubelet[2911]: W0913 01:10:54.670198 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.670252 kubelet[2911]: E0913 01:10:54.670211 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.670483 kubelet[2911]: E0913 01:10:54.670468 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.670556 kubelet[2911]: W0913 01:10:54.670484 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.670556 kubelet[2911]: E0913 01:10:54.670499 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.670789 kubelet[2911]: E0913 01:10:54.670774 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.670859 kubelet[2911]: W0913 01:10:54.670791 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.670859 kubelet[2911]: E0913 01:10:54.670805 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.671122 kubelet[2911]: E0913 01:10:54.671104 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.671194 kubelet[2911]: W0913 01:10:54.671122 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.671194 kubelet[2911]: E0913 01:10:54.671159 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.671603 kubelet[2911]: E0913 01:10:54.671420 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.671603 kubelet[2911]: W0913 01:10:54.671434 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.671603 kubelet[2911]: E0913 01:10:54.671448 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.676706 kubelet[2911]: E0913 01:10:54.676649 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.676706 kubelet[2911]: W0913 01:10:54.676703 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.676927 kubelet[2911]: E0913 01:10:54.676729 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.677140 kubelet[2911]: E0913 01:10:54.677121 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.677214 kubelet[2911]: W0913 01:10:54.677159 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.677214 kubelet[2911]: E0913 01:10:54.677180 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.700250 env[1748]: time="2025-09-13T01:10:54.697788514Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:10:54.700250 env[1748]: time="2025-09-13T01:10:54.697850077Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:10:54.700250 env[1748]: time="2025-09-13T01:10:54.697865933Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:10:54.700250 env[1748]: time="2025-09-13T01:10:54.698033698Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40 pid=3385 runtime=io.containerd.runc.v2 Sep 13 01:10:54.733189 systemd[1]: Started cri-containerd-3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40.scope. Sep 13 01:10:54.734572 kubelet[2911]: E0913 01:10:54.733809 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.734572 kubelet[2911]: W0913 01:10:54.733834 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.734572 kubelet[2911]: E0913 01:10:54.733862 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.734572 kubelet[2911]: I0913 01:10:54.733897 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/05fa90eb-9dab-4217-8797-8c89464df9e5-registration-dir\") pod \"csi-node-driver-p9jh8\" (UID: \"05fa90eb-9dab-4217-8797-8c89464df9e5\") " pod="calico-system/csi-node-driver-p9jh8" Sep 13 01:10:54.734892 kubelet[2911]: E0913 01:10:54.734666 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.734892 kubelet[2911]: W0913 01:10:54.734684 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.734892 kubelet[2911]: E0913 01:10:54.734701 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.734892 kubelet[2911]: I0913 01:10:54.734739 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/05fa90eb-9dab-4217-8797-8c89464df9e5-socket-dir\") pod \"csi-node-driver-p9jh8\" (UID: \"05fa90eb-9dab-4217-8797-8c89464df9e5\") " pod="calico-system/csi-node-driver-p9jh8" Sep 13 01:10:54.735082 kubelet[2911]: E0913 01:10:54.735057 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.735082 kubelet[2911]: W0913 01:10:54.735072 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.735171 kubelet[2911]: E0913 01:10:54.735096 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.735171 kubelet[2911]: I0913 01:10:54.735132 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qvcck\" (UniqueName: \"kubernetes.io/projected/05fa90eb-9dab-4217-8797-8c89464df9e5-kube-api-access-qvcck\") pod \"csi-node-driver-p9jh8\" (UID: \"05fa90eb-9dab-4217-8797-8c89464df9e5\") " pod="calico-system/csi-node-driver-p9jh8" Sep 13 01:10:54.737686 kubelet[2911]: E0913 01:10:54.735414 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.737686 kubelet[2911]: W0913 01:10:54.735428 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.737686 kubelet[2911]: E0913 01:10:54.735441 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.737686 kubelet[2911]: I0913 01:10:54.735469 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/05fa90eb-9dab-4217-8797-8c89464df9e5-kubelet-dir\") pod \"csi-node-driver-p9jh8\" (UID: \"05fa90eb-9dab-4217-8797-8c89464df9e5\") " pod="calico-system/csi-node-driver-p9jh8" Sep 13 01:10:54.737686 kubelet[2911]: E0913 01:10:54.735780 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.737686 kubelet[2911]: W0913 01:10:54.735800 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.737686 kubelet[2911]: E0913 01:10:54.735815 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.737686 kubelet[2911]: I0913 01:10:54.735926 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/05fa90eb-9dab-4217-8797-8c89464df9e5-varrun\") pod \"csi-node-driver-p9jh8\" (UID: \"05fa90eb-9dab-4217-8797-8c89464df9e5\") " pod="calico-system/csi-node-driver-p9jh8" Sep 13 01:10:54.737686 kubelet[2911]: E0913 01:10:54.736115 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.738148 kubelet[2911]: W0913 01:10:54.736131 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.738148 kubelet[2911]: E0913 01:10:54.736143 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.738148 kubelet[2911]: E0913 01:10:54.736361 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.738148 kubelet[2911]: W0913 01:10:54.736370 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.738148 kubelet[2911]: E0913 01:10:54.736398 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.741022 kubelet[2911]: E0913 01:10:54.740992 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.741022 kubelet[2911]: W0913 01:10:54.741019 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.741235 kubelet[2911]: E0913 01:10:54.741045 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.741362 kubelet[2911]: E0913 01:10:54.741345 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.741427 kubelet[2911]: W0913 01:10:54.741362 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.741427 kubelet[2911]: E0913 01:10:54.741379 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.741643 kubelet[2911]: E0913 01:10:54.741627 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.741726 kubelet[2911]: W0913 01:10:54.741643 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.741726 kubelet[2911]: E0913 01:10:54.741688 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.741946 kubelet[2911]: E0913 01:10:54.741929 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.742004 kubelet[2911]: W0913 01:10:54.741945 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.742004 kubelet[2911]: E0913 01:10:54.741959 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.742228 kubelet[2911]: E0913 01:10:54.742203 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.742291 kubelet[2911]: W0913 01:10:54.742228 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.742291 kubelet[2911]: E0913 01:10:54.742242 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.742511 kubelet[2911]: E0913 01:10:54.742484 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.742511 kubelet[2911]: W0913 01:10:54.742509 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.742618 kubelet[2911]: E0913 01:10:54.742523 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.742808 kubelet[2911]: E0913 01:10:54.742791 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.742871 kubelet[2911]: W0913 01:10:54.742808 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.742871 kubelet[2911]: E0913 01:10:54.742831 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.743092 kubelet[2911]: E0913 01:10:54.743068 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.743153 kubelet[2911]: W0913 01:10:54.743092 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.743153 kubelet[2911]: E0913 01:10:54.743106 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.837504 kubelet[2911]: E0913 01:10:54.837469 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.837504 kubelet[2911]: W0913 01:10:54.837500 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.837771 kubelet[2911]: E0913 01:10:54.837526 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.837921 kubelet[2911]: E0913 01:10:54.837899 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.837998 kubelet[2911]: W0913 01:10:54.837926 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.837998 kubelet[2911]: E0913 01:10:54.837943 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.838258 kubelet[2911]: E0913 01:10:54.838238 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.838258 kubelet[2911]: W0913 01:10:54.838257 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.838401 kubelet[2911]: E0913 01:10:54.838271 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.838565 kubelet[2911]: E0913 01:10:54.838547 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.838565 kubelet[2911]: W0913 01:10:54.838564 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.838784 kubelet[2911]: E0913 01:10:54.838579 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.838882 kubelet[2911]: E0913 01:10:54.838868 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.838934 kubelet[2911]: W0913 01:10:54.838884 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.838934 kubelet[2911]: E0913 01:10:54.838898 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.839200 kubelet[2911]: E0913 01:10:54.839185 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.839279 kubelet[2911]: W0913 01:10:54.839201 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.839279 kubelet[2911]: E0913 01:10:54.839215 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.839468 kubelet[2911]: E0913 01:10:54.839456 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.839530 kubelet[2911]: W0913 01:10:54.839469 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.839530 kubelet[2911]: E0913 01:10:54.839482 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.839749 kubelet[2911]: E0913 01:10:54.839732 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.839749 kubelet[2911]: W0913 01:10:54.839748 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.839878 kubelet[2911]: E0913 01:10:54.839762 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.840027 kubelet[2911]: E0913 01:10:54.840009 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.840027 kubelet[2911]: W0913 01:10:54.840025 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.840150 kubelet[2911]: E0913 01:10:54.840042 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.840309 kubelet[2911]: E0913 01:10:54.840293 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.840372 kubelet[2911]: W0913 01:10:54.840309 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.840372 kubelet[2911]: E0913 01:10:54.840322 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.840589 kubelet[2911]: E0913 01:10:54.840571 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.840651 kubelet[2911]: W0913 01:10:54.840588 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.840651 kubelet[2911]: E0913 01:10:54.840604 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.845349 kubelet[2911]: E0913 01:10:54.845312 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.845349 kubelet[2911]: W0913 01:10:54.845346 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.845612 kubelet[2911]: E0913 01:10:54.845373 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.846048 kubelet[2911]: E0913 01:10:54.845868 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.846048 kubelet[2911]: W0913 01:10:54.845887 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.846048 kubelet[2911]: E0913 01:10:54.845920 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.848044 kubelet[2911]: E0913 01:10:54.846318 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.848044 kubelet[2911]: W0913 01:10:54.846333 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.848044 kubelet[2911]: E0913 01:10:54.846350 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.848044 kubelet[2911]: E0913 01:10:54.846610 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.848044 kubelet[2911]: W0913 01:10:54.846621 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.848044 kubelet[2911]: E0913 01:10:54.846634 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.848044 kubelet[2911]: E0913 01:10:54.846862 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.848044 kubelet[2911]: W0913 01:10:54.846873 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.848044 kubelet[2911]: E0913 01:10:54.846885 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.848044 kubelet[2911]: E0913 01:10:54.847101 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.848583 kubelet[2911]: W0913 01:10:54.847112 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.848583 kubelet[2911]: E0913 01:10:54.847125 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.848583 kubelet[2911]: E0913 01:10:54.847340 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.848583 kubelet[2911]: W0913 01:10:54.847354 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.848583 kubelet[2911]: E0913 01:10:54.847367 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.848583 kubelet[2911]: E0913 01:10:54.847573 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.848583 kubelet[2911]: W0913 01:10:54.847584 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.848583 kubelet[2911]: E0913 01:10:54.847598 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.848583 kubelet[2911]: E0913 01:10:54.847821 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.848583 kubelet[2911]: W0913 01:10:54.847878 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.849013 kubelet[2911]: E0913 01:10:54.847897 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.850339 kubelet[2911]: E0913 01:10:54.849121 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.850339 kubelet[2911]: W0913 01:10:54.849135 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.850339 kubelet[2911]: E0913 01:10:54.849151 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.850339 kubelet[2911]: E0913 01:10:54.849447 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.850339 kubelet[2911]: W0913 01:10:54.849458 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.850339 kubelet[2911]: E0913 01:10:54.849474 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.850339 kubelet[2911]: E0913 01:10:54.849741 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.850339 kubelet[2911]: W0913 01:10:54.849752 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.850339 kubelet[2911]: E0913 01:10:54.849764 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.850339 kubelet[2911]: E0913 01:10:54.850015 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.851925 kubelet[2911]: W0913 01:10:54.850026 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.851925 kubelet[2911]: E0913 01:10:54.850040 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.851925 kubelet[2911]: E0913 01:10:54.850388 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.851925 kubelet[2911]: W0913 01:10:54.850401 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.851925 kubelet[2911]: E0913 01:10:54.850415 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.866913 kernel: kauditd_printk_skb: 82 callbacks suppressed Sep 13 01:10:54.867057 kernel: audit: type=1400 audit(1757725854.855:967): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.879090 kernel: audit: type=1400 audit(1757725854.855:968): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.881458 kubelet[2911]: E0913 01:10:54.881419 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:54.881458 kubelet[2911]: W0913 01:10:54.881455 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:54.881709 kubelet[2911]: E0913 01:10:54.881484 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:54.889736 kernel: audit: type=1400 audit(1757725854.855:969): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.898711 kernel: audit: type=1400 audit(1757725854.855:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.907860 kernel: audit: type=1400 audit(1757725854.855:971): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.918694 kernel: audit: type=1400 audit(1757725854.855:972): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.928695 kernel: audit: type=1400 audit(1757725854.855:973): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.936690 kernel: audit: type=1400 audit(1757725854.855:974): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.946708 kernel: audit: type=1400 audit(1757725854.855:975): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.955695 kernel: audit: type=1400 audit(1757725854.856:976): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.856000 audit: BPF prog-id=122 op=LOAD Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3385 pid=3395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365323266633832386263316430393061396433323262663534346631 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3385 pid=3395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365323266633832386263316430393061396433323262663534346631 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit: BPF prog-id=123 op=LOAD Sep 13 01:10:54.880000 audit[3395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000388570 items=0 ppid=3385 pid=3395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365323266633832386263316430393061396433323262663534346631 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit: BPF prog-id=124 op=LOAD Sep 13 01:10:54.880000 audit[3395]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003885b8 items=0 ppid=3385 pid=3395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365323266633832386263316430393061396433323262663534346631 Sep 13 01:10:54.880000 audit: BPF prog-id=124 op=UNLOAD Sep 13 01:10:54.880000 audit: BPF prog-id=123 op=UNLOAD Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { perfmon } for pid=3395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit[3395]: AVC avc: denied { bpf } for pid=3395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:54.880000 audit: BPF prog-id=125 op=LOAD Sep 13 01:10:54.880000 audit[3395]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003889c8 items=0 ppid=3385 pid=3395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:54.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365323266633832386263316430393061396433323262663534346631 Sep 13 01:10:54.978686 env[1748]: time="2025-09-13T01:10:54.978262804Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-c8q7j,Uid:e0bfdf7a-f964-4715-a67e-07fd12a64dcf,Namespace:calico-system,Attempt:0,} returns sandbox id \"3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40\"" Sep 13 01:10:55.020000 audit[3461]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=3461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:55.020000 audit[3461]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffdc8a98a0 a2=0 a3=7fffdc8a988c items=0 ppid=3065 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:55.020000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:55.025000 audit[3461]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:55.025000 audit[3461]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffdc8a98a0 a2=0 a3=0 items=0 ppid=3065 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:55.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:55.337395 systemd[1]: run-containerd-runc-k8s.io-53ca4a88f0907c633843cc1512ce60591967e1d952938818069939210bc659cb-runc.Mvt8eJ.mount: Deactivated successfully. Sep 13 01:10:55.920530 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3228967448.mount: Deactivated successfully. Sep 13 01:10:56.134487 kubelet[2911]: E0913 01:10:56.134427 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:10:57.258000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:57.258000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00a5d1800 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:10:57.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:10:57.258000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:57.258000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003c87240 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:10:57.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:10:57.258000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:57.258000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00a5d1860 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:10:57.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:10:57.263000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:57.263000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00a5d19e0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:10:57.263000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:10:57.361000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:57.361000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00a5d1a70 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:10:57.361000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:10:57.361000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:10:57.361000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003c87c40 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:10:57.361000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:10:57.479880 env[1748]: time="2025-09-13T01:10:57.479771366Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:57.485383 env[1748]: time="2025-09-13T01:10:57.485323223Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:57.489263 env[1748]: time="2025-09-13T01:10:57.489208059Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:57.491796 env[1748]: time="2025-09-13T01:10:57.491757557Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:57.492622 env[1748]: time="2025-09-13T01:10:57.492563248Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 13 01:10:57.494172 env[1748]: time="2025-09-13T01:10:57.494096509Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 13 01:10:57.525870 env[1748]: time="2025-09-13T01:10:57.524933812Z" level=info msg="CreateContainer within sandbox \"53ca4a88f0907c633843cc1512ce60591967e1d952938818069939210bc659cb\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 13 01:10:57.558112 env[1748]: time="2025-09-13T01:10:57.558019913Z" level=info msg="CreateContainer within sandbox \"53ca4a88f0907c633843cc1512ce60591967e1d952938818069939210bc659cb\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"a468b5410b317d582c5555bfe2e2fb46303ff260bfa0654c3c7e39d9c2c4c59c\"" Sep 13 01:10:57.562951 env[1748]: time="2025-09-13T01:10:57.558933152Z" level=info msg="StartContainer for \"a468b5410b317d582c5555bfe2e2fb46303ff260bfa0654c3c7e39d9c2c4c59c\"" Sep 13 01:10:57.591136 systemd[1]: Started cri-containerd-a468b5410b317d582c5555bfe2e2fb46303ff260bfa0654c3c7e39d9c2c4c59c.scope. Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.610000 audit: BPF prog-id=126 op=LOAD Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3320 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:57.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363862353431306233313764353832633535353562666532653266 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3320 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:57.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363862353431306233313764353832633535353562666532653266 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit: BPF prog-id=127 op=LOAD Sep 13 01:10:57.611000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000fdeb0 items=0 ppid=3320 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:57.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363862353431306233313764353832633535353562666532653266 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.611000 audit: BPF prog-id=128 op=LOAD Sep 13 01:10:57.611000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000fdef8 items=0 ppid=3320 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:57.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363862353431306233313764353832633535353562666532653266 Sep 13 01:10:57.612000 audit: BPF prog-id=128 op=UNLOAD Sep 13 01:10:57.612000 audit: BPF prog-id=127 op=UNLOAD Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { perfmon } for pid=3472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit[3472]: AVC avc: denied { bpf } for pid=3472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:57.612000 audit: BPF prog-id=129 op=LOAD Sep 13 01:10:57.612000 audit[3472]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003e8308 items=0 ppid=3320 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:57.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363862353431306233313764353832633535353562666532653266 Sep 13 01:10:57.676688 env[1748]: time="2025-09-13T01:10:57.675386462Z" level=info msg="StartContainer for \"a468b5410b317d582c5555bfe2e2fb46303ff260bfa0654c3c7e39d9c2c4c59c\" returns successfully" Sep 13 01:10:58.133060 kubelet[2911]: E0913 01:10:58.132600 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:10:58.550756 kubelet[2911]: I0913 01:10:58.550694 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-bd8cf84b5-kn6dr" podStartSLOduration=1.623021016 podStartE2EDuration="4.550677128s" podCreationTimestamp="2025-09-13 01:10:54 +0000 UTC" firstStartedPulling="2025-09-13 01:10:54.566215054 +0000 UTC m=+51.142166798" lastFinishedPulling="2025-09-13 01:10:57.493871165 +0000 UTC m=+54.069822910" observedRunningTime="2025-09-13 01:10:58.53664042 +0000 UTC m=+55.112592187" watchObservedRunningTime="2025-09-13 01:10:58.550677128 +0000 UTC m=+55.126628888" Sep 13 01:10:58.573000 audit[3507]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:58.573000 audit[3507]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd627b8be0 a2=0 a3=7ffd627b8bcc items=0 ppid=3065 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:58.573000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:58.579000 audit[3507]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:10:58.579000 audit[3507]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd627b8be0 a2=0 a3=7ffd627b8bcc items=0 ppid=3065 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:58.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:10:58.621173 kubelet[2911]: E0913 01:10:58.621135 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.621173 kubelet[2911]: W0913 01:10:58.621163 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.621173 kubelet[2911]: E0913 01:10:58.621189 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.621490 kubelet[2911]: E0913 01:10:58.621452 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.621490 kubelet[2911]: W0913 01:10:58.621464 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.621490 kubelet[2911]: E0913 01:10:58.621477 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.621819 kubelet[2911]: E0913 01:10:58.621799 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.621819 kubelet[2911]: W0913 01:10:58.621818 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.621970 kubelet[2911]: E0913 01:10:58.621831 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.622163 kubelet[2911]: E0913 01:10:58.622144 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.622163 kubelet[2911]: W0913 01:10:58.622160 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.622316 kubelet[2911]: E0913 01:10:58.622176 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.622445 kubelet[2911]: E0913 01:10:58.622429 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.622445 kubelet[2911]: W0913 01:10:58.622442 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.622580 kubelet[2911]: E0913 01:10:58.622454 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.622677 kubelet[2911]: E0913 01:10:58.622644 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.622757 kubelet[2911]: W0913 01:10:58.622680 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.622757 kubelet[2911]: E0913 01:10:58.622694 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.622915 kubelet[2911]: E0913 01:10:58.622895 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.622915 kubelet[2911]: W0913 01:10:58.622910 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.623552 kubelet[2911]: E0913 01:10:58.622922 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.623552 kubelet[2911]: E0913 01:10:58.623150 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.623552 kubelet[2911]: W0913 01:10:58.623162 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.623552 kubelet[2911]: E0913 01:10:58.623172 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.623552 kubelet[2911]: E0913 01:10:58.623407 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.623552 kubelet[2911]: W0913 01:10:58.623418 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.623552 kubelet[2911]: E0913 01:10:58.623427 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.623942 kubelet[2911]: E0913 01:10:58.623894 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.623942 kubelet[2911]: W0913 01:10:58.623905 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.623942 kubelet[2911]: E0913 01:10:58.623919 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.624172 kubelet[2911]: E0913 01:10:58.624159 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.624444 kubelet[2911]: W0913 01:10:58.624420 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.624531 kubelet[2911]: E0913 01:10:58.624445 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.624738 kubelet[2911]: E0913 01:10:58.624725 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.624826 kubelet[2911]: W0913 01:10:58.624807 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.624897 kubelet[2911]: E0913 01:10:58.624830 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.625087 kubelet[2911]: E0913 01:10:58.625070 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.625087 kubelet[2911]: W0913 01:10:58.625084 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.625229 kubelet[2911]: E0913 01:10:58.625097 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.625320 kubelet[2911]: E0913 01:10:58.625300 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.625320 kubelet[2911]: W0913 01:10:58.625314 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.625436 kubelet[2911]: E0913 01:10:58.625326 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.625616 kubelet[2911]: E0913 01:10:58.625599 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.625616 kubelet[2911]: W0913 01:10:58.625613 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.625811 kubelet[2911]: E0913 01:10:58.625625 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.681572 kubelet[2911]: E0913 01:10:58.681512 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.681572 kubelet[2911]: W0913 01:10:58.681539 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.681572 kubelet[2911]: E0913 01:10:58.681562 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.681841 kubelet[2911]: E0913 01:10:58.681823 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.681841 kubelet[2911]: W0913 01:10:58.681833 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.681904 kubelet[2911]: E0913 01:10:58.681846 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.682229 kubelet[2911]: E0913 01:10:58.682205 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.682229 kubelet[2911]: W0913 01:10:58.682222 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.682336 kubelet[2911]: E0913 01:10:58.682237 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.682539 kubelet[2911]: E0913 01:10:58.682512 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.682539 kubelet[2911]: W0913 01:10:58.682531 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.682687 kubelet[2911]: E0913 01:10:58.682546 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.682784 kubelet[2911]: E0913 01:10:58.682769 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.682784 kubelet[2911]: W0913 01:10:58.682781 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.682872 kubelet[2911]: E0913 01:10:58.682793 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.683037 kubelet[2911]: E0913 01:10:58.683004 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.683037 kubelet[2911]: W0913 01:10:58.683020 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.683037 kubelet[2911]: E0913 01:10:58.683031 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.683347 kubelet[2911]: E0913 01:10:58.683332 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.683347 kubelet[2911]: W0913 01:10:58.683344 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.683427 kubelet[2911]: E0913 01:10:58.683353 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.683541 kubelet[2911]: E0913 01:10:58.683529 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.683541 kubelet[2911]: W0913 01:10:58.683540 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.683616 kubelet[2911]: E0913 01:10:58.683548 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.683745 kubelet[2911]: E0913 01:10:58.683733 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.683745 kubelet[2911]: W0913 01:10:58.683744 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.683864 kubelet[2911]: E0913 01:10:58.683759 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.683936 kubelet[2911]: E0913 01:10:58.683925 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.683936 kubelet[2911]: W0913 01:10:58.683935 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.683998 kubelet[2911]: E0913 01:10:58.683942 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.684161 kubelet[2911]: E0913 01:10:58.684127 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.684161 kubelet[2911]: W0913 01:10:58.684146 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.684161 kubelet[2911]: E0913 01:10:58.684158 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.684614 kubelet[2911]: E0913 01:10:58.684592 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.684614 kubelet[2911]: W0913 01:10:58.684606 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.684614 kubelet[2911]: E0913 01:10:58.684616 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.685055 kubelet[2911]: E0913 01:10:58.685036 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.685055 kubelet[2911]: W0913 01:10:58.685048 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.685173 kubelet[2911]: E0913 01:10:58.685057 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.685326 kubelet[2911]: E0913 01:10:58.685305 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.685402 kubelet[2911]: W0913 01:10:58.685391 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.685463 kubelet[2911]: E0913 01:10:58.685447 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.685808 kubelet[2911]: E0913 01:10:58.685771 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.685808 kubelet[2911]: W0913 01:10:58.685790 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.685808 kubelet[2911]: E0913 01:10:58.685800 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.686152 kubelet[2911]: E0913 01:10:58.686130 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.686152 kubelet[2911]: W0913 01:10:58.686149 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.686260 kubelet[2911]: E0913 01:10:58.686161 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.686420 kubelet[2911]: E0913 01:10:58.686394 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.686420 kubelet[2911]: W0913 01:10:58.686409 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.686420 kubelet[2911]: E0913 01:10:58.686421 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:58.687114 kubelet[2911]: E0913 01:10:58.687094 2911 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:10:58.687114 kubelet[2911]: W0913 01:10:58.687109 2911 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:10:58.687335 kubelet[2911]: E0913 01:10:58.687120 2911 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:10:59.061242 env[1748]: time="2025-09-13T01:10:59.061195385Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:59.064101 env[1748]: time="2025-09-13T01:10:59.064062783Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:59.067010 env[1748]: time="2025-09-13T01:10:59.066966567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:59.070525 env[1748]: time="2025-09-13T01:10:59.070483650Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:10:59.071137 env[1748]: time="2025-09-13T01:10:59.071094197Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 13 01:10:59.081192 env[1748]: time="2025-09-13T01:10:59.081135785Z" level=info msg="CreateContainer within sandbox \"3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 13 01:10:59.114221 env[1748]: time="2025-09-13T01:10:59.114168576Z" level=info msg="CreateContainer within sandbox \"3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e\"" Sep 13 01:10:59.115152 env[1748]: time="2025-09-13T01:10:59.115116841Z" level=info msg="StartContainer for \"6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e\"" Sep 13 01:10:59.158417 systemd[1]: Started cri-containerd-6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e.scope. Sep 13 01:10:59.161856 systemd[1]: run-containerd-runc-k8s.io-6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e-runc.1H1Wti.mount: Deactivated successfully. Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f830405ccb8 items=0 ppid=3385 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:59.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666383938613932333366663736333231313266643763643039376435 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.204000 audit: BPF prog-id=130 op=LOAD Sep 13 01:10:59.204000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001bd3f8 items=0 ppid=3385 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:59.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666383938613932333366663736333231313266643763643039376435 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.205000 audit: BPF prog-id=131 op=LOAD Sep 13 01:10:59.205000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001bd448 items=0 ppid=3385 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:59.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666383938613932333366663736333231313266643763643039376435 Sep 13 01:10:59.206000 audit: BPF prog-id=131 op=UNLOAD Sep 13 01:10:59.206000 audit: BPF prog-id=130 op=UNLOAD Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:10:59.206000 audit: BPF prog-id=132 op=LOAD Sep 13 01:10:59.206000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001bd4d8 items=0 ppid=3385 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:10:59.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666383938613932333366663736333231313266643763643039376435 Sep 13 01:10:59.229689 env[1748]: time="2025-09-13T01:10:59.229623671Z" level=info msg="StartContainer for \"6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e\" returns successfully" Sep 13 01:10:59.252795 systemd[1]: cri-containerd-6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e.scope: Deactivated successfully. Sep 13 01:10:59.255000 audit: BPF prog-id=132 op=UNLOAD Sep 13 01:10:59.384514 env[1748]: time="2025-09-13T01:10:59.382693631Z" level=info msg="shim disconnected" id=6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e Sep 13 01:10:59.385023 env[1748]: time="2025-09-13T01:10:59.384976979Z" level=warning msg="cleaning up after shim disconnected" id=6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e namespace=k8s.io Sep 13 01:10:59.385149 env[1748]: time="2025-09-13T01:10:59.385135861Z" level=info msg="cleaning up dead shim" Sep 13 01:10:59.397787 env[1748]: time="2025-09-13T01:10:59.397738522Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:10:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3587 runtime=io.containerd.runc.v2\n" Sep 13 01:10:59.529496 env[1748]: time="2025-09-13T01:10:59.529432578Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 13 01:11:00.101832 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6f898a9233ff7632112fd7cd097d55c76fcd1e9ffc8cb0ab3bf7e2608e88797e-rootfs.mount: Deactivated successfully. Sep 13 01:11:00.132882 kubelet[2911]: E0913 01:11:00.132821 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:11:02.262585 kubelet[2911]: E0913 01:11:02.262546 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:11:04.155321 kubelet[2911]: E0913 01:11:04.155276 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:11:04.503000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.508150 kernel: kauditd_printk_skb: 178 callbacks suppressed Sep 13 01:11:04.511002 kernel: audit: type=1400 audit(1757725864.503:1020): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.546823 kernel: audit: type=1300 audit(1757725864.503:1020): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002c0b1a0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:04.503000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002c0b1a0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:04.561925 kernel: audit: type=1327 audit(1757725864.503:1020): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:04.503000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:04.512000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.615718 kernel: audit: type=1400 audit(1757725864.512:1021): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.512000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002b199c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:04.661108 kernel: audit: type=1300 audit(1757725864.512:1021): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002b199c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:04.512000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:04.675688 kernel: audit: type=1327 audit(1757725864.512:1021): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:04.512000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.512000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002c0b3c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:04.707702 kernel: audit: type=1400 audit(1757725864.512:1022): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.707840 kernel: audit: type=1300 audit(1757725864.512:1022): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002c0b3c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:04.707880 kernel: audit: type=1327 audit(1757725864.512:1022): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:04.512000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:04.728893 kernel: audit: type=1400 audit(1757725864.512:1023): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.512000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:04.512000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002c0b3e0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:04.512000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:06.133764 kubelet[2911]: E0913 01:11:06.133635 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:11:07.031600 env[1748]: time="2025-09-13T01:11:07.031541213Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:07.036094 env[1748]: time="2025-09-13T01:11:07.035893846Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:07.039464 env[1748]: time="2025-09-13T01:11:07.039412359Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:07.044039 env[1748]: time="2025-09-13T01:11:07.043951356Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:07.045281 env[1748]: time="2025-09-13T01:11:07.045239060Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 13 01:11:07.075702 env[1748]: time="2025-09-13T01:11:07.075630900Z" level=info msg="CreateContainer within sandbox \"3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 13 01:11:07.098839 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount448619032.mount: Deactivated successfully. Sep 13 01:11:07.111615 env[1748]: time="2025-09-13T01:11:07.111538684Z" level=info msg="CreateContainer within sandbox \"3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de\"" Sep 13 01:11:07.112806 env[1748]: time="2025-09-13T01:11:07.112766349Z" level=info msg="StartContainer for \"360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de\"" Sep 13 01:11:07.154809 systemd[1]: Started cri-containerd-360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de.scope. Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7fe015859208 items=0 ppid=3385 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:07.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306437656265653235383431626364323363623636313531623336 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit: BPF prog-id=133 op=LOAD Sep 13 01:11:07.186000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0002114c8 items=0 ppid=3385 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:07.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306437656265653235383431626364323363623636313531623336 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit: BPF prog-id=134 op=LOAD Sep 13 01:11:07.186000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c000211518 items=0 ppid=3385 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:07.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306437656265653235383431626364323363623636313531623336 Sep 13 01:11:07.186000 audit: BPF prog-id=134 op=UNLOAD Sep 13 01:11:07.186000 audit: BPF prog-id=133 op=UNLOAD Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:07.186000 audit: BPF prog-id=135 op=LOAD Sep 13 01:11:07.186000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0002115a8 items=0 ppid=3385 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:07.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336306437656265653235383431626364323363623636313531623336 Sep 13 01:11:07.279468 env[1748]: time="2025-09-13T01:11:07.279414732Z" level=info msg="StartContainer for \"360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de\" returns successfully" Sep 13 01:11:08.087684 env[1748]: time="2025-09-13T01:11:08.087594270Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 01:11:08.091691 systemd[1]: cri-containerd-360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de.scope: Deactivated successfully. Sep 13 01:11:08.093000 audit: BPF prog-id=135 op=UNLOAD Sep 13 01:11:08.121735 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de-rootfs.mount: Deactivated successfully. Sep 13 01:11:08.135107 env[1748]: time="2025-09-13T01:11:08.134972648Z" level=info msg="shim disconnected" id=360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de Sep 13 01:11:08.136684 env[1748]: time="2025-09-13T01:11:08.135544183Z" level=warning msg="cleaning up after shim disconnected" id=360d7ebee25841bcd23cb66151b363d42822b00ae0dd217336770878424030de namespace=k8s.io Sep 13 01:11:08.136684 env[1748]: time="2025-09-13T01:11:08.135580464Z" level=info msg="cleaning up dead shim" Sep 13 01:11:08.153000 env[1748]: time="2025-09-13T01:11:08.152448905Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:11:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3653 runtime=io.containerd.runc.v2\n" Sep 13 01:11:08.155562 systemd[1]: Created slice kubepods-besteffort-pod05fa90eb_9dab_4217_8797_8c89464df9e5.slice. Sep 13 01:11:08.157093 kubelet[2911]: I0913 01:11:08.157048 2911 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 13 01:11:08.178826 env[1748]: time="2025-09-13T01:11:08.178784366Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-p9jh8,Uid:05fa90eb-9dab-4217-8797-8c89464df9e5,Namespace:calico-system,Attempt:0,}" Sep 13 01:11:08.273155 systemd[1]: Created slice kubepods-besteffort-pode855610b_1c29_4a31_bca7_a96c615c7617.slice. Sep 13 01:11:08.293430 systemd[1]: Created slice kubepods-besteffort-podb5c1a4b0_770e_47aa_89f5_af207367d613.slice. Sep 13 01:11:08.307721 systemd[1]: Created slice kubepods-burstable-podb0ad198e_b7d8_4aca_9152_6be1b3a26aa7.slice. Sep 13 01:11:08.317374 systemd[1]: Created slice kubepods-burstable-pod88619eea_3f88_422d_abc9_279657f0d3b6.slice. Sep 13 01:11:08.330340 systemd[1]: Created slice kubepods-besteffort-pod374abec8_51d5_4f8f_bf3e_193eab0492f1.slice. Sep 13 01:11:08.343809 systemd[1]: Created slice kubepods-besteffort-pod5f00d1b8_5e83_4b8b_ab26_87798c93eddb.slice. Sep 13 01:11:08.353169 systemd[1]: Created slice kubepods-besteffort-pod5a9d0e00_dcb6_4851_8665_0e6584f4aec1.slice. Sep 13 01:11:08.404807 kubelet[2911]: I0913 01:11:08.404755 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kj5pl\" (UniqueName: \"kubernetes.io/projected/e855610b-1c29-4a31-bca7-a96c615c7617-kube-api-access-kj5pl\") pod \"whisker-cb5c4f999-v8r94\" (UID: \"e855610b-1c29-4a31-bca7-a96c615c7617\") " pod="calico-system/whisker-cb5c4f999-v8r94" Sep 13 01:11:08.405000 kubelet[2911]: I0913 01:11:08.404853 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/5a9d0e00-dcb6-4851-8665-0e6584f4aec1-goldmane-key-pair\") pod \"goldmane-54d579b49d-rctrp\" (UID: \"5a9d0e00-dcb6-4851-8665-0e6584f4aec1\") " pod="calico-system/goldmane-54d579b49d-rctrp" Sep 13 01:11:08.405000 kubelet[2911]: I0913 01:11:08.404886 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/88619eea-3f88-422d-abc9-279657f0d3b6-config-volume\") pod \"coredns-674b8bbfcf-f4knm\" (UID: \"88619eea-3f88-422d-abc9-279657f0d3b6\") " pod="kube-system/coredns-674b8bbfcf-f4knm" Sep 13 01:11:08.405000 kubelet[2911]: I0913 01:11:08.404921 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b5c1a4b0-770e-47aa-89f5-af207367d613-tigera-ca-bundle\") pod \"calico-kube-controllers-66c99bdc99-hsf56\" (UID: \"b5c1a4b0-770e-47aa-89f5-af207367d613\") " pod="calico-system/calico-kube-controllers-66c99bdc99-hsf56" Sep 13 01:11:08.405000 kubelet[2911]: I0913 01:11:08.404950 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-backend-key-pair\") pod \"whisker-cb5c4f999-v8r94\" (UID: \"e855610b-1c29-4a31-bca7-a96c615c7617\") " pod="calico-system/whisker-cb5c4f999-v8r94" Sep 13 01:11:08.405000 kubelet[2911]: I0913 01:11:08.404973 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-277r6\" (UniqueName: \"kubernetes.io/projected/5f00d1b8-5e83-4b8b-ab26-87798c93eddb-kube-api-access-277r6\") pod \"calico-apiserver-669f46fc95-4lw7t\" (UID: \"5f00d1b8-5e83-4b8b-ab26-87798c93eddb\") " pod="calico-apiserver/calico-apiserver-669f46fc95-4lw7t" Sep 13 01:11:08.405249 kubelet[2911]: I0913 01:11:08.404995 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hlhzs\" (UniqueName: \"kubernetes.io/projected/5a9d0e00-dcb6-4851-8665-0e6584f4aec1-kube-api-access-hlhzs\") pod \"goldmane-54d579b49d-rctrp\" (UID: \"5a9d0e00-dcb6-4851-8665-0e6584f4aec1\") " pod="calico-system/goldmane-54d579b49d-rctrp" Sep 13 01:11:08.405249 kubelet[2911]: I0913 01:11:08.405019 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f8gsz\" (UniqueName: \"kubernetes.io/projected/374abec8-51d5-4f8f-bf3e-193eab0492f1-kube-api-access-f8gsz\") pod \"calico-apiserver-669f46fc95-kdqwx\" (UID: \"374abec8-51d5-4f8f-bf3e-193eab0492f1\") " pod="calico-apiserver/calico-apiserver-669f46fc95-kdqwx" Sep 13 01:11:08.405249 kubelet[2911]: I0913 01:11:08.405045 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5f00d1b8-5e83-4b8b-ab26-87798c93eddb-calico-apiserver-certs\") pod \"calico-apiserver-669f46fc95-4lw7t\" (UID: \"5f00d1b8-5e83-4b8b-ab26-87798c93eddb\") " pod="calico-apiserver/calico-apiserver-669f46fc95-4lw7t" Sep 13 01:11:08.405249 kubelet[2911]: I0913 01:11:08.405071 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n2zqn\" (UniqueName: \"kubernetes.io/projected/88619eea-3f88-422d-abc9-279657f0d3b6-kube-api-access-n2zqn\") pod \"coredns-674b8bbfcf-f4knm\" (UID: \"88619eea-3f88-422d-abc9-279657f0d3b6\") " pod="kube-system/coredns-674b8bbfcf-f4knm" Sep 13 01:11:08.405249 kubelet[2911]: I0913 01:11:08.405096 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v2wx2\" (UniqueName: \"kubernetes.io/projected/b5c1a4b0-770e-47aa-89f5-af207367d613-kube-api-access-v2wx2\") pod \"calico-kube-controllers-66c99bdc99-hsf56\" (UID: \"b5c1a4b0-770e-47aa-89f5-af207367d613\") " pod="calico-system/calico-kube-controllers-66c99bdc99-hsf56" Sep 13 01:11:08.405467 kubelet[2911]: I0913 01:11:08.405124 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/b0ad198e-b7d8-4aca-9152-6be1b3a26aa7-config-volume\") pod \"coredns-674b8bbfcf-gnfr7\" (UID: \"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7\") " pod="kube-system/coredns-674b8bbfcf-gnfr7" Sep 13 01:11:08.405467 kubelet[2911]: I0913 01:11:08.405156 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/5a9d0e00-dcb6-4851-8665-0e6584f4aec1-config\") pod \"goldmane-54d579b49d-rctrp\" (UID: \"5a9d0e00-dcb6-4851-8665-0e6584f4aec1\") " pod="calico-system/goldmane-54d579b49d-rctrp" Sep 13 01:11:08.405467 kubelet[2911]: I0913 01:11:08.405186 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/374abec8-51d5-4f8f-bf3e-193eab0492f1-calico-apiserver-certs\") pod \"calico-apiserver-669f46fc95-kdqwx\" (UID: \"374abec8-51d5-4f8f-bf3e-193eab0492f1\") " pod="calico-apiserver/calico-apiserver-669f46fc95-kdqwx" Sep 13 01:11:08.405467 kubelet[2911]: I0913 01:11:08.405224 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-ca-bundle\") pod \"whisker-cb5c4f999-v8r94\" (UID: \"e855610b-1c29-4a31-bca7-a96c615c7617\") " pod="calico-system/whisker-cb5c4f999-v8r94" Sep 13 01:11:08.405467 kubelet[2911]: I0913 01:11:08.405257 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jpt4d\" (UniqueName: \"kubernetes.io/projected/b0ad198e-b7d8-4aca-9152-6be1b3a26aa7-kube-api-access-jpt4d\") pod \"coredns-674b8bbfcf-gnfr7\" (UID: \"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7\") " pod="kube-system/coredns-674b8bbfcf-gnfr7" Sep 13 01:11:08.405626 kubelet[2911]: I0913 01:11:08.405291 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5a9d0e00-dcb6-4851-8665-0e6584f4aec1-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-rctrp\" (UID: \"5a9d0e00-dcb6-4851-8665-0e6584f4aec1\") " pod="calico-system/goldmane-54d579b49d-rctrp" Sep 13 01:11:08.602277 env[1748]: time="2025-09-13T01:11:08.602145247Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66c99bdc99-hsf56,Uid:b5c1a4b0-770e-47aa-89f5-af207367d613,Namespace:calico-system,Attempt:0,}" Sep 13 01:11:08.625047 env[1748]: time="2025-09-13T01:11:08.624995772Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-f4knm,Uid:88619eea-3f88-422d-abc9-279657f0d3b6,Namespace:kube-system,Attempt:0,}" Sep 13 01:11:08.627313 env[1748]: time="2025-09-13T01:11:08.627266583Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gnfr7,Uid:b0ad198e-b7d8-4aca-9152-6be1b3a26aa7,Namespace:kube-system,Attempt:0,}" Sep 13 01:11:08.642729 env[1748]: time="2025-09-13T01:11:08.642678916Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-kdqwx,Uid:374abec8-51d5-4f8f-bf3e-193eab0492f1,Namespace:calico-apiserver,Attempt:0,}" Sep 13 01:11:08.665578 env[1748]: time="2025-09-13T01:11:08.665527680Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-rctrp,Uid:5a9d0e00-dcb6-4851-8665-0e6584f4aec1,Namespace:calico-system,Attempt:0,}" Sep 13 01:11:08.667119 env[1748]: time="2025-09-13T01:11:08.667074162Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-4lw7t,Uid:5f00d1b8-5e83-4b8b-ab26-87798c93eddb,Namespace:calico-apiserver,Attempt:0,}" Sep 13 01:11:08.732342 env[1748]: time="2025-09-13T01:11:08.731185061Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 13 01:11:08.780999 env[1748]: time="2025-09-13T01:11:08.780917815Z" level=error msg="Failed to destroy network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.783117 env[1748]: time="2025-09-13T01:11:08.783056200Z" level=error msg="encountered an error cleaning up failed sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.783296 env[1748]: time="2025-09-13T01:11:08.783137966Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-p9jh8,Uid:05fa90eb-9dab-4217-8797-8c89464df9e5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.788456 kubelet[2911]: E0913 01:11:08.788374 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.789804 kubelet[2911]: E0913 01:11:08.789759 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-p9jh8" Sep 13 01:11:08.792831 kubelet[2911]: E0913 01:11:08.792784 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-p9jh8" Sep 13 01:11:08.793454 kubelet[2911]: E0913 01:11:08.793086 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-p9jh8_calico-system(05fa90eb-9dab-4217-8797-8c89464df9e5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-p9jh8_calico-system(05fa90eb-9dab-4217-8797-8c89464df9e5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:11:08.887968 env[1748]: time="2025-09-13T01:11:08.887823544Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-cb5c4f999-v8r94,Uid:e855610b-1c29-4a31-bca7-a96c615c7617,Namespace:calico-system,Attempt:0,}" Sep 13 01:11:08.939160 env[1748]: time="2025-09-13T01:11:08.939096267Z" level=error msg="Failed to destroy network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.939506 env[1748]: time="2025-09-13T01:11:08.939463158Z" level=error msg="encountered an error cleaning up failed sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.971599 env[1748]: time="2025-09-13T01:11:08.939534424Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66c99bdc99-hsf56,Uid:b5c1a4b0-770e-47aa-89f5-af207367d613,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.971804 kubelet[2911]: E0913 01:11:08.940128 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:08.971804 kubelet[2911]: E0913 01:11:08.940221 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-66c99bdc99-hsf56" Sep 13 01:11:08.971804 kubelet[2911]: E0913 01:11:08.940269 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-66c99bdc99-hsf56" Sep 13 01:11:08.972015 kubelet[2911]: E0913 01:11:08.940351 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-66c99bdc99-hsf56_calico-system(b5c1a4b0-770e-47aa-89f5-af207367d613)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-66c99bdc99-hsf56_calico-system(b5c1a4b0-770e-47aa-89f5-af207367d613)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-66c99bdc99-hsf56" podUID="b5c1a4b0-770e-47aa-89f5-af207367d613" Sep 13 01:11:09.052753 env[1748]: time="2025-09-13T01:11:09.052677409Z" level=error msg="Failed to destroy network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.053146 env[1748]: time="2025-09-13T01:11:09.053096439Z" level=error msg="encountered an error cleaning up failed sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.053325 env[1748]: time="2025-09-13T01:11:09.053175564Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-f4knm,Uid:88619eea-3f88-422d-abc9-279657f0d3b6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.054594 kubelet[2911]: E0913 01:11:09.053529 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.054594 kubelet[2911]: E0913 01:11:09.054153 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-f4knm" Sep 13 01:11:09.054594 kubelet[2911]: E0913 01:11:09.054188 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-f4knm" Sep 13 01:11:09.054839 kubelet[2911]: E0913 01:11:09.054260 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-f4knm_kube-system(88619eea-3f88-422d-abc9-279657f0d3b6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-f4knm_kube-system(88619eea-3f88-422d-abc9-279657f0d3b6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-f4knm" podUID="88619eea-3f88-422d-abc9-279657f0d3b6" Sep 13 01:11:09.078148 env[1748]: time="2025-09-13T01:11:09.078081699Z" level=error msg="Failed to destroy network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.078518 env[1748]: time="2025-09-13T01:11:09.078474018Z" level=error msg="encountered an error cleaning up failed sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.078613 env[1748]: time="2025-09-13T01:11:09.078547394Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-4lw7t,Uid:5f00d1b8-5e83-4b8b-ab26-87798c93eddb,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.079242 kubelet[2911]: E0913 01:11:09.078927 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.079242 kubelet[2911]: E0913 01:11:09.079035 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-669f46fc95-4lw7t" Sep 13 01:11:09.079242 kubelet[2911]: E0913 01:11:09.079065 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-669f46fc95-4lw7t" Sep 13 01:11:09.079467 kubelet[2911]: E0913 01:11:09.079148 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-669f46fc95-4lw7t_calico-apiserver(5f00d1b8-5e83-4b8b-ab26-87798c93eddb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-669f46fc95-4lw7t_calico-apiserver(5f00d1b8-5e83-4b8b-ab26-87798c93eddb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-669f46fc95-4lw7t" podUID="5f00d1b8-5e83-4b8b-ab26-87798c93eddb" Sep 13 01:11:09.084323 env[1748]: time="2025-09-13T01:11:09.084261232Z" level=error msg="Failed to destroy network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.084747 env[1748]: time="2025-09-13T01:11:09.084693052Z" level=error msg="encountered an error cleaning up failed sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.084836 env[1748]: time="2025-09-13T01:11:09.084768349Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gnfr7,Uid:b0ad198e-b7d8-4aca-9152-6be1b3a26aa7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.085113 kubelet[2911]: E0913 01:11:09.085076 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.085249 kubelet[2911]: E0913 01:11:09.085142 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gnfr7" Sep 13 01:11:09.085249 kubelet[2911]: E0913 01:11:09.085173 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gnfr7" Sep 13 01:11:09.085249 kubelet[2911]: E0913 01:11:09.085232 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-gnfr7_kube-system(b0ad198e-b7d8-4aca-9152-6be1b3a26aa7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-gnfr7_kube-system(b0ad198e-b7d8-4aca-9152-6be1b3a26aa7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gnfr7" podUID="b0ad198e-b7d8-4aca-9152-6be1b3a26aa7" Sep 13 01:11:09.114380 env[1748]: time="2025-09-13T01:11:09.114319681Z" level=error msg="Failed to destroy network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.115129 env[1748]: time="2025-09-13T01:11:09.115070139Z" level=error msg="encountered an error cleaning up failed sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.115241 env[1748]: time="2025-09-13T01:11:09.115154243Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-kdqwx,Uid:374abec8-51d5-4f8f-bf3e-193eab0492f1,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.115435 kubelet[2911]: E0913 01:11:09.115380 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.115561 kubelet[2911]: E0913 01:11:09.115442 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-669f46fc95-kdqwx" Sep 13 01:11:09.115561 kubelet[2911]: E0913 01:11:09.115476 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-669f46fc95-kdqwx" Sep 13 01:11:09.115561 kubelet[2911]: E0913 01:11:09.115540 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-669f46fc95-kdqwx_calico-apiserver(374abec8-51d5-4f8f-bf3e-193eab0492f1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-669f46fc95-kdqwx_calico-apiserver(374abec8-51d5-4f8f-bf3e-193eab0492f1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-669f46fc95-kdqwx" podUID="374abec8-51d5-4f8f-bf3e-193eab0492f1" Sep 13 01:11:09.142926 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360-shm.mount: Deactivated successfully. Sep 13 01:11:09.164652 env[1748]: time="2025-09-13T01:11:09.164584917Z" level=error msg="Failed to destroy network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.168290 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31-shm.mount: Deactivated successfully. Sep 13 01:11:09.170246 env[1748]: time="2025-09-13T01:11:09.170174629Z" level=error msg="encountered an error cleaning up failed sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.170475 env[1748]: time="2025-09-13T01:11:09.170429304Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-cb5c4f999-v8r94,Uid:e855610b-1c29-4a31-bca7-a96c615c7617,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.172040 kubelet[2911]: E0913 01:11:09.170834 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.172040 kubelet[2911]: E0913 01:11:09.170906 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-cb5c4f999-v8r94" Sep 13 01:11:09.172040 kubelet[2911]: E0913 01:11:09.170938 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-cb5c4f999-v8r94" Sep 13 01:11:09.172481 kubelet[2911]: E0913 01:11:09.170997 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-cb5c4f999-v8r94_calico-system(e855610b-1c29-4a31-bca7-a96c615c7617)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-cb5c4f999-v8r94_calico-system(e855610b-1c29-4a31-bca7-a96c615c7617)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-cb5c4f999-v8r94" podUID="e855610b-1c29-4a31-bca7-a96c615c7617" Sep 13 01:11:09.173608 env[1748]: time="2025-09-13T01:11:09.173561894Z" level=error msg="Failed to destroy network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.176831 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c-shm.mount: Deactivated successfully. Sep 13 01:11:09.178237 env[1748]: time="2025-09-13T01:11:09.178119138Z" level=error msg="encountered an error cleaning up failed sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.178237 env[1748]: time="2025-09-13T01:11:09.178210125Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-rctrp,Uid:5a9d0e00-dcb6-4851-8665-0e6584f4aec1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.178855 kubelet[2911]: E0913 01:11:09.178429 2911 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.178855 kubelet[2911]: E0913 01:11:09.178497 2911 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-rctrp" Sep 13 01:11:09.178855 kubelet[2911]: E0913 01:11:09.178528 2911 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-rctrp" Sep 13 01:11:09.179443 kubelet[2911]: E0913 01:11:09.178585 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-rctrp_calico-system(5a9d0e00-dcb6-4851-8665-0e6584f4aec1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-rctrp_calico-system(5a9d0e00-dcb6-4851-8665-0e6584f4aec1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-rctrp" podUID="5a9d0e00-dcb6-4851-8665-0e6584f4aec1" Sep 13 01:11:09.690105 kubelet[2911]: I0913 01:11:09.690062 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:11:09.692772 kubelet[2911]: I0913 01:11:09.692712 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:11:09.701904 kubelet[2911]: I0913 01:11:09.701860 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:11:09.705291 kubelet[2911]: I0913 01:11:09.705252 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:11:09.707361 env[1748]: time="2025-09-13T01:11:09.707319693Z" level=info msg="StopPodSandbox for \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\"" Sep 13 01:11:09.708785 env[1748]: time="2025-09-13T01:11:09.708723073Z" level=info msg="StopPodSandbox for \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\"" Sep 13 01:11:09.708960 env[1748]: time="2025-09-13T01:11:09.708932752Z" level=info msg="StopPodSandbox for \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\"" Sep 13 01:11:09.709396 env[1748]: time="2025-09-13T01:11:09.709367543Z" level=info msg="StopPodSandbox for \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\"" Sep 13 01:11:09.710142 kubelet[2911]: I0913 01:11:09.710118 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:11:09.767352 kubelet[2911]: I0913 01:11:09.715329 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:11:09.767352 kubelet[2911]: I0913 01:11:09.717703 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:11:09.767352 kubelet[2911]: I0913 01:11:09.723097 2911 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:11:09.767568 env[1748]: time="2025-09-13T01:11:09.711048480Z" level=info msg="StopPodSandbox for \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\"" Sep 13 01:11:09.767568 env[1748]: time="2025-09-13T01:11:09.716086945Z" level=info msg="StopPodSandbox for \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\"" Sep 13 01:11:09.767568 env[1748]: time="2025-09-13T01:11:09.718323850Z" level=info msg="StopPodSandbox for \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\"" Sep 13 01:11:09.767568 env[1748]: time="2025-09-13T01:11:09.723811367Z" level=info msg="StopPodSandbox for \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\"" Sep 13 01:11:09.862403 env[1748]: time="2025-09-13T01:11:09.862337296Z" level=error msg="StopPodSandbox for \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\" failed" error="failed to destroy network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.862950 kubelet[2911]: E0913 01:11:09.862907 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:11:09.863119 kubelet[2911]: E0913 01:11:09.862982 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c"} Sep 13 01:11:09.863119 kubelet[2911]: E0913 01:11:09.863057 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5a9d0e00-dcb6-4851-8665-0e6584f4aec1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.863119 kubelet[2911]: E0913 01:11:09.863089 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5a9d0e00-dcb6-4851-8665-0e6584f4aec1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-rctrp" podUID="5a9d0e00-dcb6-4851-8665-0e6584f4aec1" Sep 13 01:11:09.873214 env[1748]: time="2025-09-13T01:11:09.873141089Z" level=error msg="StopPodSandbox for \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\" failed" error="failed to destroy network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.873873 kubelet[2911]: E0913 01:11:09.873567 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:11:09.873873 kubelet[2911]: E0913 01:11:09.873647 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576"} Sep 13 01:11:09.873873 kubelet[2911]: E0913 01:11:09.873722 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b5c1a4b0-770e-47aa-89f5-af207367d613\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.873873 kubelet[2911]: E0913 01:11:09.873822 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b5c1a4b0-770e-47aa-89f5-af207367d613\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-66c99bdc99-hsf56" podUID="b5c1a4b0-770e-47aa-89f5-af207367d613" Sep 13 01:11:09.875620 env[1748]: time="2025-09-13T01:11:09.875553408Z" level=error msg="StopPodSandbox for \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\" failed" error="failed to destroy network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.876000 kubelet[2911]: E0913 01:11:09.875815 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:11:09.876000 kubelet[2911]: E0913 01:11:09.875877 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9"} Sep 13 01:11:09.876000 kubelet[2911]: E0913 01:11:09.875918 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5f00d1b8-5e83-4b8b-ab26-87798c93eddb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.876000 kubelet[2911]: E0913 01:11:09.875949 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5f00d1b8-5e83-4b8b-ab26-87798c93eddb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-669f46fc95-4lw7t" podUID="5f00d1b8-5e83-4b8b-ab26-87798c93eddb" Sep 13 01:11:09.899449 env[1748]: time="2025-09-13T01:11:09.899382263Z" level=error msg="StopPodSandbox for \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\" failed" error="failed to destroy network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.899988 kubelet[2911]: E0913 01:11:09.899942 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:11:09.900121 kubelet[2911]: E0913 01:11:09.900002 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360"} Sep 13 01:11:09.900121 kubelet[2911]: E0913 01:11:09.900053 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"05fa90eb-9dab-4217-8797-8c89464df9e5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.900121 kubelet[2911]: E0913 01:11:09.900086 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"05fa90eb-9dab-4217-8797-8c89464df9e5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-p9jh8" podUID="05fa90eb-9dab-4217-8797-8c89464df9e5" Sep 13 01:11:09.923042 env[1748]: time="2025-09-13T01:11:09.922975791Z" level=error msg="StopPodSandbox for \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\" failed" error="failed to destroy network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.923723 kubelet[2911]: E0913 01:11:09.923499 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:11:09.923723 kubelet[2911]: E0913 01:11:09.923561 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107"} Sep 13 01:11:09.923723 kubelet[2911]: E0913 01:11:09.923605 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.923723 kubelet[2911]: E0913 01:11:09.923644 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gnfr7" podUID="b0ad198e-b7d8-4aca-9152-6be1b3a26aa7" Sep 13 01:11:09.925364 env[1748]: time="2025-09-13T01:11:09.925305205Z" level=error msg="StopPodSandbox for \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\" failed" error="failed to destroy network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.925593 kubelet[2911]: E0913 01:11:09.925529 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:11:09.925715 kubelet[2911]: E0913 01:11:09.925594 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31"} Sep 13 01:11:09.925715 kubelet[2911]: E0913 01:11:09.925636 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e855610b-1c29-4a31-bca7-a96c615c7617\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.925715 kubelet[2911]: E0913 01:11:09.925686 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e855610b-1c29-4a31-bca7-a96c615c7617\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-cb5c4f999-v8r94" podUID="e855610b-1c29-4a31-bca7-a96c615c7617" Sep 13 01:11:09.974942 kubelet[2911]: E0913 01:11:09.935630 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:11:09.974942 kubelet[2911]: E0913 01:11:09.935720 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46"} Sep 13 01:11:09.974942 kubelet[2911]: E0913 01:11:09.935794 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"374abec8-51d5-4f8f-bf3e-193eab0492f1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.974942 kubelet[2911]: E0913 01:11:09.936000 2911 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:11:09.974942 kubelet[2911]: E0913 01:11:09.936038 2911 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04"} Sep 13 01:11:09.975134 env[1748]: time="2025-09-13T01:11:09.935000922Z" level=error msg="StopPodSandbox for \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\" failed" error="failed to destroy network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.975134 env[1748]: time="2025-09-13T01:11:09.935671826Z" level=error msg="StopPodSandbox for \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\" failed" error="failed to destroy network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:11:09.975211 kubelet[2911]: E0913 01:11:09.936003 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"374abec8-51d5-4f8f-bf3e-193eab0492f1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-669f46fc95-kdqwx" podUID="374abec8-51d5-4f8f-bf3e-193eab0492f1" Sep 13 01:11:09.975211 kubelet[2911]: E0913 01:11:09.936071 2911 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"88619eea-3f88-422d-abc9-279657f0d3b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:11:09.975211 kubelet[2911]: E0913 01:11:09.936097 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"88619eea-3f88-422d-abc9-279657f0d3b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-f4knm" podUID="88619eea-3f88-422d-abc9-279657f0d3b6" Sep 13 01:11:18.326688 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3788759408.mount: Deactivated successfully. Sep 13 01:11:18.412272 env[1748]: time="2025-09-13T01:11:18.412202127Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:18.488389 env[1748]: time="2025-09-13T01:11:18.488309657Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:18.491403 env[1748]: time="2025-09-13T01:11:18.491365122Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:18.495124 env[1748]: time="2025-09-13T01:11:18.495079494Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:18.496483 env[1748]: time="2025-09-13T01:11:18.496415246Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 13 01:11:18.541431 env[1748]: time="2025-09-13T01:11:18.541381034Z" level=info msg="CreateContainer within sandbox \"3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 13 01:11:18.612291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount615737202.mount: Deactivated successfully. Sep 13 01:11:18.617619 env[1748]: time="2025-09-13T01:11:18.617540367Z" level=info msg="CreateContainer within sandbox \"3e22fc828bc1d090a9d322bf544f1050aeada7286fb8962110fb14029728cc40\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"6258e6f227fc3dde99e9b7567bb07dc6241d6da8b4f3443777382644e66030b8\"" Sep 13 01:11:18.619548 env[1748]: time="2025-09-13T01:11:18.618798975Z" level=info msg="StartContainer for \"6258e6f227fc3dde99e9b7567bb07dc6241d6da8b4f3443777382644e66030b8\"" Sep 13 01:11:18.646465 systemd[1]: Started cri-containerd-6258e6f227fc3dde99e9b7567bb07dc6241d6da8b4f3443777382644e66030b8.scope. Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.705179 kernel: kauditd_printk_skb: 46 callbacks suppressed Sep 13 01:11:18.705290 kernel: audit: type=1400 audit(1757725878.680:1031): avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.706259 kernel: audit: type=1300 audit(1757725878.680:1031): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff0140fb3f8 items=0 ppid=3385 pid=4032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:18.680000 audit[4032]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff0140fb3f8 items=0 ppid=3385 pid=4032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:18.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353865366632323766633364646539396539623735363762623037 Sep 13 01:11:18.728208 kernel: audit: type=1327 audit(1757725878.680:1031): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353865366632323766633364646539396539623735363762623037 Sep 13 01:11:18.728354 kernel: audit: type=1400 audit(1757725878.680:1032): avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.735255 kernel: audit: type=1400 audit(1757725878.680:1032): avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.737491 kernel: audit: type=1400 audit(1757725878.680:1032): avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.738829 env[1748]: time="2025-09-13T01:11:18.738679593Z" level=info msg="StartContainer for \"6258e6f227fc3dde99e9b7567bb07dc6241d6da8b4f3443777382644e66030b8\" returns successfully" Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.749302 kernel: audit: type=1400 audit(1757725878.680:1032): avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.757676 kernel: audit: type=1400 audit(1757725878.680:1032): avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.772805 kernel: audit: type=1400 audit(1757725878.680:1032): avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.774431 kernel: audit: type=1400 audit(1757725878.680:1032): avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.680000 audit: BPF prog-id=136 op=LOAD Sep 13 01:11:18.680000 audit[4032]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002ddd68 items=0 ppid=3385 pid=4032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:18.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353865366632323766633364646539396539623735363762623037 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.690000 audit: BPF prog-id=137 op=LOAD Sep 13 01:11:18.690000 audit[4032]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002dddb8 items=0 ppid=3385 pid=4032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:18.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353865366632323766633364646539396539623735363762623037 Sep 13 01:11:18.701000 audit: BPF prog-id=137 op=UNLOAD Sep 13 01:11:18.701000 audit: BPF prog-id=136 op=UNLOAD Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { perfmon } for pid=4032 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit[4032]: AVC avc: denied { bpf } for pid=4032 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:18.701000 audit: BPF prog-id=138 op=LOAD Sep 13 01:11:18.701000 audit[4032]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002dde48 items=0 ppid=3385 pid=4032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:18.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353865366632323766633364646539396539623735363762623037 Sep 13 01:11:19.871148 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 13 01:11:19.908356 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 13 01:11:19.913432 systemd[1]: run-containerd-runc-k8s.io-6258e6f227fc3dde99e9b7567bb07dc6241d6da8b4f3443777382644e66030b8-runc.OP9mno.mount: Deactivated successfully. Sep 13 01:11:20.910959 kubelet[2911]: I0913 01:11:20.907705 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-c8q7j" podStartSLOduration=3.389769089 podStartE2EDuration="26.907638118s" podCreationTimestamp="2025-09-13 01:10:54 +0000 UTC" firstStartedPulling="2025-09-13 01:10:54.980562592 +0000 UTC m=+51.556514339" lastFinishedPulling="2025-09-13 01:11:18.498431619 +0000 UTC m=+75.074383368" observedRunningTime="2025-09-13 01:11:18.81116367 +0000 UTC m=+75.387115473" watchObservedRunningTime="2025-09-13 01:11:20.907638118 +0000 UTC m=+77.483589886" Sep 13 01:11:20.913041 env[1748]: time="2025-09-13T01:11:20.912998451Z" level=info msg="StopPodSandbox for \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\"" Sep 13 01:11:21.133064 env[1748]: time="2025-09-13T01:11:21.133029016Z" level=info msg="StopPodSandbox for \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\"" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.100 [INFO][4160] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.101 [INFO][4160] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" iface="eth0" netns="/var/run/netns/cni-56efe778-ec37-0e46-5312-2abc7a2d5821" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.102 [INFO][4160] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" iface="eth0" netns="/var/run/netns/cni-56efe778-ec37-0e46-5312-2abc7a2d5821" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.104 [INFO][4160] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" iface="eth0" netns="/var/run/netns/cni-56efe778-ec37-0e46-5312-2abc7a2d5821" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.104 [INFO][4160] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.104 [INFO][4160] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.453 [INFO][4167] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.455 [INFO][4167] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.457 [INFO][4167] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.474 [WARNING][4167] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.474 [INFO][4167] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.476 [INFO][4167] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:21.484588 env[1748]: 2025-09-13 01:11:21.480 [INFO][4160] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:11:21.503147 env[1748]: time="2025-09-13T01:11:21.502347365Z" level=info msg="TearDown network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\" successfully" Sep 13 01:11:21.503147 env[1748]: time="2025-09-13T01:11:21.502412616Z" level=info msg="StopPodSandbox for \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\" returns successfully" Sep 13 01:11:21.492093 systemd[1]: run-netns-cni\x2d56efe778\x2dec37\x2d0e46\x2d5312\x2d2abc7a2d5821.mount: Deactivated successfully. Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.196 [INFO][4177] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.197 [INFO][4177] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" iface="eth0" netns="/var/run/netns/cni-aaeb0320-2795-3423-e930-9fe4d4d64196" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.197 [INFO][4177] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" iface="eth0" netns="/var/run/netns/cni-aaeb0320-2795-3423-e930-9fe4d4d64196" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.197 [INFO][4177] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" iface="eth0" netns="/var/run/netns/cni-aaeb0320-2795-3423-e930-9fe4d4d64196" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.197 [INFO][4177] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.197 [INFO][4177] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.453 [INFO][4187] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.455 [INFO][4187] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.476 [INFO][4187] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.523 [WARNING][4187] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.523 [INFO][4187] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.527 [INFO][4187] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:21.538783 env[1748]: 2025-09-13 01:11:21.532 [INFO][4177] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:11:21.544465 env[1748]: time="2025-09-13T01:11:21.538921281Z" level=info msg="TearDown network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\" successfully" Sep 13 01:11:21.544465 env[1748]: time="2025-09-13T01:11:21.538962060Z" level=info msg="StopPodSandbox for \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\" returns successfully" Sep 13 01:11:21.544465 env[1748]: time="2025-09-13T01:11:21.539751196Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66c99bdc99-hsf56,Uid:b5c1a4b0-770e-47aa-89f5-af207367d613,Namespace:calico-system,Attempt:1,}" Sep 13 01:11:21.545690 systemd[1]: run-netns-cni\x2daaeb0320\x2d2795\x2d3423\x2de930\x2d9fe4d4d64196.mount: Deactivated successfully. Sep 13 01:11:21.638624 kubelet[2911]: I0913 01:11:21.638581 2911 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-ca-bundle\") pod \"e855610b-1c29-4a31-bca7-a96c615c7617\" (UID: \"e855610b-1c29-4a31-bca7-a96c615c7617\") " Sep 13 01:11:21.638853 kubelet[2911]: I0913 01:11:21.638642 2911 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-backend-key-pair\") pod \"e855610b-1c29-4a31-bca7-a96c615c7617\" (UID: \"e855610b-1c29-4a31-bca7-a96c615c7617\") " Sep 13 01:11:21.638853 kubelet[2911]: I0913 01:11:21.638691 2911 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-kj5pl\" (UniqueName: \"kubernetes.io/projected/e855610b-1c29-4a31-bca7-a96c615c7617-kube-api-access-kj5pl\") pod \"e855610b-1c29-4a31-bca7-a96c615c7617\" (UID: \"e855610b-1c29-4a31-bca7-a96c615c7617\") " Sep 13 01:11:21.666820 kubelet[2911]: I0913 01:11:21.655969 2911 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "e855610b-1c29-4a31-bca7-a96c615c7617" (UID: "e855610b-1c29-4a31-bca7-a96c615c7617"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 13 01:11:21.678408 kubelet[2911]: I0913 01:11:21.678363 2911 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e855610b-1c29-4a31-bca7-a96c615c7617-kube-api-access-kj5pl" (OuterVolumeSpecName: "kube-api-access-kj5pl") pod "e855610b-1c29-4a31-bca7-a96c615c7617" (UID: "e855610b-1c29-4a31-bca7-a96c615c7617"). InnerVolumeSpecName "kube-api-access-kj5pl". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 13 01:11:21.678829 kubelet[2911]: I0913 01:11:21.678800 2911 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "e855610b-1c29-4a31-bca7-a96c615c7617" (UID: "e855610b-1c29-4a31-bca7-a96c615c7617"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 13 01:11:21.679488 systemd[1]: var-lib-kubelet-pods-e855610b\x2d1c29\x2d4a31\x2dbca7\x2da96c615c7617-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 13 01:11:21.739731 kubelet[2911]: I0913 01:11:21.739586 2911 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-kj5pl\" (UniqueName: \"kubernetes.io/projected/e855610b-1c29-4a31-bca7-a96c615c7617-kube-api-access-kj5pl\") on node \"ip-172-31-27-15\" DevicePath \"\"" Sep 13 01:11:21.739731 kubelet[2911]: I0913 01:11:21.739627 2911 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-ca-bundle\") on node \"ip-172-31-27-15\" DevicePath \"\"" Sep 13 01:11:21.739731 kubelet[2911]: I0913 01:11:21.739642 2911 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e855610b-1c29-4a31-bca7-a96c615c7617-whisker-backend-key-pair\") on node \"ip-172-31-27-15\" DevicePath \"\"" Sep 13 01:11:21.776922 systemd[1]: Removed slice kubepods-besteffort-pode855610b_1c29_4a31_bca7_a96c615c7617.slice. Sep 13 01:11:21.796687 systemd[1]: var-lib-kubelet-pods-e855610b\x2d1c29\x2d4a31\x2dbca7\x2da96c615c7617-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dkj5pl.mount: Deactivated successfully. Sep 13 01:11:21.893000 audit[4289]: AVC avc: denied { write } for pid=4289 comm="tee" name="fd" dev="proc" ino=27129 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:11:21.932324 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:11:21.932444 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali58a0fcee11b: link becomes ready Sep 13 01:11:21.893000 audit[4289]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffcdcf57c9 a2=241 a3=1b6 items=1 ppid=4203 pid=4289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:21.893000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 13 01:11:21.893000 audit: PATH item=0 name="/dev/fd/63" inode=27748 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:11:21.893000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:11:21.893000 audit[4282]: AVC avc: denied { write } for pid=4282 comm="tee" name="fd" dev="proc" ino=27133 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:11:21.893000 audit[4282]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd97bb17d9 a2=241 a3=1b6 items=1 ppid=4212 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:21.893000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 13 01:11:21.893000 audit: PATH item=0 name="/dev/fd/63" inode=27744 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:11:21.893000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:11:21.928000 audit[4287]: AVC avc: denied { write } for pid=4287 comm="tee" name="fd" dev="proc" ino=27756 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:11:21.899765 (udev-worker)[4085]: Network interface NamePolicy= disabled on kernel command line. Sep 13 01:11:21.914274 systemd-networkd[1458]: cali58a0fcee11b: Link UP Sep 13 01:11:21.914588 systemd-networkd[1458]: cali58a0fcee11b: Gained carrier Sep 13 01:11:21.928000 audit[4287]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc332bb7d9 a2=241 a3=1b6 items=1 ppid=4207 pid=4287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:21.928000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 13 01:11:21.928000 audit: PATH item=0 name="/dev/fd/63" inode=27747 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:11:21.928000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:11:21.985000 audit[4294]: AVC avc: denied { write } for pid=4294 comm="tee" name="fd" dev="proc" ino=27770 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:11:21.986000 audit[4292]: AVC avc: denied { write } for pid=4292 comm="tee" name="fd" dev="proc" ino=27773 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.654 [INFO][4222] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.681 [INFO][4222] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0 calico-kube-controllers-66c99bdc99- calico-system b5c1a4b0-770e-47aa-89f5-af207367d613 946 0 2025-09-13 01:10:54 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:66c99bdc99 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-27-15 calico-kube-controllers-66c99bdc99-hsf56 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali58a0fcee11b [] [] }} ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.682 [INFO][4222] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.743 [INFO][4253] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" HandleID="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.743 [INFO][4253] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" HandleID="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00032d4a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-15", "pod":"calico-kube-controllers-66c99bdc99-hsf56", "timestamp":"2025-09-13 01:11:21.742965935 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.743 [INFO][4253] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.743 [INFO][4253] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.743 [INFO][4253] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.763 [INFO][4253] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.806 [INFO][4253] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.828 [INFO][4253] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.837 [INFO][4253] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.844 [INFO][4253] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.844 [INFO][4253] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.848 [INFO][4253] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52 Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.862 [INFO][4253] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.874 [INFO][4253] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.1/26] block=192.168.31.0/26 handle="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.874 [INFO][4253] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.1/26] handle="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" host="ip-172-31-27-15" Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.875 [INFO][4253] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:21.988092 env[1748]: 2025-09-13 01:11:21.875 [INFO][4253] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.1/26] IPv6=[] ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" HandleID="k8s-pod-network.bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.989363 env[1748]: 2025-09-13 01:11:21.878 [INFO][4222] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0", GenerateName:"calico-kube-controllers-66c99bdc99-", Namespace:"calico-system", SelfLink:"", UID:"b5c1a4b0-770e-47aa-89f5-af207367d613", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66c99bdc99", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"calico-kube-controllers-66c99bdc99-hsf56", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.31.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali58a0fcee11b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:21.989363 env[1748]: 2025-09-13 01:11:21.878 [INFO][4222] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.1/32] ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.989363 env[1748]: 2025-09-13 01:11:21.878 [INFO][4222] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali58a0fcee11b ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.989363 env[1748]: 2025-09-13 01:11:21.930 [INFO][4222] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.989363 env[1748]: 2025-09-13 01:11:21.934 [INFO][4222] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0", GenerateName:"calico-kube-controllers-66c99bdc99-", Namespace:"calico-system", SelfLink:"", UID:"b5c1a4b0-770e-47aa-89f5-af207367d613", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66c99bdc99", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52", Pod:"calico-kube-controllers-66c99bdc99-hsf56", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.31.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali58a0fcee11b", MAC:"8a:45:c0:b4:91:f0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:21.989363 env[1748]: 2025-09-13 01:11:21.985 [INFO][4222] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52" Namespace="calico-system" Pod="calico-kube-controllers-66c99bdc99-hsf56" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:11:21.986000 audit[4292]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcb89507db a2=241 a3=1b6 items=1 ppid=4213 pid=4292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:21.986000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 13 01:11:21.986000 audit: PATH item=0 name="/dev/fd/63" inode=27746 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:11:21.986000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:11:21.985000 audit[4294]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd9376f7ca a2=241 a3=1b6 items=1 ppid=4206 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:21.985000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 13 01:11:21.985000 audit: PATH item=0 name="/dev/fd/63" inode=27750 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:11:21.985000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:11:22.008740 env[1748]: time="2025-09-13T01:11:22.007863886Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:22.008740 env[1748]: time="2025-09-13T01:11:22.007925027Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:22.008740 env[1748]: time="2025-09-13T01:11:22.007939879Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:22.008740 env[1748]: time="2025-09-13T01:11:22.008110487Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52 pid=4318 runtime=io.containerd.runc.v2 Sep 13 01:11:22.012000 audit[4284]: AVC avc: denied { write } for pid=4284 comm="tee" name="fd" dev="proc" ino=27172 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:11:22.012000 audit[4284]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4f4d17d9 a2=241 a3=1b6 items=1 ppid=4211 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.012000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 13 01:11:22.012000 audit: PATH item=0 name="/dev/fd/63" inode=27745 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:11:22.012000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:11:22.020000 audit[4291]: AVC avc: denied { write } for pid=4291 comm="tee" name="fd" dev="proc" ino=27176 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:11:22.020000 audit[4291]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe6cd907da a2=241 a3=1b6 items=1 ppid=4215 pid=4291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.020000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 13 01:11:22.020000 audit: PATH item=0 name="/dev/fd/63" inode=27749 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:11:22.020000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:11:22.039838 systemd[1]: Started cri-containerd-bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52.scope. Sep 13 01:11:22.063595 systemd[1]: run-containerd-runc-k8s.io-bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52-runc.W2h4F0.mount: Deactivated successfully. Sep 13 01:11:22.141352 systemd[1]: Created slice kubepods-besteffort-podfa4488c5_f2e0_4fab_a91c_ebe27793c6aa.slice. Sep 13 01:11:22.186117 env[1748]: time="2025-09-13T01:11:22.185996406Z" level=info msg="StopPodSandbox for \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\"" Sep 13 01:11:22.190363 kubelet[2911]: I0913 01:11:22.190315 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-czxnd\" (UniqueName: \"kubernetes.io/projected/fa4488c5-f2e0-4fab-a91c-ebe27793c6aa-kube-api-access-czxnd\") pod \"whisker-554ff68754-z9rfx\" (UID: \"fa4488c5-f2e0-4fab-a91c-ebe27793c6aa\") " pod="calico-system/whisker-554ff68754-z9rfx" Sep 13 01:11:22.191036 kubelet[2911]: I0913 01:11:22.191009 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/fa4488c5-f2e0-4fab-a91c-ebe27793c6aa-whisker-backend-key-pair\") pod \"whisker-554ff68754-z9rfx\" (UID: \"fa4488c5-f2e0-4fab-a91c-ebe27793c6aa\") " pod="calico-system/whisker-554ff68754-z9rfx" Sep 13 01:11:22.191523 kubelet[2911]: I0913 01:11:22.191181 2911 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fa4488c5-f2e0-4fab-a91c-ebe27793c6aa-whisker-ca-bundle\") pod \"whisker-554ff68754-z9rfx\" (UID: \"fa4488c5-f2e0-4fab-a91c-ebe27793c6aa\") " pod="calico-system/whisker-554ff68754-z9rfx" Sep 13 01:11:22.201530 kubelet[2911]: I0913 01:11:22.201485 2911 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="e855610b-1c29-4a31-bca7-a96c615c7617" path="/var/lib/kubelet/pods/e855610b-1c29-4a31-bca7-a96c615c7617/volumes" Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.222000 audit: BPF prog-id=139 op=LOAD Sep 13 01:11:22.223000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.223000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4318 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363835633333653564333434326535306537363037363066656364 Sep 13 01:11:22.223000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.223000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4318 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363835633333653564333434326535306537363037363066656364 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit: BPF prog-id=140 op=LOAD Sep 13 01:11:22.224000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00030a520 items=0 ppid=4318 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363835633333653564333434326535306537363037363066656364 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit: BPF prog-id=141 op=LOAD Sep 13 01:11:22.224000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00030a568 items=0 ppid=4318 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363835633333653564333434326535306537363037363066656364 Sep 13 01:11:22.224000 audit: BPF prog-id=141 op=UNLOAD Sep 13 01:11:22.224000 audit: BPF prog-id=140 op=UNLOAD Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.224000 audit: BPF prog-id=142 op=LOAD Sep 13 01:11:22.224000 audit[4329]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00030a978 items=0 ppid=4318 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262363835633333653564333434326535306537363037363066656364 Sep 13 01:11:22.411687 env[1748]: time="2025-09-13T01:11:22.411615589Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-66c99bdc99-hsf56,Uid:b5c1a4b0-770e-47aa-89f5-af207367d613,Namespace:calico-system,Attempt:1,} returns sandbox id \"bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52\"" Sep 13 01:11:22.417469 env[1748]: time="2025-09-13T01:11:22.417426378Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.332 [INFO][4355] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.332 [INFO][4355] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" iface="eth0" netns="/var/run/netns/cni-1e1fe567-385b-b89c-8f9c-359ce8d83c49" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.332 [INFO][4355] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" iface="eth0" netns="/var/run/netns/cni-1e1fe567-385b-b89c-8f9c-359ce8d83c49" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.332 [INFO][4355] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" iface="eth0" netns="/var/run/netns/cni-1e1fe567-385b-b89c-8f9c-359ce8d83c49" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.332 [INFO][4355] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.332 [INFO][4355] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.390 [INFO][4364] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.391 [INFO][4364] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.391 [INFO][4364] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.415 [WARNING][4364] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.416 [INFO][4364] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.419 [INFO][4364] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:22.426918 env[1748]: 2025-09-13 01:11:22.422 [INFO][4355] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:11:22.428935 env[1748]: time="2025-09-13T01:11:22.426944041Z" level=info msg="TearDown network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\" successfully" Sep 13 01:11:22.428935 env[1748]: time="2025-09-13T01:11:22.427004119Z" level=info msg="StopPodSandbox for \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\" returns successfully" Sep 13 01:11:22.428935 env[1748]: time="2025-09-13T01:11:22.428035938Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-kdqwx,Uid:374abec8-51d5-4f8f-bf3e-193eab0492f1,Namespace:calico-apiserver,Attempt:1,}" Sep 13 01:11:22.517997 env[1748]: time="2025-09-13T01:11:22.517951031Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-554ff68754-z9rfx,Uid:fa4488c5-f2e0-4fab-a91c-ebe27793c6aa,Namespace:calico-system,Attempt:0,}" Sep 13 01:11:22.766503 systemd-networkd[1458]: calib67edea235a: Link UP Sep 13 01:11:22.769985 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib67edea235a: link becomes ready Sep 13 01:11:22.769640 systemd-networkd[1458]: calib67edea235a: Gained carrier Sep 13 01:11:22.803096 systemd[1]: run-netns-cni\x2d1e1fe567\x2d385b\x2db89c\x2d8f9c\x2d359ce8d83c49.mount: Deactivated successfully. Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.510 [INFO][4378] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.528 [INFO][4378] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0 calico-apiserver-669f46fc95- calico-apiserver 374abec8-51d5-4f8f-bf3e-193eab0492f1 967 0 2025-09-13 01:10:50 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:669f46fc95 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-15 calico-apiserver-669f46fc95-kdqwx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib67edea235a [] [] }} ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.528 [INFO][4378] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.670 [INFO][4400] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" HandleID="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.671 [INFO][4400] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" HandleID="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002502f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-15", "pod":"calico-apiserver-669f46fc95-kdqwx", "timestamp":"2025-09-13 01:11:22.670746272 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.671 [INFO][4400] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.671 [INFO][4400] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.671 [INFO][4400] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.687 [INFO][4400] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.696 [INFO][4400] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.710 [INFO][4400] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.713 [INFO][4400] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.719 [INFO][4400] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.719 [INFO][4400] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.725 [INFO][4400] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655 Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.733 [INFO][4400] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.747 [INFO][4400] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.2/26] block=192.168.31.0/26 handle="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.747 [INFO][4400] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.2/26] handle="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" host="ip-172-31-27-15" Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.747 [INFO][4400] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:22.813746 env[1748]: 2025-09-13 01:11:22.747 [INFO][4400] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.2/26] IPv6=[] ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" HandleID="k8s-pod-network.daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.815507 env[1748]: 2025-09-13 01:11:22.751 [INFO][4378] cni-plugin/k8s.go 418: Populated endpoint ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"374abec8-51d5-4f8f-bf3e-193eab0492f1", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"calico-apiserver-669f46fc95-kdqwx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib67edea235a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:22.815507 env[1748]: 2025-09-13 01:11:22.751 [INFO][4378] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.2/32] ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.815507 env[1748]: 2025-09-13 01:11:22.751 [INFO][4378] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib67edea235a ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.815507 env[1748]: 2025-09-13 01:11:22.770 [INFO][4378] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.815507 env[1748]: 2025-09-13 01:11:22.770 [INFO][4378] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"374abec8-51d5-4f8f-bf3e-193eab0492f1", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655", Pod:"calico-apiserver-669f46fc95-kdqwx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib67edea235a", MAC:"76:de:ed:d0:90:92", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:22.815507 env[1748]: 2025-09-13 01:11:22.806 [INFO][4378] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-kdqwx" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:11:22.845415 env[1748]: time="2025-09-13T01:11:22.844614082Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:22.845712 env[1748]: time="2025-09-13T01:11:22.845652325Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:22.845860 env[1748]: time="2025-09-13T01:11:22.845834157Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:22.847183 env[1748]: time="2025-09-13T01:11:22.846187796Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655 pid=4431 runtime=io.containerd.runc.v2 Sep 13 01:11:22.920947 systemd[1]: run-containerd-runc-k8s.io-daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655-runc.5xXVR2.mount: Deactivated successfully. Sep 13 01:11:22.926902 systemd[1]: Started cri-containerd-daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655.scope. Sep 13 01:11:22.949897 systemd-networkd[1458]: calid76ad834658: Link UP Sep 13 01:11:22.956065 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:11:22.956188 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid76ad834658: link becomes ready Sep 13 01:11:22.960043 systemd-networkd[1458]: calid76ad834658: Gained carrier Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.620 [INFO][4389] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.655 [INFO][4389] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0 whisker-554ff68754- calico-system fa4488c5-f2e0-4fab-a91c-ebe27793c6aa 965 0 2025-09-13 01:11:21 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:554ff68754 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-27-15 whisker-554ff68754-z9rfx eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calid76ad834658 [] [] }} ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.655 [INFO][4389] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.724 [INFO][4411] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" HandleID="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Workload="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.724 [INFO][4411] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" HandleID="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Workload="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-15", "pod":"whisker-554ff68754-z9rfx", "timestamp":"2025-09-13 01:11:22.723991632 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.724 [INFO][4411] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.748 [INFO][4411] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.748 [INFO][4411] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.786 [INFO][4411] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.814 [INFO][4411] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.829 [INFO][4411] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.839 [INFO][4411] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.846 [INFO][4411] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.846 [INFO][4411] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.860 [INFO][4411] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8 Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.890 [INFO][4411] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.930 [INFO][4411] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.3/26] block=192.168.31.0/26 handle="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.930 [INFO][4411] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.3/26] handle="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" host="ip-172-31-27-15" Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.930 [INFO][4411] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:22.981476 env[1748]: 2025-09-13 01:11:22.930 [INFO][4411] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.3/26] IPv6=[] ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" HandleID="k8s-pod-network.bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Workload="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" Sep 13 01:11:22.984036 env[1748]: 2025-09-13 01:11:22.935 [INFO][4389] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0", GenerateName:"whisker-554ff68754-", Namespace:"calico-system", SelfLink:"", UID:"fa4488c5-f2e0-4fab-a91c-ebe27793c6aa", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 11, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"554ff68754", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"whisker-554ff68754-z9rfx", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.31.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid76ad834658", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:22.984036 env[1748]: 2025-09-13 01:11:22.935 [INFO][4389] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.3/32] ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" Sep 13 01:11:22.984036 env[1748]: 2025-09-13 01:11:22.935 [INFO][4389] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid76ad834658 ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" Sep 13 01:11:22.984036 env[1748]: 2025-09-13 01:11:22.950 [INFO][4389] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" Sep 13 01:11:22.984036 env[1748]: 2025-09-13 01:11:22.961 [INFO][4389] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0", GenerateName:"whisker-554ff68754-", Namespace:"calico-system", SelfLink:"", UID:"fa4488c5-f2e0-4fab-a91c-ebe27793c6aa", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 11, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"554ff68754", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8", Pod:"whisker-554ff68754-z9rfx", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.31.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid76ad834658", MAC:"fa:6c:f9:3c:2f:3f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:22.984036 env[1748]: 2025-09-13 01:11:22.978 [INFO][4389] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8" Namespace="calico-system" Pod="whisker-554ff68754-z9rfx" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--554ff68754--z9rfx-eth0" Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.991000 audit: BPF prog-id=143 op=LOAD Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4431 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461613066383130373963333738666239393237633038633230333638 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4431 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461613066383130373963333738666239393237633038633230333638 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit: BPF prog-id=144 op=LOAD Sep 13 01:11:22.993000 audit[4442]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000281be0 items=0 ppid=4431 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461613066383130373963333738666239393237633038633230333638 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit: BPF prog-id=145 op=LOAD Sep 13 01:11:22.993000 audit[4442]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000281c28 items=0 ppid=4431 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461613066383130373963333738666239393237633038633230333638 Sep 13 01:11:22.993000 audit: BPF prog-id=145 op=UNLOAD Sep 13 01:11:22.993000 audit: BPF prog-id=144 op=UNLOAD Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { perfmon } for pid=4442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit[4442]: AVC avc: denied { bpf } for pid=4442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:22.993000 audit: BPF prog-id=146 op=LOAD Sep 13 01:11:22.993000 audit[4442]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038a038 items=0 ppid=4431 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:22.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461613066383130373963333738666239393237633038633230333638 Sep 13 01:11:23.013538 env[1748]: time="2025-09-13T01:11:23.013407339Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:23.013538 env[1748]: time="2025-09-13T01:11:23.013476845Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:23.013538 env[1748]: time="2025-09-13T01:11:23.013493131Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:23.014150 env[1748]: time="2025-09-13T01:11:23.013699969Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8 pid=4471 runtime=io.containerd.runc.v2 Sep 13 01:11:23.051140 systemd[1]: Started cri-containerd-bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8.scope. Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.111000 audit: BPF prog-id=147 op=LOAD Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4471 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663765663033316264623938636539646636363135386561353236 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4471 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663765663033316264623938636539646636363135386561353236 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit: BPF prog-id=148 op=LOAD Sep 13 01:11:23.112000 audit[4480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00038a550 items=0 ppid=4471 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663765663033316264623938636539646636363135386561353236 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit: BPF prog-id=149 op=LOAD Sep 13 01:11:23.112000 audit[4480]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00038a598 items=0 ppid=4471 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663765663033316264623938636539646636363135386561353236 Sep 13 01:11:23.112000 audit: BPF prog-id=149 op=UNLOAD Sep 13 01:11:23.112000 audit: BPF prog-id=148 op=UNLOAD Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { perfmon } for pid=4480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit[4480]: AVC avc: denied { bpf } for pid=4480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.112000 audit: BPF prog-id=150 op=LOAD Sep 13 01:11:23.112000 audit[4480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00038a9a8 items=0 ppid=4471 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266663765663033316264623938636539646636363135386561353236 Sep 13 01:11:23.134405 env[1748]: time="2025-09-13T01:11:23.134342734Z" level=info msg="StopPodSandbox for \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\"" Sep 13 01:11:23.134854 env[1748]: time="2025-09-13T01:11:23.134822939Z" level=info msg="StopPodSandbox for \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\"" Sep 13 01:11:23.182615 env[1748]: time="2025-09-13T01:11:23.182569159Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-kdqwx,Uid:374abec8-51d5-4f8f-bf3e-193eab0492f1,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655\"" Sep 13 01:11:23.450393 env[1748]: time="2025-09-13T01:11:23.450265151Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-554ff68754-z9rfx,Uid:fa4488c5-f2e0-4fab-a91c-ebe27793c6aa,Namespace:calico-system,Attempt:0,} returns sandbox id \"bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8\"" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.325 [INFO][4525] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.326 [INFO][4525] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" iface="eth0" netns="/var/run/netns/cni-457f0702-6a11-b38d-86c8-f1d86dfd8d22" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.326 [INFO][4525] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" iface="eth0" netns="/var/run/netns/cni-457f0702-6a11-b38d-86c8-f1d86dfd8d22" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.326 [INFO][4525] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" iface="eth0" netns="/var/run/netns/cni-457f0702-6a11-b38d-86c8-f1d86dfd8d22" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.326 [INFO][4525] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.327 [INFO][4525] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.432 [INFO][4553] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.432 [INFO][4553] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.432 [INFO][4553] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.446 [WARNING][4553] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.446 [INFO][4553] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.453 [INFO][4553] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:23.463198 env[1748]: 2025-09-13 01:11:23.457 [INFO][4525] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:11:23.464214 env[1748]: time="2025-09-13T01:11:23.464171235Z" level=info msg="TearDown network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\" successfully" Sep 13 01:11:23.464358 env[1748]: time="2025-09-13T01:11:23.464335935Z" level=info msg="StopPodSandbox for \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\" returns successfully" Sep 13 01:11:23.467794 env[1748]: time="2025-09-13T01:11:23.467738615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-f4knm,Uid:88619eea-3f88-422d-abc9-279657f0d3b6,Namespace:kube-system,Attempt:1,}" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.305 [INFO][4524] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.306 [INFO][4524] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" iface="eth0" netns="/var/run/netns/cni-37e54dc3-ffca-9615-4f73-19a6d613a851" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.306 [INFO][4524] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" iface="eth0" netns="/var/run/netns/cni-37e54dc3-ffca-9615-4f73-19a6d613a851" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.306 [INFO][4524] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" iface="eth0" netns="/var/run/netns/cni-37e54dc3-ffca-9615-4f73-19a6d613a851" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.306 [INFO][4524] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.306 [INFO][4524] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.434 [INFO][4546] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.435 [INFO][4546] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.456 [INFO][4546] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.474 [WARNING][4546] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.476 [INFO][4546] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.481 [INFO][4546] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:23.488162 env[1748]: 2025-09-13 01:11:23.485 [INFO][4524] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:11:23.489004 env[1748]: time="2025-09-13T01:11:23.488331618Z" level=info msg="TearDown network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\" successfully" Sep 13 01:11:23.489004 env[1748]: time="2025-09-13T01:11:23.488372435Z" level=info msg="StopPodSandbox for \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\" returns successfully" Sep 13 01:11:23.489223 env[1748]: time="2025-09-13T01:11:23.489191829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gnfr7,Uid:b0ad198e-b7d8-4aca-9152-6be1b3a26aa7,Namespace:kube-system,Attempt:1,}" Sep 13 01:11:23.733613 systemd-networkd[1458]: cali6458d5cad82: Link UP Sep 13 01:11:23.738218 systemd-networkd[1458]: cali6458d5cad82: Gained carrier Sep 13 01:11:23.738781 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6458d5cad82: link becomes ready Sep 13 01:11:23.772136 kernel: kauditd_printk_skb: 239 callbacks suppressed Sep 13 01:11:23.774020 kernel: audit: type=1400 audit(1757725883.761:1098): avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.772797 systemd-networkd[1458]: cali58a0fcee11b: Gained IPv6LL Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.584 [INFO][4576] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0 coredns-674b8bbfcf- kube-system 88619eea-3f88-422d-abc9-279657f0d3b6 981 0 2025-09-13 01:10:06 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-15 coredns-674b8bbfcf-f4knm eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6458d5cad82 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.584 [INFO][4576] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.671 [INFO][4606] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" HandleID="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.672 [INFO][4606] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" HandleID="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00032a0a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-15", "pod":"coredns-674b8bbfcf-f4knm", "timestamp":"2025-09-13 01:11:23.67157516 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.672 [INFO][4606] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.672 [INFO][4606] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.672 [INFO][4606] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.683 [INFO][4606] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.690 [INFO][4606] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.696 [INFO][4606] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.699 [INFO][4606] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.702 [INFO][4606] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.703 [INFO][4606] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.704 [INFO][4606] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.712 [INFO][4606] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.726 [INFO][4606] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.4/26] block=192.168.31.0/26 handle="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.726 [INFO][4606] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.4/26] handle="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" host="ip-172-31-27-15" Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.726 [INFO][4606] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:23.780280 env[1748]: 2025-09-13 01:11:23.726 [INFO][4606] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.4/26] IPv6=[] ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" HandleID="k8s-pod-network.74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.781552 env[1748]: 2025-09-13 01:11:23.730 [INFO][4576] cni-plugin/k8s.go 418: Populated endpoint ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"88619eea-3f88-422d-abc9-279657f0d3b6", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"coredns-674b8bbfcf-f4knm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6458d5cad82", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:23.781552 env[1748]: 2025-09-13 01:11:23.731 [INFO][4576] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.4/32] ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.781552 env[1748]: 2025-09-13 01:11:23.731 [INFO][4576] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6458d5cad82 ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.781552 env[1748]: 2025-09-13 01:11:23.747 [INFO][4576] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.781552 env[1748]: 2025-09-13 01:11:23.753 [INFO][4576] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"88619eea-3f88-422d-abc9-279657f0d3b6", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d", Pod:"coredns-674b8bbfcf-f4knm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6458d5cad82", MAC:"5a:51:29:24:1b:de", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:23.781552 env[1748]: 2025-09-13 01:11:23.776 [INFO][4576] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d" Namespace="kube-system" Pod="coredns-674b8bbfcf-f4knm" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:11:23.789820 kernel: audit: type=1400 audit(1757725883.761:1098): avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.789973 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 01:11:23.790057 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.796680 kernel: audit: backlog limit exceeded Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.802557 systemd[1]: run-netns-cni\x2d37e54dc3\x2dffca\x2d9615\x2d4f73\x2d19a6d613a851.mount: Deactivated successfully. Sep 13 01:11:23.802673 systemd[1]: run-netns-cni\x2d457f0702\x2d6a11\x2db38d\x2d86c8\x2df1d86dfd8d22.mount: Deactivated successfully. Sep 13 01:11:23.808760 kernel: audit: type=1400 audit(1757725883.761:1098): avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.819526 kernel: audit: type=1400 audit(1757725883.761:1098): avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.819685 kernel: audit: type=1400 audit(1757725883.761:1098): avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.830004 kernel: audit: type=1400 audit(1757725883.761:1098): avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.830123 kernel: audit: type=1400 audit(1757725883.761:1098): avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.761000 audit: BPF prog-id=151 op=LOAD Sep 13 01:11:23.761000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd55542980 a2=98 a3=1fffffffffffffff items=0 ppid=4217 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.761000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:11:23.770000 audit: BPF prog-id=151 op=UNLOAD Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit: BPF prog-id=152 op=LOAD Sep 13 01:11:23.777000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd55542860 a2=94 a3=3 items=0 ppid=4217 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.777000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:11:23.777000 audit: BPF prog-id=152 op=UNLOAD Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { bpf } for pid=4627 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit: BPF prog-id=153 op=LOAD Sep 13 01:11:23.777000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd555428a0 a2=94 a3=7ffd55542a80 items=0 ppid=4217 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.777000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:11:23.777000 audit: BPF prog-id=153 op=UNLOAD Sep 13 01:11:23.777000 audit[4627]: AVC avc: denied { perfmon } for pid=4627 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.777000 audit[4627]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd55542970 a2=50 a3=a000000085 items=0 ppid=4217 pid=4627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.777000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.780000 audit: BPF prog-id=154 op=LOAD Sep 13 01:11:23.780000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffee709ee10 a2=98 a3=3 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.780000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:23.780000 audit: BPF prog-id=154 op=UNLOAD Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.784000 audit: BPF prog-id=155 op=LOAD Sep 13 01:11:23.784000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffee709ec00 a2=94 a3=54428f items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.784000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:23.835000 audit: BPF prog-id=155 op=UNLOAD Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.835000 audit: BPF prog-id=156 op=LOAD Sep 13 01:11:23.835000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffee709ec30 a2=94 a3=2 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.835000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:23.835000 audit: BPF prog-id=156 op=UNLOAD Sep 13 01:11:23.873525 env[1748]: time="2025-09-13T01:11:23.872730550Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:23.873525 env[1748]: time="2025-09-13T01:11:23.872791490Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:23.873525 env[1748]: time="2025-09-13T01:11:23.872806544Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:23.873525 env[1748]: time="2025-09-13T01:11:23.873023644Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d pid=4640 runtime=io.containerd.runc.v2 Sep 13 01:11:23.912827 systemd-networkd[1458]: calic5f17cae898: Link UP Sep 13 01:11:23.918773 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic5f17cae898: link becomes ready Sep 13 01:11:23.918522 systemd-networkd[1458]: calic5f17cae898: Gained carrier Sep 13 01:11:23.938789 systemd[1]: Started cri-containerd-74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d.scope. Sep 13 01:11:23.954474 systemd[1]: run-containerd-runc-k8s.io-74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d-runc.g7l6Kj.mount: Deactivated successfully. Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.603 [INFO][4586] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0 coredns-674b8bbfcf- kube-system b0ad198e-b7d8-4aca-9152-6be1b3a26aa7 980 0 2025-09-13 01:10:06 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-15 coredns-674b8bbfcf-gnfr7 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic5f17cae898 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.603 [INFO][4586] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.685 [INFO][4614] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" HandleID="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.685 [INFO][4614] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" HandleID="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000325620), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-15", "pod":"coredns-674b8bbfcf-gnfr7", "timestamp":"2025-09-13 01:11:23.685159013 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.695 [INFO][4614] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.726 [INFO][4614] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.726 [INFO][4614] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.809 [INFO][4614] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.831 [INFO][4614] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.852 [INFO][4614] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.856 [INFO][4614] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.859 [INFO][4614] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.859 [INFO][4614] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.862 [INFO][4614] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684 Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.872 [INFO][4614] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.890 [INFO][4614] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.5/26] block=192.168.31.0/26 handle="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.891 [INFO][4614] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.5/26] handle="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" host="ip-172-31-27-15" Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.891 [INFO][4614] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:23.971296 env[1748]: 2025-09-13 01:11:23.891 [INFO][4614] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.5/26] IPv6=[] ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" HandleID="k8s-pod-network.f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.972349 env[1748]: 2025-09-13 01:11:23.895 [INFO][4586] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"coredns-674b8bbfcf-gnfr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5f17cae898", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:23.972349 env[1748]: 2025-09-13 01:11:23.895 [INFO][4586] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.5/32] ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.972349 env[1748]: 2025-09-13 01:11:23.895 [INFO][4586] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic5f17cae898 ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.972349 env[1748]: 2025-09-13 01:11:23.927 [INFO][4586] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.972349 env[1748]: 2025-09-13 01:11:23.930 [INFO][4586] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684", Pod:"coredns-674b8bbfcf-gnfr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5f17cae898", MAC:"c2:bf:e6:d7:3d:9b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:23.972349 env[1748]: 2025-09-13 01:11:23.968 [INFO][4586] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684" Namespace="kube-system" Pod="coredns-674b8bbfcf-gnfr7" WorkloadEndpoint="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.981000 audit: BPF prog-id=157 op=LOAD Sep 13 01:11:23.989000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.989000 audit[4651]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4640 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734616364343562353363366566323730306135363737353363336534 Sep 13 01:11:23.989000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.989000 audit[4651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4640 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734616364343562353363366566323730306135363737353363336534 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.990000 audit: BPF prog-id=158 op=LOAD Sep 13 01:11:23.990000 audit[4651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00038c350 items=0 ppid=4640 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734616364343562353363366566323730306135363737353363336534 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.991000 audit: BPF prog-id=159 op=LOAD Sep 13 01:11:23.991000 audit[4651]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00038c398 items=0 ppid=4640 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734616364343562353363366566323730306135363737353363336534 Sep 13 01:11:23.992000 audit: BPF prog-id=159 op=UNLOAD Sep 13 01:11:23.992000 audit: BPF prog-id=158 op=UNLOAD Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:23.992000 audit: BPF prog-id=160 op=LOAD Sep 13 01:11:23.992000 audit[4651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00038c7a8 items=0 ppid=4640 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:23.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734616364343562353363366566323730306135363737353363336534 Sep 13 01:11:24.018683 env[1748]: time="2025-09-13T01:11:24.017711016Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:24.018683 env[1748]: time="2025-09-13T01:11:24.017759283Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:24.018683 env[1748]: time="2025-09-13T01:11:24.017775582Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:24.018683 env[1748]: time="2025-09-13T01:11:24.017954398Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684 pid=4679 runtime=io.containerd.runc.v2 Sep 13 01:11:24.055821 systemd[1]: Started cri-containerd-f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684.scope. Sep 13 01:11:24.083308 env[1748]: time="2025-09-13T01:11:24.083261088Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-f4knm,Uid:88619eea-3f88-422d-abc9-279657f0d3b6,Namespace:kube-system,Attempt:1,} returns sandbox id \"74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d\"" Sep 13 01:11:24.095306 env[1748]: time="2025-09-13T01:11:24.095258419Z" level=info msg="CreateContainer within sandbox \"74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.102000 audit: BPF prog-id=161 op=LOAD Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4679 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639636237376662666463636535336237366139346266303036663935 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4679 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639636237376662666463636535336237366139346266303036663935 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit: BPF prog-id=162 op=LOAD Sep 13 01:11:24.103000 audit[4688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000300360 items=0 ppid=4679 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639636237376662666463636535336237366139346266303036663935 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit: BPF prog-id=163 op=LOAD Sep 13 01:11:24.103000 audit[4688]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003003a8 items=0 ppid=4679 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639636237376662666463636535336237366139346266303036663935 Sep 13 01:11:24.103000 audit: BPF prog-id=163 op=UNLOAD Sep 13 01:11:24.103000 audit: BPF prog-id=162 op=UNLOAD Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.103000 audit: BPF prog-id=164 op=LOAD Sep 13 01:11:24.103000 audit[4688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003007b8 items=0 ppid=4679 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639636237376662666463636535336237366139346266303036663935 Sep 13 01:11:24.137933 env[1748]: time="2025-09-13T01:11:24.137861258Z" level=info msg="StopPodSandbox for \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\"" Sep 13 01:11:24.139219 env[1748]: time="2025-09-13T01:11:24.139125611Z" level=info msg="StopPodSandbox for \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\"" Sep 13 01:11:24.172294 env[1748]: time="2025-09-13T01:11:24.172243947Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gnfr7,Uid:b0ad198e-b7d8-4aca-9152-6be1b3a26aa7,Namespace:kube-system,Attempt:1,} returns sandbox id \"f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684\"" Sep 13 01:11:24.183032 env[1748]: time="2025-09-13T01:11:24.182979182Z" level=info msg="CreateContainer within sandbox \"f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 01:11:24.214829 env[1748]: time="2025-09-13T01:11:24.214762881Z" level=info msg="CreateContainer within sandbox \"74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6d8f2501ce1b6500eae3bb52194c56e5c97dce4b7c58eba21dbfa29940e4f8c6\"" Sep 13 01:11:24.218071 env[1748]: time="2025-09-13T01:11:24.218018510Z" level=info msg="StartContainer for \"6d8f2501ce1b6500eae3bb52194c56e5c97dce4b7c58eba21dbfa29940e4f8c6\"" Sep 13 01:11:24.252040 env[1748]: time="2025-09-13T01:11:24.251985805Z" level=info msg="CreateContainer within sandbox \"f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"63ca3c45c32223c816ac16c62aa8ff9dec7fd7d88cfee0cf3287b0c346d34ed8\"" Sep 13 01:11:24.254185 env[1748]: time="2025-09-13T01:11:24.253237857Z" level=info msg="StartContainer for \"63ca3c45c32223c816ac16c62aa8ff9dec7fd7d88cfee0cf3287b0c346d34ed8\"" Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.331000 audit: BPF prog-id=165 op=LOAD Sep 13 01:11:24.331000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffee709eaf0 a2=94 a3=1 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.331000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.332000 audit: BPF prog-id=165 op=UNLOAD Sep 13 01:11:24.332000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.332000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffee709ebc0 a2=50 a3=7ffee709eca0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.332000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.341502 systemd-networkd[1458]: calib67edea235a: Gained IPv6LL Sep 13 01:11:24.346206 systemd[1]: Started cri-containerd-6d8f2501ce1b6500eae3bb52194c56e5c97dce4b7c58eba21dbfa29940e4f8c6.scope. Sep 13 01:11:24.387850 systemd[1]: Started cri-containerd-63ca3c45c32223c816ac16c62aa8ff9dec7fd7d88cfee0cf3287b0c346d34ed8.scope. Sep 13 01:11:24.415000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.415000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffee709eb00 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.415000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffee709eb30 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffee709ea40 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffee709eb50 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffee709eb30 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffee709eb20 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffee709eb50 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffee709eb30 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffee709eb50 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffee709eb20 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffee709eb90 a2=28 a3=0 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffee709e940 a2=50 a3=1 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit: BPF prog-id=166 op=LOAD Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffee709e940 a2=94 a3=5 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit: BPF prog-id=166 op=UNLOAD Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffee709e9f0 a2=50 a3=1 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffee709eb10 a2=4 a3=38 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.416000 audit[4628]: AVC avc: denied { confidentiality } for pid=4628 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:11:24.416000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffee709eb60 a2=94 a3=6 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.416000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.421000 audit[4628]: AVC avc: denied { confidentiality } for pid=4628 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:11:24.421000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffee709e310 a2=94 a3=88 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.421000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.424000 audit[4628]: AVC avc: denied { confidentiality } for pid=4628 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:11:24.424000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffee709e310 a2=94 a3=88 items=0 ppid=4217 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.424000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.450000 audit: BPF prog-id=167 op=LOAD Sep 13 01:11:24.451000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.451000 audit[4771]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4640 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664386632353031636531623635303065616533626235323139346335 Sep 13 01:11:24.451000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.451000 audit[4771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4640 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664386632353031636531623635303065616533626235323139346335 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.452000 audit: BPF prog-id=168 op=LOAD Sep 13 01:11:24.452000 audit[4771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000191020 items=0 ppid=4640 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664386632353031636531623635303065616533626235323139346335 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.453000 audit: BPF prog-id=169 op=LOAD Sep 13 01:11:24.453000 audit[4771]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000191068 items=0 ppid=4640 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664386632353031636531623635303065616533626235323139346335 Sep 13 01:11:24.454000 audit: BPF prog-id=169 op=UNLOAD Sep 13 01:11:24.454000 audit: BPF prog-id=168 op=UNLOAD Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.454000 audit: BPF prog-id=170 op=LOAD Sep 13 01:11:24.454000 audit[4771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000191478 items=0 ppid=4640 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664386632353031636531623635303065616533626235323139346335 Sep 13 01:11:24.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit: BPF prog-id=171 op=LOAD Sep 13 01:11:24.458000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[4781]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4679 pid=4781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633636133633435633332323233633831366163313663363261613866 Sep 13 01:11:24.458000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.458000 audit[4781]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4679 pid=4781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633636133633435633332323233633831366163313663363261613866 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit: BPF prog-id=172 op=LOAD Sep 13 01:11:24.459000 audit[4781]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000309760 items=0 ppid=4679 pid=4781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633636133633435633332323233633831366163313663363261613866 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit: BPF prog-id=173 op=LOAD Sep 13 01:11:24.459000 audit[4781]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003097a8 items=0 ppid=4679 pid=4781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633636133633435633332323233633831366163313663363261613866 Sep 13 01:11:24.459000 audit: BPF prog-id=173 op=UNLOAD Sep 13 01:11:24.459000 audit: BPF prog-id=172 op=UNLOAD Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { perfmon } for pid=4781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit[4781]: AVC avc: denied { bpf } for pid=4781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.459000 audit: BPF prog-id=174 op=LOAD Sep 13 01:11:24.459000 audit[4781]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000309bb8 items=0 ppid=4679 pid=4781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633636133633435633332323233633831366163313663363261613866 Sep 13 01:11:24.468424 systemd-networkd[1458]: calid76ad834658: Gained IPv6LL Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.251 [INFO][4742] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.251 [INFO][4742] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" iface="eth0" netns="/var/run/netns/cni-032f6388-314e-2fa1-417b-a4e9bb69fa65" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.252 [INFO][4742] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" iface="eth0" netns="/var/run/netns/cni-032f6388-314e-2fa1-417b-a4e9bb69fa65" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.257 [INFO][4742] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" iface="eth0" netns="/var/run/netns/cni-032f6388-314e-2fa1-417b-a4e9bb69fa65" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.257 [INFO][4742] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.257 [INFO][4742] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.466 [INFO][4763] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.470 [INFO][4763] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.470 [INFO][4763] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.484 [WARNING][4763] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.484 [INFO][4763] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.488 [INFO][4763] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:24.496675 env[1748]: 2025-09-13 01:11:24.493 [INFO][4742] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:11:24.497787 env[1748]: time="2025-09-13T01:11:24.497741159Z" level=info msg="TearDown network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\" successfully" Sep 13 01:11:24.497921 env[1748]: time="2025-09-13T01:11:24.497901711Z" level=info msg="StopPodSandbox for \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\" returns successfully" Sep 13 01:11:24.498813 env[1748]: time="2025-09-13T01:11:24.498780306Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-4lw7t,Uid:5f00d1b8-5e83-4b8b-ab26-87798c93eddb,Namespace:calico-apiserver,Attempt:1,}" Sep 13 01:11:24.567302 env[1748]: time="2025-09-13T01:11:24.557361689Z" level=info msg="StartContainer for \"63ca3c45c32223c816ac16c62aa8ff9dec7fd7d88cfee0cf3287b0c346d34ed8\" returns successfully" Sep 13 01:11:24.583002 env[1748]: time="2025-09-13T01:11:24.582943930Z" level=info msg="StartContainer for \"6d8f2501ce1b6500eae3bb52194c56e5c97dce4b7c58eba21dbfa29940e4f8c6\" returns successfully" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.362 [INFO][4741] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.363 [INFO][4741] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" iface="eth0" netns="/var/run/netns/cni-8646bc9a-5219-7501-64bb-2640386593f4" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.363 [INFO][4741] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" iface="eth0" netns="/var/run/netns/cni-8646bc9a-5219-7501-64bb-2640386593f4" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.364 [INFO][4741] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" iface="eth0" netns="/var/run/netns/cni-8646bc9a-5219-7501-64bb-2640386593f4" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.364 [INFO][4741] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.364 [INFO][4741] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.588 [INFO][4798] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.589 [INFO][4798] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.590 [INFO][4798] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.600 [WARNING][4798] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.600 [INFO][4798] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.603 [INFO][4798] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:24.611543 env[1748]: 2025-09-13 01:11:24.609 [INFO][4741] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:11:24.612560 env[1748]: time="2025-09-13T01:11:24.612512283Z" level=info msg="TearDown network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\" successfully" Sep 13 01:11:24.612727 env[1748]: time="2025-09-13T01:11:24.612700977Z" level=info msg="StopPodSandbox for \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\" returns successfully" Sep 13 01:11:24.613778 env[1748]: time="2025-09-13T01:11:24.613746153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-p9jh8,Uid:05fa90eb-9dab-4217-8797-8c89464df9e5,Namespace:calico-system,Attempt:1,}" Sep 13 01:11:24.807133 systemd[1]: run-netns-cni\x2d032f6388\x2d314e\x2d2fa1\x2d417b\x2da4e9bb69fa65.mount: Deactivated successfully. Sep 13 01:11:24.807260 systemd[1]: run-netns-cni\x2d8646bc9a\x2d5219\x2d7501\x2d64bb\x2d2640386593f4.mount: Deactivated successfully. Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.902000 audit: BPF prog-id=175 op=LOAD Sep 13 01:11:24.902000 audit[4876]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffecf347e60 a2=98 a3=1999999999999999 items=0 ppid=4217 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.902000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 01:11:24.903000 audit: BPF prog-id=175 op=UNLOAD Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit: BPF prog-id=176 op=LOAD Sep 13 01:11:24.903000 audit[4876]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffecf347d40 a2=94 a3=ffff items=0 ppid=4217 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.903000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 01:11:24.903000 audit: BPF prog-id=176 op=UNLOAD Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:24.903000 audit: BPF prog-id=177 op=LOAD Sep 13 01:11:24.903000 audit[4876]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffecf347d80 a2=94 a3=7ffecf347f60 items=0 ppid=4217 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:24.903000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 01:11:24.903000 audit: BPF prog-id=177 op=UNLOAD Sep 13 01:11:24.914344 kubelet[2911]: I0913 01:11:24.913648 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-gnfr7" podStartSLOduration=78.910841491 podStartE2EDuration="1m18.910841491s" podCreationTimestamp="2025-09-13 01:10:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:11:24.859018432 +0000 UTC m=+81.434970199" watchObservedRunningTime="2025-09-13 01:11:24.910841491 +0000 UTC m=+81.486793258" Sep 13 01:11:24.953000 audit[4797]: AVC avc: denied { getattr } for pid=4797 comm="coredns" path="cgroup:[4026532711]" dev="nsfs" ino=4026532711 scontext=system_u:system_r:svirt_lxc_net_t:s0:c41,c732 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 01:11:24.953000 audit[4797]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a528 a2=c00054a5e8 a3=0 items=0 ppid=4640 pid=4797 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c41,c732 key=(null) Sep 13 01:11:24.953000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 01:11:24.954000 audit[4808]: AVC avc: denied { getattr } for pid=4808 comm="coredns" path="cgroup:[4026532714]" dev="nsfs" ino=4026532714 scontext=system_u:system_r:svirt_lxc_net_t:s0:c638,c739 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 01:11:24.954000 audit[4808]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a4b0 a2=c000469b08 a3=0 items=0 ppid=4679 pid=4808 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c638,c739 key=(null) Sep 13 01:11:24.954000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 01:11:24.962439 systemd-networkd[1458]: cali61f8aa88016: Link UP Sep 13 01:11:24.967407 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:11:24.967603 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali61f8aa88016: link becomes ready Sep 13 01:11:24.967867 systemd-networkd[1458]: cali61f8aa88016: Gained carrier Sep 13 01:11:24.980012 systemd-networkd[1458]: calic5f17cae898: Gained IPv6LL Sep 13 01:11:25.023628 kubelet[2911]: I0913 01:11:25.023180 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-f4knm" podStartSLOduration=79.023153635 podStartE2EDuration="1m19.023153635s" podCreationTimestamp="2025-09-13 01:10:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:11:24.914314692 +0000 UTC m=+81.490266437" watchObservedRunningTime="2025-09-13 01:11:25.023153635 +0000 UTC m=+81.599105404" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.647 [INFO][4825] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0 calico-apiserver-669f46fc95- calico-apiserver 5f00d1b8-5e83-4b8b-ab26-87798c93eddb 995 0 2025-09-13 01:10:50 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:669f46fc95 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-15 calico-apiserver-669f46fc95-4lw7t eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali61f8aa88016 [] [] }} ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.647 [INFO][4825] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.779 [INFO][4859] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" HandleID="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.780 [INFO][4859] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" HandleID="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003a8140), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-15", "pod":"calico-apiserver-669f46fc95-4lw7t", "timestamp":"2025-09-13 01:11:24.779546737 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.780 [INFO][4859] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.780 [INFO][4859] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.780 [INFO][4859] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.824 [INFO][4859] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.865 [INFO][4859] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.911 [INFO][4859] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.917 [INFO][4859] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.921 [INFO][4859] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.922 [INFO][4859] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.926 [INFO][4859] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5 Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.935 [INFO][4859] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.953 [INFO][4859] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.6/26] block=192.168.31.0/26 handle="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.953 [INFO][4859] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.6/26] handle="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" host="ip-172-31-27-15" Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.953 [INFO][4859] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:25.026939 env[1748]: 2025-09-13 01:11:24.953 [INFO][4859] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.6/26] IPv6=[] ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" HandleID="k8s-pod-network.4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:25.028931 env[1748]: 2025-09-13 01:11:24.957 [INFO][4825] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"5f00d1b8-5e83-4b8b-ab26-87798c93eddb", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"calico-apiserver-669f46fc95-4lw7t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali61f8aa88016", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:25.028931 env[1748]: 2025-09-13 01:11:24.958 [INFO][4825] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.6/32] ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:25.028931 env[1748]: 2025-09-13 01:11:24.958 [INFO][4825] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali61f8aa88016 ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:25.028931 env[1748]: 2025-09-13 01:11:24.967 [INFO][4825] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:25.028931 env[1748]: 2025-09-13 01:11:24.970 [INFO][4825] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"5f00d1b8-5e83-4b8b-ab26-87798c93eddb", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5", Pod:"calico-apiserver-669f46fc95-4lw7t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali61f8aa88016", MAC:"c2:41:e6:64:40:0d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:25.028931 env[1748]: 2025-09-13 01:11:25.024 [INFO][4825] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5" Namespace="calico-apiserver" Pod="calico-apiserver-669f46fc95-4lw7t" WorkloadEndpoint="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:11:25.096000 audit[4900]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=4900 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:25.096000 audit[4900]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe8f3bc780 a2=0 a3=7ffe8f3bc76c items=0 ppid=3065 pid=4900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:25.105000 audit[4900]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=4900 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:25.105000 audit[4900]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffe8f3bc780 a2=0 a3=0 items=0 ppid=3065 pid=4900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.105000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:25.137514 env[1748]: time="2025-09-13T01:11:25.116130893Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:25.137514 env[1748]: time="2025-09-13T01:11:25.116228960Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:25.137514 env[1748]: time="2025-09-13T01:11:25.116262554Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:25.137514 env[1748]: time="2025-09-13T01:11:25.118868195Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5 pid=4907 runtime=io.containerd.runc.v2 Sep 13 01:11:25.141018 env[1748]: time="2025-09-13T01:11:25.140977525Z" level=info msg="StopPodSandbox for \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\"" Sep 13 01:11:25.187004 systemd[1]: Started cri-containerd-4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5.scope. Sep 13 01:11:25.203053 systemd[1]: run-containerd-runc-k8s.io-4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5-runc.WQAMBV.mount: Deactivated successfully. Sep 13 01:11:25.239209 systemd-networkd[1458]: cali734d5866b41: Link UP Sep 13 01:11:25.243583 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali734d5866b41: link becomes ready Sep 13 01:11:25.242847 systemd-networkd[1458]: cali734d5866b41: Gained carrier Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:24.733 [INFO][4848] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0 csi-node-driver- calico-system 05fa90eb-9dab-4217-8797-8c89464df9e5 997 0 2025-09-13 01:10:54 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-27-15 csi-node-driver-p9jh8 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali734d5866b41 [] [] }} ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:24.733 [INFO][4848] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:24.886 [INFO][4866] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" HandleID="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:24.887 [INFO][4866] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" HandleID="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5a60), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-15", "pod":"csi-node-driver-p9jh8", "timestamp":"2025-09-13 01:11:24.886686351 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:24.887 [INFO][4866] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:24.967 [INFO][4866] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:24.967 [INFO][4866] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.049 [INFO][4866] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.068 [INFO][4866] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.091 [INFO][4866] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.099 [INFO][4866] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.108 [INFO][4866] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.108 [INFO][4866] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.117 [INFO][4866] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.138 [INFO][4866] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.174 [INFO][4866] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.7/26] block=192.168.31.0/26 handle="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.174 [INFO][4866] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.7/26] handle="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" host="ip-172-31-27-15" Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.174 [INFO][4866] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:25.305761 env[1748]: 2025-09-13 01:11:25.174 [INFO][4866] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.7/26] IPv6=[] ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" HandleID="k8s-pod-network.7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:25.309326 env[1748]: 2025-09-13 01:11:25.209 [INFO][4848] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"05fa90eb-9dab-4217-8797-8c89464df9e5", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"csi-node-driver-p9jh8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.31.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali734d5866b41", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:25.309326 env[1748]: 2025-09-13 01:11:25.209 [INFO][4848] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.7/32] ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:25.309326 env[1748]: 2025-09-13 01:11:25.209 [INFO][4848] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali734d5866b41 ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:25.309326 env[1748]: 2025-09-13 01:11:25.244 [INFO][4848] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:25.309326 env[1748]: 2025-09-13 01:11:25.246 [INFO][4848] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"05fa90eb-9dab-4217-8797-8c89464df9e5", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da", Pod:"csi-node-driver-p9jh8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.31.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali734d5866b41", MAC:"aa:cb:ff:99:0c:71", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:25.309326 env[1748]: 2025-09-13 01:11:25.299 [INFO][4848] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da" Namespace="calico-system" Pod="csi-node-driver-p9jh8" WorkloadEndpoint="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:11:25.363945 systemd-networkd[1458]: cali6458d5cad82: Gained IPv6LL Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.372000 audit: BPF prog-id=178 op=LOAD Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4907 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393862306361326635303461363433363363346131393431396230 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4907 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393862306361326635303461363433363363346131393431396230 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit: BPF prog-id=179 op=LOAD Sep 13 01:11:25.373000 audit[4916]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000332820 items=0 ppid=4907 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393862306361326635303461363433363363346131393431396230 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.373000 audit: BPF prog-id=180 op=LOAD Sep 13 01:11:25.373000 audit[4916]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000332868 items=0 ppid=4907 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393862306361326635303461363433363363346131393431396230 Sep 13 01:11:25.376000 audit: BPF prog-id=180 op=UNLOAD Sep 13 01:11:25.376000 audit: BPF prog-id=179 op=UNLOAD Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { perfmon } for pid=4916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit[4916]: AVC avc: denied { bpf } for pid=4916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.376000 audit: BPF prog-id=181 op=LOAD Sep 13 01:11:25.376000 audit[4916]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000332c78 items=0 ppid=4907 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393862306361326635303461363433363363346131393431396230 Sep 13 01:11:25.382339 env[1748]: time="2025-09-13T01:11:25.381811314Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:25.382339 env[1748]: time="2025-09-13T01:11:25.381918074Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:25.382339 env[1748]: time="2025-09-13T01:11:25.381934907Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:25.388470 env[1748]: time="2025-09-13T01:11:25.387098868Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da pid=4965 runtime=io.containerd.runc.v2 Sep 13 01:11:25.466910 systemd[1]: Started cri-containerd-7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da.scope. Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.410 [INFO][4941] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.410 [INFO][4941] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" iface="eth0" netns="/var/run/netns/cni-7fa557e9-9df7-7572-a808-25236b68caf3" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.411 [INFO][4941] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" iface="eth0" netns="/var/run/netns/cni-7fa557e9-9df7-7572-a808-25236b68caf3" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.413 [INFO][4941] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" iface="eth0" netns="/var/run/netns/cni-7fa557e9-9df7-7572-a808-25236b68caf3" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.413 [INFO][4941] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.413 [INFO][4941] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.526 [INFO][4978] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.526 [INFO][4978] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.526 [INFO][4978] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.537 [WARNING][4978] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.537 [INFO][4978] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.540 [INFO][4978] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:25.547472 env[1748]: 2025-09-13 01:11:25.544 [INFO][4941] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:11:25.548432 env[1748]: time="2025-09-13T01:11:25.548384403Z" level=info msg="TearDown network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\" successfully" Sep 13 01:11:25.548572 env[1748]: time="2025-09-13T01:11:25.548549365Z" level=info msg="StopPodSandbox for \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\" returns successfully" Sep 13 01:11:25.549576 env[1748]: time="2025-09-13T01:11:25.549539868Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-rctrp,Uid:5a9d0e00-dcb6-4851-8665-0e6584f4aec1,Namespace:calico-system,Attempt:1,}" Sep 13 01:11:25.586166 systemd-networkd[1458]: vxlan.calico: Link UP Sep 13 01:11:25.586178 systemd-networkd[1458]: vxlan.calico: Gained carrier Sep 13 01:11:25.657227 env[1748]: time="2025-09-13T01:11:25.657180639Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-669f46fc95-4lw7t,Uid:5f00d1b8-5e83-4b8b-ab26-87798c93eddb,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5\"" Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.702000 audit: BPF prog-id=182 op=LOAD Sep 13 01:11:25.704000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.704000 audit[4976]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4965 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731313964343938303533373335396632346132383564633336613035 Sep 13 01:11:25.704000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.704000 audit[4976]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4965 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731313964343938303533373335396632346132383564633336613035 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.705000 audit: BPF prog-id=183 op=LOAD Sep 13 01:11:25.705000 audit[4976]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025070 items=0 ppid=4965 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731313964343938303533373335396632346132383564633336613035 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.706000 audit: BPF prog-id=184 op=LOAD Sep 13 01:11:25.706000 audit[4976]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000250b8 items=0 ppid=4965 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731313964343938303533373335396632346132383564633336613035 Sep 13 01:11:25.707000 audit: BPF prog-id=184 op=UNLOAD Sep 13 01:11:25.707000 audit: BPF prog-id=183 op=UNLOAD Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { perfmon } for pid=4976 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit[4976]: AVC avc: denied { bpf } for pid=4976 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.707000 audit: BPF prog-id=185 op=LOAD Sep 13 01:11:25.707000 audit[4976]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000254c8 items=0 ppid=4965 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731313964343938303533373335396632346132383564633336613035 Sep 13 01:11:25.745372 env[1748]: time="2025-09-13T01:11:25.742382861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-p9jh8,Uid:05fa90eb-9dab-4217-8797-8c89464df9e5,Namespace:calico-system,Attempt:1,} returns sandbox id \"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da\"" Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.802000 audit: BPF prog-id=186 op=LOAD Sep 13 01:11:25.802000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff5cc4c3f0 a2=98 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.802000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.802000 audit: BPF prog-id=186 op=UNLOAD Sep 13 01:11:25.802020 systemd[1]: run-netns-cni\x2d7fa557e9\x2d9df7\x2d7572\x2da808\x2d25236b68caf3.mount: Deactivated successfully. Sep 13 01:11:25.813265 (udev-worker)[4086]: Network interface NamePolicy= disabled on kernel command line. Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.841000 audit: BPF prog-id=187 op=LOAD Sep 13 01:11:25.841000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff5cc4c200 a2=94 a3=54428f items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.841000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit: BPF prog-id=187 op=UNLOAD Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit: BPF prog-id=188 op=LOAD Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff5cc4c230 a2=94 a3=2 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit: BPF prog-id=188 op=UNLOAD Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff5cc4c100 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff5cc4c130 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff5cc4c040 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff5cc4c150 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff5cc4c130 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff5cc4c120 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff5cc4c150 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff5cc4c130 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff5cc4c150 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff5cc4c120 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff5cc4c190 a2=28 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.842000 audit: BPF prog-id=189 op=LOAD Sep 13 01:11:25.842000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff5cc4c000 a2=94 a3=0 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.842000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.842000 audit: BPF prog-id=189 op=UNLOAD Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff5cc4bff0 a2=50 a3=2800 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.843000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff5cc4bff0 a2=50 a3=2800 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.843000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit: BPF prog-id=190 op=LOAD Sep 13 01:11:25.843000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff5cc4b810 a2=94 a3=2 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.843000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.843000 audit: BPF prog-id=190 op=UNLOAD Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { perfmon } for pid=5035 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit[5035]: AVC avc: denied { bpf } for pid=5035 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.843000 audit: BPF prog-id=191 op=LOAD Sep 13 01:11:25.843000 audit[5035]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff5cc4b910 a2=94 a3=30 items=0 ppid=4217 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.843000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.864000 audit: BPF prog-id=192 op=LOAD Sep 13 01:11:25.864000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffec28540b0 a2=98 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.864000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:25.868000 audit: BPF prog-id=192 op=UNLOAD Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.868000 audit: BPF prog-id=193 op=LOAD Sep 13 01:11:25.868000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffec2853ea0 a2=94 a3=54428f items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.868000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:25.869000 audit: BPF prog-id=193 op=UNLOAD Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:25.869000 audit: BPF prog-id=194 op=LOAD Sep 13 01:11:25.869000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffec2853ed0 a2=94 a3=2 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:25.869000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:25.869000 audit: BPF prog-id=194 op=UNLOAD Sep 13 01:11:26.005000 audit[5052]: NETFILTER_CFG table=filter:103 family=2 entries=17 op=nft_register_rule pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:26.005000 audit[5052]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff968e97a0 a2=0 a3=7fff968e978c items=0 ppid=3065 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.005000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:26.012000 audit[5052]: NETFILTER_CFG table=nat:104 family=2 entries=35 op=nft_register_chain pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:26.012000 audit[5052]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff968e97a0 a2=0 a3=7fff968e978c items=0 ppid=3065 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:26.060961 systemd-networkd[1458]: cali103ae138570: Link UP Sep 13 01:11:26.061275 systemd-networkd[1458]: cali103ae138570: Gained carrier Sep 13 01:11:26.061957 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali103ae138570: link becomes ready Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.749 [INFO][5007] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0 goldmane-54d579b49d- calico-system 5a9d0e00-dcb6-4851-8665-0e6584f4aec1 1017 0 2025-09-13 01:10:54 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-27-15 goldmane-54d579b49d-rctrp eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali103ae138570 [] [] }} ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.749 [INFO][5007] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.969 [INFO][5042] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" HandleID="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.969 [INFO][5042] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" HandleID="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000307ac0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-15", "pod":"goldmane-54d579b49d-rctrp", "timestamp":"2025-09-13 01:11:25.969131757 +0000 UTC"}, Hostname:"ip-172-31-27-15", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.969 [INFO][5042] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.969 [INFO][5042] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.969 [INFO][5042] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-15' Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.979 [INFO][5042] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:25.985 [INFO][5042] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.008 [INFO][5042] ipam/ipam.go 511: Trying affinity for 192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.011 [INFO][5042] ipam/ipam.go 158: Attempting to load block cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.016 [INFO][5042] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.31.0/26 host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.016 [INFO][5042] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.31.0/26 handle="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.020 [INFO][5042] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.029 [INFO][5042] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.31.0/26 handle="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.043 [INFO][5042] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.31.8/26] block=192.168.31.0/26 handle="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.043 [INFO][5042] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.31.8/26] handle="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" host="ip-172-31-27-15" Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.044 [INFO][5042] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:11:26.092333 env[1748]: 2025-09-13 01:11:26.044 [INFO][5042] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.31.8/26] IPv6=[] ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" HandleID="k8s-pod-network.78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:26.093569 env[1748]: 2025-09-13 01:11:26.049 [INFO][5007] cni-plugin/k8s.go 418: Populated endpoint ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5a9d0e00-dcb6-4851-8665-0e6584f4aec1", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"", Pod:"goldmane-54d579b49d-rctrp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.31.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali103ae138570", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:26.093569 env[1748]: 2025-09-13 01:11:26.049 [INFO][5007] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.31.8/32] ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:26.093569 env[1748]: 2025-09-13 01:11:26.049 [INFO][5007] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali103ae138570 ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:26.093569 env[1748]: 2025-09-13 01:11:26.062 [INFO][5007] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:26.093569 env[1748]: 2025-09-13 01:11:26.066 [INFO][5007] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5a9d0e00-dcb6-4851-8665-0e6584f4aec1", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b", Pod:"goldmane-54d579b49d-rctrp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.31.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali103ae138570", MAC:"36:27:0d:ed:3e:3e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:11:26.093569 env[1748]: 2025-09-13 01:11:26.089 [INFO][5007] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b" Namespace="calico-system" Pod="goldmane-54d579b49d-rctrp" WorkloadEndpoint="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:11:26.102000 audit[5060]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=5060 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:26.102000 audit[5060]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdaa872dc0 a2=0 a3=7ffdaa872dac items=0 ppid=3065 pid=5060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.102000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:26.153365 env[1748]: time="2025-09-13T01:11:26.153271816Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:11:26.153592 env[1748]: time="2025-09-13T01:11:26.153559307Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:11:26.153756 env[1748]: time="2025-09-13T01:11:26.153728396Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:11:26.154315 env[1748]: time="2025-09-13T01:11:26.154254835Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b pid=5067 runtime=io.containerd.runc.v2 Sep 13 01:11:26.201863 systemd[1]: Started cri-containerd-78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b.scope. Sep 13 01:11:26.229000 audit[5060]: NETFILTER_CFG table=nat:106 family=2 entries=56 op=nft_register_chain pid=5060 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:26.229000 audit[5060]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffdaa872dc0 a2=0 a3=7ffdaa872dac items=0 ppid=3065 pid=5060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:26.325724 systemd-networkd[1458]: cali61f8aa88016: Gained IPv6LL Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.344000 audit: BPF prog-id=195 op=LOAD Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=5067 pid=5080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613333363033626235623938323238636432323039363238366565 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=5067 pid=5080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613333363033626235623938323238636432323039363238366565 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit: BPF prog-id=196 op=LOAD Sep 13 01:11:26.345000 audit[5080]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c20a0 items=0 ppid=5067 pid=5080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613333363033626235623938323238636432323039363238366565 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit: BPF prog-id=197 op=LOAD Sep 13 01:11:26.345000 audit[5080]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c20e8 items=0 ppid=5067 pid=5080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613333363033626235623938323238636432323039363238366565 Sep 13 01:11:26.345000 audit: BPF prog-id=197 op=UNLOAD Sep 13 01:11:26.345000 audit: BPF prog-id=196 op=UNLOAD Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { perfmon } for pid=5080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit[5080]: AVC avc: denied { bpf } for pid=5080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.345000 audit: BPF prog-id=198 op=LOAD Sep 13 01:11:26.345000 audit[5080]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c24f8 items=0 ppid=5067 pid=5080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738613333363033626235623938323238636432323039363238366565 Sep 13 01:11:26.476523 env[1748]: time="2025-09-13T01:11:26.476471403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-rctrp,Uid:5a9d0e00-dcb6-4851-8665-0e6584f4aec1,Namespace:calico-system,Attempt:1,} returns sandbox id \"78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b\"" Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.496000 audit: BPF prog-id=199 op=LOAD Sep 13 01:11:26.496000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffec2853d90 a2=94 a3=1 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.496000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.497000 audit: BPF prog-id=199 op=UNLOAD Sep 13 01:11:26.497000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.497000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffec2853e60 a2=50 a3=7ffec2853f40 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.497000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.537000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.537000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffec2853da0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.537000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.537000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.537000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffec2853dd0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.537000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.538000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.538000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffec2853ce0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.538000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.538000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffec2853df0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.538000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.538000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffec2853dd0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.538000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.538000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffec2853dc0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffec2853df0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffec2853dd0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffec2853df0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffec2853dc0 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffec2853e30 a2=28 a3=0 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffec2853be0 a2=50 a3=1 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.539000 audit: BPF prog-id=200 op=LOAD Sep 13 01:11:26.539000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffec2853be0 a2=94 a3=5 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.540000 audit: BPF prog-id=200 op=UNLOAD Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffec2853c90 a2=50 a3=1 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffec2853db0 a2=4 a3=38 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { confidentiality } for pid=5046 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:11:26.540000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffec2853e00 a2=94 a3=6 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.540000 audit[5046]: AVC avc: denied { confidentiality } for pid=5046 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:11:26.540000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffec28535b0 a2=94 a3=88 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { perfmon } for pid=5046 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.541000 audit[5046]: AVC avc: denied { confidentiality } for pid=5046 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:11:26.541000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffec28535b0 a2=94 a3=88 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.541000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.544000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.544000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffec2854fe0 a2=10 a3=f8f00800 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.544000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.545000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.545000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffec2854e80 a2=10 a3=3 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.545000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.545000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffec2854e20 a2=10 a3=3 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.545000 audit[5046]: AVC avc: denied { bpf } for pid=5046 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:26.545000 audit[5046]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffec2854e20 a2=10 a3=7 items=0 ppid=4217 pid=5046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:26.545000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:11:26.562000 audit: BPF prog-id=191 op=UNLOAD Sep 13 01:11:26.963882 systemd-networkd[1458]: cali734d5866b41: Gained IPv6LL Sep 13 01:11:27.223000 audit[5132]: NETFILTER_CFG table=mangle:107 family=2 entries=16 op=nft_register_chain pid=5132 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:11:27.223000 audit[5132]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffef319a7e0 a2=0 a3=7ffef319a7cc items=0 ppid=4217 pid=5132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.223000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:11:27.255000 audit[5131]: NETFILTER_CFG table=raw:108 family=2 entries=21 op=nft_register_chain pid=5131 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:11:27.255000 audit[5131]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffcc1ba0b00 a2=0 a3=7ffcc1ba0aec items=0 ppid=4217 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.255000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:11:27.261000 audit[5133]: NETFILTER_CFG table=nat:109 family=2 entries=15 op=nft_register_chain pid=5133 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:11:27.261000 audit[5133]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffdc3402c10 a2=0 a3=7ffdc3402bfc items=0 ppid=4217 pid=5133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.261000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:11:27.348345 systemd-networkd[1458]: cali103ae138570: Gained IPv6LL Sep 13 01:11:27.340000 audit[5136]: NETFILTER_CFG table=filter:110 family=2 entries=257 op=nft_register_chain pid=5136 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:11:27.340000 audit[5136]: SYSCALL arch=c000003e syscall=46 success=yes exit=151660 a0=3 a1=7ffd7379ef80 a2=0 a3=7ffd7379ef6c items=0 ppid=4217 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.340000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:11:27.422729 systemd-networkd[1458]: vxlan.calico: Gained IPv6LL Sep 13 01:11:27.482000 audit[5148]: NETFILTER_CFG table=filter:111 family=2 entries=88 op=nft_register_chain pid=5148 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:11:27.482000 audit[5148]: SYSCALL arch=c000003e syscall=46 success=yes exit=46592 a0=3 a1=7ffde8d45a10 a2=0 a3=7ffde8d459fc items=0 ppid=4217 pid=5148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.482000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:11:27.617463 env[1748]: time="2025-09-13T01:11:27.617401754Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:27.620777 env[1748]: time="2025-09-13T01:11:27.620735196Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:27.622975 env[1748]: time="2025-09-13T01:11:27.622940687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:27.624672 env[1748]: time="2025-09-13T01:11:27.624630656Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:27.625071 env[1748]: time="2025-09-13T01:11:27.624996604Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 13 01:11:27.627700 env[1748]: time="2025-09-13T01:11:27.626384221Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 01:11:27.646077 env[1748]: time="2025-09-13T01:11:27.646027238Z" level=info msg="CreateContainer within sandbox \"bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 13 01:11:27.663570 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3658787265.mount: Deactivated successfully. Sep 13 01:11:27.668603 env[1748]: time="2025-09-13T01:11:27.668506876Z" level=info msg="CreateContainer within sandbox \"bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"ba1bff6dd793987073733ea1b0222f1146aa9b17dfd3245160c354e4696227e7\"" Sep 13 01:11:27.669607 env[1748]: time="2025-09-13T01:11:27.669578113Z" level=info msg="StartContainer for \"ba1bff6dd793987073733ea1b0222f1146aa9b17dfd3245160c354e4696227e7\"" Sep 13 01:11:27.703289 systemd[1]: Started cri-containerd-ba1bff6dd793987073733ea1b0222f1146aa9b17dfd3245160c354e4696227e7.scope. Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.723000 audit: BPF prog-id=201 op=LOAD Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4318 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261316266663664643739333938373037333733336561316230323232 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4318 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261316266663664643739333938373037333733336561316230323232 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.724000 audit: BPF prog-id=202 op=LOAD Sep 13 01:11:27.724000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003d01e0 items=0 ppid=4318 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261316266663664643739333938373037333733336561316230323232 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit: BPF prog-id=203 op=LOAD Sep 13 01:11:27.725000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003d0228 items=0 ppid=4318 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261316266663664643739333938373037333733336561316230323232 Sep 13 01:11:27.725000 audit: BPF prog-id=203 op=UNLOAD Sep 13 01:11:27.725000 audit: BPF prog-id=202 op=UNLOAD Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { perfmon } for pid=5158 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit[5158]: AVC avc: denied { bpf } for pid=5158 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:27.725000 audit: BPF prog-id=204 op=LOAD Sep 13 01:11:27.725000 audit[5158]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d0638 items=0 ppid=4318 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:27.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261316266663664643739333938373037333733336561316230323232 Sep 13 01:11:27.768032 env[1748]: time="2025-09-13T01:11:27.767975200Z" level=info msg="StartContainer for \"ba1bff6dd793987073733ea1b0222f1146aa9b17dfd3245160c354e4696227e7\" returns successfully" Sep 13 01:11:28.937632 systemd[1]: run-containerd-runc-k8s.io-ba1bff6dd793987073733ea1b0222f1146aa9b17dfd3245160c354e4696227e7-runc.pWanzW.mount: Deactivated successfully. Sep 13 01:11:29.014534 kubelet[2911]: I0913 01:11:29.014455 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-66c99bdc99-hsf56" podStartSLOduration=29.802958537 podStartE2EDuration="35.014436113s" podCreationTimestamp="2025-09-13 01:10:54 +0000 UTC" firstStartedPulling="2025-09-13 01:11:22.414432561 +0000 UTC m=+78.990384319" lastFinishedPulling="2025-09-13 01:11:27.625910138 +0000 UTC m=+84.201861895" observedRunningTime="2025-09-13 01:11:27.937625108 +0000 UTC m=+84.513576874" watchObservedRunningTime="2025-09-13 01:11:29.014436113 +0000 UTC m=+85.590387876" Sep 13 01:11:33.646532 env[1748]: time="2025-09-13T01:11:33.646469993Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:33.688488 env[1748]: time="2025-09-13T01:11:33.688436653Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:33.696630 env[1748]: time="2025-09-13T01:11:33.696582949Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:33.698320 env[1748]: time="2025-09-13T01:11:33.698267278Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:33.699005 env[1748]: time="2025-09-13T01:11:33.698841089Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 13 01:11:33.746617 env[1748]: time="2025-09-13T01:11:33.746189316Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 13 01:11:33.758788 env[1748]: time="2025-09-13T01:11:33.758736964Z" level=info msg="CreateContainer within sandbox \"daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 01:11:33.787215 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3012919187.mount: Deactivated successfully. Sep 13 01:11:33.789300 env[1748]: time="2025-09-13T01:11:33.787865875Z" level=info msg="CreateContainer within sandbox \"daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"49f6ed3625088138b77c87a9ac67fef71a5988daf5f553b5a9005c6f9acd3e6f\"" Sep 13 01:11:33.793246 env[1748]: time="2025-09-13T01:11:33.793202375Z" level=info msg="StartContainer for \"49f6ed3625088138b77c87a9ac67fef71a5988daf5f553b5a9005c6f9acd3e6f\"" Sep 13 01:11:33.843511 systemd[1]: Started cri-containerd-49f6ed3625088138b77c87a9ac67fef71a5988daf5f553b5a9005c6f9acd3e6f.scope. Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.872050 kernel: kauditd_printk_skb: 997 callbacks suppressed Sep 13 01:11:33.875883 kernel: audit: type=1400 audit(1757725893.868:1353): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.880434 kernel: audit: type=1400 audit(1757725893.868:1354): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.888961 kernel: audit: type=1400 audit(1757725893.868:1355): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.889085 kernel: audit: type=1400 audit(1757725893.868:1356): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.892504 kernel: audit: type=1400 audit(1757725893.868:1357): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.900203 kernel: audit: type=1400 audit(1757725893.868:1358): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.900344 kernel: audit: type=1400 audit(1757725893.868:1359): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.905689 kernel: audit: type=1400 audit(1757725893.868:1360): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.917203 kernel: audit: type=1400 audit(1757725893.868:1361): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.917982 kernel: audit: type=1400 audit(1757725893.869:1362): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.869000 audit: BPF prog-id=205 op=LOAD Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4431 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:33.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439663665643336323530383831333862373763383761396163363766 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4431 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:33.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439663665643336323530383831333862373763383761396163363766 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.871000 audit: BPF prog-id=206 op=LOAD Sep 13 01:11:33.871000 audit[5247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003a4960 items=0 ppid=4431 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:33.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439663665643336323530383831333862373763383761396163363766 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit: BPF prog-id=207 op=LOAD Sep 13 01:11:33.879000 audit[5247]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003a49a8 items=0 ppid=4431 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:33.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439663665643336323530383831333862373763383761396163363766 Sep 13 01:11:33.879000 audit: BPF prog-id=207 op=UNLOAD Sep 13 01:11:33.879000 audit: BPF prog-id=206 op=UNLOAD Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { perfmon } for pid=5247 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit[5247]: AVC avc: denied { bpf } for pid=5247 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:33.879000 audit: BPF prog-id=208 op=LOAD Sep 13 01:11:33.879000 audit[5247]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003a4db8 items=0 ppid=4431 pid=5247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:33.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439663665643336323530383831333862373763383761396163363766 Sep 13 01:11:33.945573 env[1748]: time="2025-09-13T01:11:33.945530548Z" level=info msg="StartContainer for \"49f6ed3625088138b77c87a9ac67fef71a5988daf5f553b5a9005c6f9acd3e6f\" returns successfully" Sep 13 01:11:35.015122 kubelet[2911]: I0913 01:11:35.015054 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-669f46fc95-kdqwx" podStartSLOduration=34.479320349 podStartE2EDuration="45.015028669s" podCreationTimestamp="2025-09-13 01:10:50 +0000 UTC" firstStartedPulling="2025-09-13 01:11:23.184379233 +0000 UTC m=+79.760330984" lastFinishedPulling="2025-09-13 01:11:33.720087537 +0000 UTC m=+90.296039304" observedRunningTime="2025-09-13 01:11:35.013023872 +0000 UTC m=+91.588975641" watchObservedRunningTime="2025-09-13 01:11:35.015028669 +0000 UTC m=+91.590980436" Sep 13 01:11:35.130000 audit[5280]: NETFILTER_CFG table=filter:112 family=2 entries=14 op=nft_register_rule pid=5280 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:35.130000 audit[5280]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffef65da520 a2=0 a3=7ffef65da50c items=0 ppid=3065 pid=5280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.130000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:35.156000 audit[5280]: NETFILTER_CFG table=nat:113 family=2 entries=20 op=nft_register_rule pid=5280 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:35.156000 audit[5280]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffef65da520 a2=0 a3=7ffef65da50c items=0 ppid=3065 pid=5280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.156000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:35.205137 env[1748]: time="2025-09-13T01:11:35.205097057Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.207298 env[1748]: time="2025-09-13T01:11:35.207249933Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.209697 env[1748]: time="2025-09-13T01:11:35.209096476Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.212435 env[1748]: time="2025-09-13T01:11:35.212388612Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.212905 env[1748]: time="2025-09-13T01:11:35.212869727Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 13 01:11:35.214368 env[1748]: time="2025-09-13T01:11:35.214346850Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 01:11:35.238665 env[1748]: time="2025-09-13T01:11:35.238605721Z" level=info msg="CreateContainer within sandbox \"bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 13 01:11:35.255940 env[1748]: time="2025-09-13T01:11:35.255890130Z" level=info msg="CreateContainer within sandbox \"bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"2dac869f470e8322a33d47540c19785fc43f98a9b048f1a939c6b840240e7c81\"" Sep 13 01:11:35.257028 env[1748]: time="2025-09-13T01:11:35.256991819Z" level=info msg="StartContainer for \"2dac869f470e8322a33d47540c19785fc43f98a9b048f1a939c6b840240e7c81\"" Sep 13 01:11:35.310605 systemd[1]: run-containerd-runc-k8s.io-2dac869f470e8322a33d47540c19785fc43f98a9b048f1a939c6b840240e7c81-runc.5w4lGW.mount: Deactivated successfully. Sep 13 01:11:35.322414 systemd[1]: Started cri-containerd-2dac869f470e8322a33d47540c19785fc43f98a9b048f1a939c6b840240e7c81.scope. Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.344000 audit: BPF prog-id=209 op=LOAD Sep 13 01:11:35.345000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.345000 audit[5288]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4471 pid=5288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264616338363966343730653833323261333364343735343063313937 Sep 13 01:11:35.345000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.345000 audit[5288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4471 pid=5288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264616338363966343730653833323261333364343735343063313937 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.346000 audit: BPF prog-id=210 op=LOAD Sep 13 01:11:35.346000 audit[5288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00034e010 items=0 ppid=4471 pid=5288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264616338363966343730653833323261333364343735343063313937 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit: BPF prog-id=211 op=LOAD Sep 13 01:11:35.348000 audit[5288]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00034e058 items=0 ppid=4471 pid=5288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264616338363966343730653833323261333364343735343063313937 Sep 13 01:11:35.348000 audit: BPF prog-id=211 op=UNLOAD Sep 13 01:11:35.348000 audit: BPF prog-id=210 op=UNLOAD Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { perfmon } for pid=5288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit[5288]: AVC avc: denied { bpf } for pid=5288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.348000 audit: BPF prog-id=212 op=LOAD Sep 13 01:11:35.348000 audit[5288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00034e468 items=0 ppid=4471 pid=5288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264616338363966343730653833323261333364343735343063313937 Sep 13 01:11:35.444398 env[1748]: time="2025-09-13T01:11:35.444339521Z" level=info msg="StartContainer for \"2dac869f470e8322a33d47540c19785fc43f98a9b048f1a939c6b840240e7c81\" returns successfully" Sep 13 01:11:35.486314 env[1748]: time="2025-09-13T01:11:35.486279196Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.488163 env[1748]: time="2025-09-13T01:11:35.488133868Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.489981 env[1748]: time="2025-09-13T01:11:35.489944447Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.492789 env[1748]: time="2025-09-13T01:11:35.492747364Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:35.493643 env[1748]: time="2025-09-13T01:11:35.493606625Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 13 01:11:35.496409 env[1748]: time="2025-09-13T01:11:35.496357737Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 13 01:11:35.507619 env[1748]: time="2025-09-13T01:11:35.507568279Z" level=info msg="CreateContainer within sandbox \"4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 01:11:35.529849 env[1748]: time="2025-09-13T01:11:35.529792817Z" level=info msg="CreateContainer within sandbox \"4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"415bc434d39315da81732c398a9865fcab9c4d77d1b3bab6f0633498ad67dd2e\"" Sep 13 01:11:35.531002 env[1748]: time="2025-09-13T01:11:35.530947045Z" level=info msg="StartContainer for \"415bc434d39315da81732c398a9865fcab9c4d77d1b3bab6f0633498ad67dd2e\"" Sep 13 01:11:35.593133 systemd[1]: Started cri-containerd-415bc434d39315da81732c398a9865fcab9c4d77d1b3bab6f0633498ad67dd2e.scope. Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.648000 audit: BPF prog-id=213 op=LOAD Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000151c48 a2=10 a3=1c items=0 ppid=4907 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431356263343334643339333135646138313733326333393861393836 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001516b0 a2=3c a3=8 items=0 ppid=4907 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431356263343334643339333135646138313733326333393861393836 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.650000 audit: BPF prog-id=214 op=LOAD Sep 13 01:11:35.650000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001519d8 a2=78 a3=c00032a5f0 items=0 ppid=4907 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431356263343334643339333135646138313733326333393861393836 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit: BPF prog-id=215 op=LOAD Sep 13 01:11:35.651000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000151770 a2=78 a3=c00032a638 items=0 ppid=4907 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431356263343334643339333135646138313733326333393861393836 Sep 13 01:11:35.651000 audit: BPF prog-id=215 op=UNLOAD Sep 13 01:11:35.651000 audit: BPF prog-id=214 op=UNLOAD Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:35.651000 audit: BPF prog-id=216 op=LOAD Sep 13 01:11:35.651000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000151c30 a2=78 a3=c00032aa48 items=0 ppid=4907 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:35.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431356263343334643339333135646138313733326333393861393836 Sep 13 01:11:35.657000 audit[5298]: AVC avc: denied { search } for pid=5298 comm="nginx" name="crypto" dev="proc" ino=31313 scontext=system_u:system_r:svirt_lxc_net_t:s0:c166,c248 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 13 01:11:35.657000 audit[5298]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7efe80aea728 a2=0 a3=0 items=0 ppid=4471 pid=5298 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c166,c248 key=(null) Sep 13 01:11:35.657000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 13 01:11:35.672386 systemd[1]: Started sshd@7-172.31.27.15:22-147.75.109.163:52786.service. Sep 13 01:11:35.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.15:22-147.75.109.163:52786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:35.743987 env[1748]: time="2025-09-13T01:11:35.743922099Z" level=info msg="StartContainer for \"415bc434d39315da81732c398a9865fcab9c4d77d1b3bab6f0633498ad67dd2e\" returns successfully" Sep 13 01:11:35.956000 audit[5258]: AVC avc: denied { watch } for pid=5258 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.313247475/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c459,c974 tclass=file permissive=0 Sep 13 01:11:35.956000 audit[5258]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000fb88e0 a2=fc6 a3=0 items=0 ppid=4431 pid=5258 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 key=(null) Sep 13 01:11:35.956000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:11:36.022000 audit[5345]: USER_ACCT pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:36.025000 audit[5345]: CRED_ACQ pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:36.025000 audit[5345]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9754d300 a2=3 a3=0 items=0 ppid=1 pid=5345 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:36.025000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:11:36.027632 sshd[5345]: Accepted publickey for core from 147.75.109.163 port 52786 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:11:36.037540 sshd[5345]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:11:36.072189 systemd[1]: Started session-8.scope. Sep 13 01:11:36.075500 systemd-logind[1738]: New session 8 of user core. Sep 13 01:11:36.105000 audit[5345]: USER_START pid=5345 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:36.108000 audit[5366]: CRED_ACQ pid=5366 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:36.240000 audit[5372]: NETFILTER_CFG table=filter:114 family=2 entries=14 op=nft_register_rule pid=5372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:36.240000 audit[5372]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc12b67d30 a2=0 a3=7ffc12b67d1c items=0 ppid=3065 pid=5372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:36.240000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:36.256000 audit[5372]: NETFILTER_CFG table=nat:115 family=2 entries=20 op=nft_register_rule pid=5372 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:36.256000 audit[5372]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc12b67d30 a2=0 a3=7ffc12b67d1c items=0 ppid=3065 pid=5372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:36.256000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:36.290772 kubelet[2911]: I0913 01:11:36.290674 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-669f46fc95-4lw7t" podStartSLOduration=36.448701298 podStartE2EDuration="46.285106745s" podCreationTimestamp="2025-09-13 01:10:50 +0000 UTC" firstStartedPulling="2025-09-13 01:11:25.658874909 +0000 UTC m=+82.234826676" lastFinishedPulling="2025-09-13 01:11:35.495280379 +0000 UTC m=+92.071232123" observedRunningTime="2025-09-13 01:11:36.200682907 +0000 UTC m=+92.776634671" watchObservedRunningTime="2025-09-13 01:11:36.285106745 +0000 UTC m=+92.861058514" Sep 13 01:11:36.366000 audit[5374]: NETFILTER_CFG table=filter:116 family=2 entries=13 op=nft_register_rule pid=5374 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:36.366000 audit[5374]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdd2886380 a2=0 a3=7ffdd288636c items=0 ppid=3065 pid=5374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:36.366000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:36.383000 audit[5374]: NETFILTER_CFG table=nat:117 family=2 entries=27 op=nft_register_chain pid=5374 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:36.383000 audit[5374]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffdd2886380 a2=0 a3=7ffdd288636c items=0 ppid=3065 pid=5374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:36.383000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:37.620500 sshd[5345]: pam_unix(sshd:session): session closed for user core Sep 13 01:11:37.622000 audit[5345]: USER_END pid=5345 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:37.622000 audit[5345]: CRED_DISP pid=5345 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:37.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.15:22-147.75.109.163:52786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:37.626514 systemd[1]: sshd@7-172.31.27.15:22-147.75.109.163:52786.service: Deactivated successfully. Sep 13 01:11:37.627616 systemd[1]: session-8.scope: Deactivated successfully. Sep 13 01:11:37.629931 systemd-logind[1738]: Session 8 logged out. Waiting for processes to exit. Sep 13 01:11:37.631275 systemd-logind[1738]: Removed session 8. Sep 13 01:11:37.761757 env[1748]: time="2025-09-13T01:11:37.761703145Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:37.766803 env[1748]: time="2025-09-13T01:11:37.765715064Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:37.769574 env[1748]: time="2025-09-13T01:11:37.769518106Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:37.773083 env[1748]: time="2025-09-13T01:11:37.773033331Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:37.773962 env[1748]: time="2025-09-13T01:11:37.773917284Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 13 01:11:37.791649 env[1748]: time="2025-09-13T01:11:37.791597295Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 13 01:11:37.876088 env[1748]: time="2025-09-13T01:11:37.875945940Z" level=info msg="CreateContainer within sandbox \"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 13 01:11:37.920479 env[1748]: time="2025-09-13T01:11:37.920378715Z" level=info msg="CreateContainer within sandbox \"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"e500cf4c3fc2a826169519482253ed070a6bbe5a9e49269a8a66fb715144300d\"" Sep 13 01:11:37.921553 env[1748]: time="2025-09-13T01:11:37.921511570Z" level=info msg="StartContainer for \"e500cf4c3fc2a826169519482253ed070a6bbe5a9e49269a8a66fb715144300d\"" Sep 13 01:11:37.957246 systemd[1]: Started cri-containerd-e500cf4c3fc2a826169519482253ed070a6bbe5a9e49269a8a66fb715144300d.scope. Sep 13 01:11:37.982784 systemd[1]: run-containerd-runc-k8s.io-e500cf4c3fc2a826169519482253ed070a6bbe5a9e49269a8a66fb715144300d-runc.nifjqU.mount: Deactivated successfully. Sep 13 01:11:38.068000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.068000 audit[5396]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f40316b6518 items=0 ppid=4965 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:38.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303063663463336663326138323631363935313934383232353365 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit: BPF prog-id=217 op=LOAD Sep 13 01:11:38.069000 audit[5396]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000259ba8 items=0 ppid=4965 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:38.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303063663463336663326138323631363935313934383232353365 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.069000 audit: BPF prog-id=218 op=LOAD Sep 13 01:11:38.069000 audit[5396]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000259bf8 items=0 ppid=4965 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:38.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303063663463336663326138323631363935313934383232353365 Sep 13 01:11:38.074000 audit: BPF prog-id=218 op=UNLOAD Sep 13 01:11:38.074000 audit: BPF prog-id=217 op=UNLOAD Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { perfmon } for pid=5396 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit[5396]: AVC avc: denied { bpf } for pid=5396 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:38.074000 audit: BPF prog-id=219 op=LOAD Sep 13 01:11:38.074000 audit[5396]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000259c88 items=0 ppid=4965 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:38.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535303063663463336663326138323631363935313934383232353365 Sep 13 01:11:38.096731 kubelet[2911]: I0913 01:11:38.096684 2911 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:11:38.108923 env[1748]: time="2025-09-13T01:11:38.108870535Z" level=info msg="StartContainer for \"e500cf4c3fc2a826169519482253ed070a6bbe5a9e49269a8a66fb715144300d\" returns successfully" Sep 13 01:11:38.589000 audit[5333]: AVC avc: denied { watch } for pid=5333 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.2829829244/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c127,c604 tclass=file permissive=0 Sep 13 01:11:38.589000 audit[5333]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000d7c1c0 a2=fc6 a3=0 items=0 ppid=4907 pid=5333 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 key=(null) Sep 13 01:11:38.589000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:11:38.711000 audit[5424]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=5424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:38.711000 audit[5424]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdaa697100 a2=0 a3=7ffdaa6970ec items=0 ppid=3065 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:38.711000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:38.717000 audit[5424]: NETFILTER_CFG table=nat:119 family=2 entries=34 op=nft_register_chain pid=5424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:38.717000 audit[5424]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffdaa697100 a2=0 a3=7ffdaa6970ec items=0 ppid=3065 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:38.717000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:41.856026 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount87449915.mount: Deactivated successfully. Sep 13 01:11:42.668006 systemd[1]: Started sshd@8-172.31.27.15:22-147.75.109.163:58482.service. Sep 13 01:11:42.677290 kernel: kauditd_printk_skb: 248 callbacks suppressed Sep 13 01:11:42.685132 kernel: audit: type=1130 audit(1757725902.670:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.15:22-147.75.109.163:58482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:42.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.15:22-147.75.109.163:58482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:43.009000 audit[5427]: USER_ACCT pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.044262 kernel: audit: type=1101 audit(1757725903.009:1434): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.045481 kernel: audit: type=1103 audit(1757725903.020:1435): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.045583 kernel: audit: type=1006 audit(1757725903.020:1436): pid=5427 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Sep 13 01:11:43.045621 kernel: audit: type=1300 audit(1757725903.020:1436): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffecbd4b040 a2=3 a3=0 items=0 ppid=1 pid=5427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:43.020000 audit[5427]: CRED_ACQ pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.079115 kernel: audit: type=1327 audit(1757725903.020:1436): proctitle=737368643A20636F7265205B707269765D Sep 13 01:11:43.020000 audit[5427]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffecbd4b040 a2=3 a3=0 items=0 ppid=1 pid=5427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:43.020000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:11:43.084081 sshd[5427]: Accepted publickey for core from 147.75.109.163 port 58482 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:11:43.024196 sshd[5427]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:11:43.080598 systemd[1]: Started session-9.scope. Sep 13 01:11:43.081951 systemd-logind[1738]: New session 9 of user core. Sep 13 01:11:43.108979 kernel: audit: type=1105 audit(1757725903.096:1437): pid=5427 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.096000 audit[5427]: USER_START pid=5427 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.109000 audit[5429]: CRED_ACQ pid=5429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.119761 kernel: audit: type=1103 audit(1757725903.109:1438): pid=5429 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:43.239239 env[1748]: time="2025-09-13T01:11:43.239144918Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:43.246888 env[1748]: time="2025-09-13T01:11:43.245601628Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:43.250485 env[1748]: time="2025-09-13T01:11:43.248468721Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:43.256106 env[1748]: time="2025-09-13T01:11:43.254982236Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 13 01:11:43.256106 env[1748]: time="2025-09-13T01:11:43.254139884Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:43.760387 env[1748]: time="2025-09-13T01:11:43.760101783Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 13 01:11:44.237994 env[1748]: time="2025-09-13T01:11:44.237638715Z" level=info msg="CreateContainer within sandbox \"78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 13 01:11:44.286116 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2796844686.mount: Deactivated successfully. Sep 13 01:11:44.305403 env[1748]: time="2025-09-13T01:11:44.305348398Z" level=info msg="CreateContainer within sandbox \"78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"fd4d1d3b7f0848716f9b8321580b8c57eab00f676847c81aef2c526796655e7a\"" Sep 13 01:11:44.447225 env[1748]: time="2025-09-13T01:11:44.445771475Z" level=info msg="StartContainer for \"fd4d1d3b7f0848716f9b8321580b8c57eab00f676847c81aef2c526796655e7a\"" Sep 13 01:11:44.508789 systemd[1]: run-containerd-runc-k8s.io-fd4d1d3b7f0848716f9b8321580b8c57eab00f676847c81aef2c526796655e7a-runc.eP7L7u.mount: Deactivated successfully. Sep 13 01:11:44.525153 systemd[1]: Started cri-containerd-fd4d1d3b7f0848716f9b8321580b8c57eab00f676847c81aef2c526796655e7a.scope. Sep 13 01:11:44.558353 kernel: audit: type=1400 audit(1757725904.548:1439): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.573910 kernel: audit: type=1400 audit(1757725904.548:1440): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.555000 audit: BPF prog-id=220 op=LOAD Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=5067 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664346431643362376630383438373136663962383332313538306238 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=5067 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664346431643362376630383438373136663962383332313538306238 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit: BPF prog-id=221 op=LOAD Sep 13 01:11:44.556000 audit[5444]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000351ed0 items=0 ppid=5067 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664346431643362376630383438373136663962383332313538306238 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.556000 audit: BPF prog-id=222 op=LOAD Sep 13 01:11:44.556000 audit[5444]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000351f18 items=0 ppid=5067 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:44.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664346431643362376630383438373136663962383332313538306238 Sep 13 01:11:44.557000 audit: BPF prog-id=222 op=UNLOAD Sep 13 01:11:44.557000 audit: BPF prog-id=221 op=UNLOAD Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { perfmon } for pid=5444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit[5444]: AVC avc: denied { bpf } for pid=5444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:44.557000 audit: BPF prog-id=223 op=LOAD Sep 13 01:11:44.557000 audit[5444]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003b8328 items=0 ppid=5067 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:44.557000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664346431643362376630383438373136663962383332313538306238 Sep 13 01:11:44.622770 env[1748]: time="2025-09-13T01:11:44.622702720Z" level=info msg="StartContainer for \"fd4d1d3b7f0848716f9b8321580b8c57eab00f676847c81aef2c526796655e7a\" returns successfully" Sep 13 01:11:46.779199 sshd[5427]: pam_unix(sshd:session): session closed for user core Sep 13 01:11:46.786000 audit[5427]: USER_END pid=5427 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:46.787000 audit[5427]: CRED_DISP pid=5427 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:46.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.15:22-147.75.109.163:58482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:46.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.15:22-147.75.109.163:58490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:46.797261 systemd[1]: sshd@8-172.31.27.15:22-147.75.109.163:58482.service: Deactivated successfully. Sep 13 01:11:46.799877 systemd[1]: session-9.scope: Deactivated successfully. Sep 13 01:11:46.803550 systemd-logind[1738]: Session 9 logged out. Waiting for processes to exit. Sep 13 01:11:46.818031 systemd[1]: Started sshd@9-172.31.27.15:22-147.75.109.163:58490.service. Sep 13 01:11:46.828916 systemd-logind[1738]: Removed session 9. Sep 13 01:11:47.114781 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2101751769.mount: Deactivated successfully. Sep 13 01:11:47.116000 audit[5481]: USER_ACCT pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:47.117000 audit[5481]: CRED_ACQ pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:47.117000 audit[5481]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6d4e8b10 a2=3 a3=0 items=0 ppid=1 pid=5481 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:47.117000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:11:47.122727 sshd[5481]: Accepted publickey for core from 147.75.109.163 port 58490 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:11:47.121140 sshd[5481]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:11:47.163302 systemd[1]: Started session-10.scope. Sep 13 01:11:47.165568 systemd-logind[1738]: New session 10 of user core. Sep 13 01:11:47.173000 audit[5481]: USER_START pid=5481 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:47.177000 audit[5500]: CRED_ACQ pid=5500 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:47.196594 env[1748]: time="2025-09-13T01:11:47.196547726Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:47.204788 env[1748]: time="2025-09-13T01:11:47.203419106Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:47.208744 env[1748]: time="2025-09-13T01:11:47.208350666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:47.213634 env[1748]: time="2025-09-13T01:11:47.213055496Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:47.214304 env[1748]: time="2025-09-13T01:11:47.214138634Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 13 01:11:47.633189 env[1748]: time="2025-09-13T01:11:47.633085083Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 13 01:11:47.924790 env[1748]: time="2025-09-13T01:11:47.924630088Z" level=info msg="CreateContainer within sandbox \"bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 13 01:11:47.961885 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4077111137.mount: Deactivated successfully. Sep 13 01:11:47.974344 env[1748]: time="2025-09-13T01:11:47.974284650Z" level=info msg="CreateContainer within sandbox \"bff7ef031bdb98ce9df66158ea5266dbe67d08802511b88c7447e7b0774cbdf8\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"764b62678cf4698f6906de44347ce2e5c2871921879fa2b15757660c1d8f7822\"" Sep 13 01:11:48.052852 env[1748]: time="2025-09-13T01:11:48.052798271Z" level=info msg="StartContainer for \"764b62678cf4698f6906de44347ce2e5c2871921879fa2b15757660c1d8f7822\"" Sep 13 01:11:48.062932 kubelet[2911]: I0913 01:11:47.971573 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-rctrp" podStartSLOduration=36.701128705 podStartE2EDuration="53.946365639s" podCreationTimestamp="2025-09-13 01:10:54 +0000 UTC" firstStartedPulling="2025-09-13 01:11:26.478003112 +0000 UTC m=+83.053954870" lastFinishedPulling="2025-09-13 01:11:43.723240028 +0000 UTC m=+100.299191804" observedRunningTime="2025-09-13 01:11:47.921434784 +0000 UTC m=+104.497386549" watchObservedRunningTime="2025-09-13 01:11:47.946365639 +0000 UTC m=+104.522317406" Sep 13 01:11:48.128118 systemd[1]: Started cri-containerd-764b62678cf4698f6906de44347ce2e5c2871921879fa2b15757660c1d8f7822.scope. Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.189427 kernel: kauditd_printk_skb: 66 callbacks suppressed Sep 13 01:11:48.191978 kernel: audit: type=1400 audit(1757725908.182:1466): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.193778 kernel: audit: type=1400 audit(1757725908.182:1467): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.199879 kernel: audit: type=1400 audit(1757725908.182:1468): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.210458 kernel: audit: type=1400 audit(1757725908.182:1469): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.224708 kernel: audit: type=1400 audit(1757725908.182:1470): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.233793 kernel: audit: type=1400 audit(1757725908.182:1471): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.233993 kernel: audit: type=1400 audit(1757725908.182:1472): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.266700 kernel: audit: type=1400 audit(1757725908.182:1473): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.290958 kernel: audit: type=1400 audit(1757725908.182:1474): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.291113 kernel: audit: type=1400 audit(1757725908.182:1475): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.182000 audit: BPF prog-id=224 op=LOAD Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4471 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736346236323637386366343639386636393036646534343334376365 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4471 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736346236323637386366343639386636393036646534343334376365 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit: BPF prog-id=225 op=LOAD Sep 13 01:11:48.190000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000297660 items=0 ppid=4471 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736346236323637386366343639386636393036646534343334376365 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit: BPF prog-id=226 op=LOAD Sep 13 01:11:48.190000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002976a8 items=0 ppid=4471 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736346236323637386366343639386636393036646534343334376365 Sep 13 01:11:48.190000 audit: BPF prog-id=226 op=UNLOAD Sep 13 01:11:48.190000 audit: BPF prog-id=225 op=UNLOAD Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { perfmon } for pid=5525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit[5525]: AVC avc: denied { bpf } for pid=5525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:48.190000 audit: BPF prog-id=227 op=LOAD Sep 13 01:11:48.190000 audit[5525]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000297ab8 items=0 ppid=4471 pid=5525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736346236323637386366343639386636393036646534343334376365 Sep 13 01:11:48.245000 audit[5542]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=5542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:48.245000 audit[5542]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdebd273d0 a2=0 a3=7ffdebd273bc items=0 ppid=3065 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.245000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:48.255000 audit[5542]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=5542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:48.255000 audit[5542]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdebd273d0 a2=0 a3=7ffdebd273bc items=0 ppid=3065 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:48.328379 env[1748]: time="2025-09-13T01:11:48.328322593Z" level=info msg="StartContainer for \"764b62678cf4698f6906de44347ce2e5c2871921879fa2b15757660c1d8f7822\" returns successfully" Sep 13 01:11:48.389000 audit[5551]: NETFILTER_CFG table=filter:122 family=2 entries=11 op=nft_register_rule pid=5551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:48.389000 audit[5551]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd18109be0 a2=0 a3=7ffd18109bcc items=0 ppid=3065 pid=5551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:48.393000 audit[5551]: NETFILTER_CFG table=nat:123 family=2 entries=29 op=nft_register_chain pid=5551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:48.393000 audit[5551]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffd18109be0 a2=0 a3=7ffd18109bcc items=0 ppid=3065 pid=5551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.393000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:48.577082 sshd[5481]: pam_unix(sshd:session): session closed for user core Sep 13 01:11:48.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.15:22-147.75.109.163:58504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:48.588463 systemd[1]: Started sshd@10-172.31.27.15:22-147.75.109.163:58504.service. Sep 13 01:11:48.595000 audit[5481]: USER_END pid=5481 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:48.597000 audit[5481]: CRED_DISP pid=5481 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:48.604961 systemd[1]: sshd@9-172.31.27.15:22-147.75.109.163:58490.service: Deactivated successfully. Sep 13 01:11:48.606172 systemd[1]: session-10.scope: Deactivated successfully. Sep 13 01:11:48.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.15:22-147.75.109.163:58490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:48.607501 systemd-logind[1738]: Session 10 logged out. Waiting for processes to exit. Sep 13 01:11:48.608889 systemd-logind[1738]: Removed session 10. Sep 13 01:11:48.886000 audit[5556]: USER_ACCT pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:48.890952 sshd[5556]: Accepted publickey for core from 147.75.109.163 port 58504 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:11:48.890000 audit[5556]: CRED_ACQ pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:48.890000 audit[5556]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8f6d65f0 a2=3 a3=0 items=0 ppid=1 pid=5556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:48.890000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:11:48.894396 sshd[5556]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:11:48.907270 systemd[1]: Started session-11.scope. Sep 13 01:11:48.909541 systemd-logind[1738]: New session 11 of user core. Sep 13 01:11:48.920000 audit[5556]: USER_START pid=5556 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:48.926000 audit[5559]: CRED_ACQ pid=5559 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:48.997633 kubelet[2911]: I0913 01:11:48.997550 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-554ff68754-z9rfx" podStartSLOduration=3.853844644 podStartE2EDuration="27.989059173s" podCreationTimestamp="2025-09-13 01:11:21 +0000 UTC" firstStartedPulling="2025-09-13 01:11:23.454152641 +0000 UTC m=+80.030104392" lastFinishedPulling="2025-09-13 01:11:47.589367177 +0000 UTC m=+104.165318921" observedRunningTime="2025-09-13 01:11:48.984106321 +0000 UTC m=+105.560058090" watchObservedRunningTime="2025-09-13 01:11:48.989059173 +0000 UTC m=+105.565010940" Sep 13 01:11:49.170000 audit[5565]: NETFILTER_CFG table=filter:124 family=2 entries=9 op=nft_register_rule pid=5565 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:49.170000 audit[5565]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe5c7c7510 a2=0 a3=7ffe5c7c74fc items=0 ppid=3065 pid=5565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:49.170000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:49.178000 audit[5565]: NETFILTER_CFG table=nat:125 family=2 entries=31 op=nft_register_chain pid=5565 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:11:49.178000 audit[5565]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe5c7c7510 a2=0 a3=7ffe5c7c74fc items=0 ppid=3065 pid=5565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:49.178000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:11:49.702388 env[1748]: time="2025-09-13T01:11:49.702344603Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:49.739448 env[1748]: time="2025-09-13T01:11:49.739401492Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:49.744221 env[1748]: time="2025-09-13T01:11:49.743942627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:49.753239 env[1748]: time="2025-09-13T01:11:49.753195410Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:11:49.756953 env[1748]: time="2025-09-13T01:11:49.753836675Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 13 01:11:49.803233 env[1748]: time="2025-09-13T01:11:49.802421238Z" level=info msg="CreateContainer within sandbox \"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 13 01:11:49.837728 env[1748]: time="2025-09-13T01:11:49.837676478Z" level=info msg="CreateContainer within sandbox \"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"2aa43c082f76d283ac88727b29d2f52bd1f307c1f82d44823bb97f8c6ed4ba90\"" Sep 13 01:11:49.842432 env[1748]: time="2025-09-13T01:11:49.842384505Z" level=info msg="StartContainer for \"2aa43c082f76d283ac88727b29d2f52bd1f307c1f82d44823bb97f8c6ed4ba90\"" Sep 13 01:11:49.893414 sshd[5556]: pam_unix(sshd:session): session closed for user core Sep 13 01:11:49.901028 systemd[1]: run-containerd-runc-k8s.io-2aa43c082f76d283ac88727b29d2f52bd1f307c1f82d44823bb97f8c6ed4ba90-runc.ubdLJr.mount: Deactivated successfully. Sep 13 01:11:49.904000 audit[5556]: USER_END pid=5556 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:49.905000 audit[5556]: CRED_DISP pid=5556 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:49.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.15:22-147.75.109.163:58504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:49.908906 systemd[1]: sshd@10-172.31.27.15:22-147.75.109.163:58504.service: Deactivated successfully. Sep 13 01:11:49.913541 systemd[1]: session-11.scope: Deactivated successfully. Sep 13 01:11:49.917322 systemd[1]: Started cri-containerd-2aa43c082f76d283ac88727b29d2f52bd1f307c1f82d44823bb97f8c6ed4ba90.scope. Sep 13 01:11:49.918005 systemd-logind[1738]: Session 11 logged out. Waiting for processes to exit. Sep 13 01:11:49.921115 systemd-logind[1738]: Removed session 11. Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7feebc28a5f8 items=0 ppid=4965 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:49.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613433633038326637366432383361633838373237623239643266 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit: BPF prog-id=228 op=LOAD Sep 13 01:11:49.952000 audit[5578]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000215408 items=0 ppid=4965 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:49.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613433633038326637366432383361633838373237623239643266 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit: BPF prog-id=229 op=LOAD Sep 13 01:11:49.952000 audit[5578]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000215458 items=0 ppid=4965 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:49.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613433633038326637366432383361633838373237623239643266 Sep 13 01:11:49.952000 audit: BPF prog-id=229 op=UNLOAD Sep 13 01:11:49.952000 audit: BPF prog-id=228 op=UNLOAD Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { perfmon } for pid=5578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit[5578]: AVC avc: denied { bpf } for pid=5578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:11:49.952000 audit: BPF prog-id=230 op=LOAD Sep 13 01:11:49.952000 audit[5578]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0002154e8 items=0 ppid=4965 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:49.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261613433633038326637366432383361633838373237623239643266 Sep 13 01:11:49.986864 env[1748]: time="2025-09-13T01:11:49.986760030Z" level=info msg="StartContainer for \"2aa43c082f76d283ac88727b29d2f52bd1f307c1f82d44823bb97f8c6ed4ba90\" returns successfully" Sep 13 01:11:50.277687 kubelet[2911]: I0913 01:11:50.274819 2911 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 13 01:11:50.278167 kubelet[2911]: I0913 01:11:50.277714 2911 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 13 01:11:50.827095 systemd[1]: run-containerd-runc-k8s.io-6258e6f227fc3dde99e9b7567bb07dc6241d6da8b4f3443777382644e66030b8-runc.qwvXfo.mount: Deactivated successfully. Sep 13 01:11:51.098000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:51.098000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ac6d50 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:51.098000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:51.098000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:51.098000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002f9ea20 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:11:51.098000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:11:51.510380 kubelet[2911]: I0913 01:11:51.507115 2911 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-p9jh8" podStartSLOduration=33.471051839 podStartE2EDuration="57.484904843s" podCreationTimestamp="2025-09-13 01:10:54 +0000 UTC" firstStartedPulling="2025-09-13 01:11:25.747837352 +0000 UTC m=+82.323789112" lastFinishedPulling="2025-09-13 01:11:49.761690357 +0000 UTC m=+106.337642116" observedRunningTime="2025-09-13 01:11:51.047778598 +0000 UTC m=+107.623730363" watchObservedRunningTime="2025-09-13 01:11:51.484904843 +0000 UTC m=+108.060856632" Sep 13 01:11:54.934243 kernel: kauditd_printk_skb: 128 callbacks suppressed Sep 13 01:11:54.938708 kernel: audit: type=1130 audit(1757725914.923:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.15:22-147.75.109.163:51434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:54.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.15:22-147.75.109.163:51434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:54.923675 systemd[1]: Started sshd@11-172.31.27.15:22-147.75.109.163:51434.service. Sep 13 01:11:55.230000 audit[5634]: USER_ACCT pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:55.264370 kernel: audit: type=1101 audit(1757725915.230:1511): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:55.264468 kernel: audit: type=1103 audit(1757725915.245:1512): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:55.245000 audit[5634]: CRED_ACQ pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:55.248830 sshd[5634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:11:55.269289 sshd[5634]: Accepted publickey for core from 147.75.109.163 port 51434 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:11:55.276154 kernel: audit: type=1006 audit(1757725915.245:1513): pid=5634 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 13 01:11:55.245000 audit[5634]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc691977f0 a2=3 a3=0 items=0 ppid=1 pid=5634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:55.288614 kernel: audit: type=1300 audit(1757725915.245:1513): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc691977f0 a2=3 a3=0 items=0 ppid=1 pid=5634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:11:55.289367 kernel: audit: type=1327 audit(1757725915.245:1513): proctitle=737368643A20636F7265205B707269765D Sep 13 01:11:55.245000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:11:55.280781 systemd-logind[1738]: New session 12 of user core. Sep 13 01:11:55.286866 systemd[1]: Started session-12.scope. Sep 13 01:11:55.320537 kernel: audit: type=1105 audit(1757725915.307:1514): pid=5634 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:55.307000 audit[5634]: USER_START pid=5634 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:55.320000 audit[5637]: CRED_ACQ pid=5637 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:55.333697 kernel: audit: type=1103 audit(1757725915.320:1515): pid=5637 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:56.550357 sshd[5634]: pam_unix(sshd:session): session closed for user core Sep 13 01:11:56.564293 kernel: audit: type=1106 audit(1757725916.551:1516): pid=5634 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:56.551000 audit[5634]: USER_END pid=5634 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:56.556736 systemd-logind[1738]: Session 12 logged out. Waiting for processes to exit. Sep 13 01:11:56.558493 systemd[1]: sshd@11-172.31.27.15:22-147.75.109.163:51434.service: Deactivated successfully. Sep 13 01:11:56.559538 systemd[1]: session-12.scope: Deactivated successfully. Sep 13 01:11:56.561282 systemd-logind[1738]: Removed session 12. Sep 13 01:11:56.551000 audit[5634]: CRED_DISP pid=5634 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:56.577717 kernel: audit: type=1104 audit(1757725916.551:1517): pid=5634 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:11:56.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.15:22-147.75.109.163:51434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:11:57.263000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:57.263000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c0145f2d20 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:11:57.263000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:11:57.264000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:57.264000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c0145f2d50 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:11:57.264000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:11:57.264000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:57.264000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=87 a1=c014a96580 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:11:57.264000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:11:57.269000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:57.269000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c012f13b60 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:11:57.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:11:57.362000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:57.362000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:11:57.362000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=87 a1=c010fa7380 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:11:57.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:11:57.362000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c01275ab00 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:11:57.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:01.595091 systemd[1]: Started sshd@12-172.31.27.15:22-147.75.109.163:59294.service. Sep 13 01:12:01.616276 kernel: kauditd_printk_skb: 19 callbacks suppressed Sep 13 01:12:01.618146 kernel: audit: type=1130 audit(1757725921.604:1525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.15:22-147.75.109.163:59294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:01.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.15:22-147.75.109.163:59294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:01.913000 audit[5669]: USER_ACCT pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:02.081650 kernel: audit: type=1101 audit(1757725921.913:1526): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:02.081815 kernel: audit: type=1103 audit(1757725921.954:1527): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:02.081862 kernel: audit: type=1006 audit(1757725921.954:1528): pid=5669 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 13 01:12:02.082627 kernel: audit: type=1300 audit(1757725921.954:1528): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff307964e0 a2=3 a3=0 items=0 ppid=1 pid=5669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:01.954000 audit[5669]: CRED_ACQ pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:01.954000 audit[5669]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff307964e0 a2=3 a3=0 items=0 ppid=1 pid=5669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:02.114033 sshd[5669]: Accepted publickey for core from 147.75.109.163 port 59294 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:12:01.971811 sshd[5669]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:12:02.199791 kernel: audit: type=1327 audit(1757725921.954:1528): proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:01.954000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:02.171169 systemd-logind[1738]: New session 13 of user core. Sep 13 01:12:02.172813 systemd[1]: Started session-13.scope. Sep 13 01:12:02.317000 audit[5669]: USER_START pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:02.329000 audit[5671]: CRED_ACQ pid=5671 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:02.422488 kernel: audit: type=1105 audit(1757725922.317:1529): pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:02.422779 kernel: audit: type=1103 audit(1757725922.329:1530): pid=5671 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:04.513000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:04.530695 kernel: audit: type=1400 audit(1757725924.513:1531): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:04.513000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f35ee0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:12:04.546614 kernel: audit: type=1300 audit(1757725924.513:1531): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f35ee0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:12:04.513000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:12:04.530000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:04.530000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00329fa40 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:12:04.530000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:12:04.530000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:04.530000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f35f00 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:12:04.530000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:12:04.540000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:04.540000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00337c0a0 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:12:04.540000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:12:05.152988 env[1748]: time="2025-09-13T01:12:05.152804671Z" level=info msg="StopPodSandbox for \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\"" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:05.936 [WARNING][5689] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"88619eea-3f88-422d-abc9-279657f0d3b6", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d", Pod:"coredns-674b8bbfcf-f4knm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6458d5cad82", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:05.957 [INFO][5689] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:05.957 [INFO][5689] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" iface="eth0" netns="" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:05.957 [INFO][5689] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:05.957 [INFO][5689] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:06.462 [INFO][5696] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:06.470 [INFO][5696] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:06.473 [INFO][5696] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:06.494 [WARNING][5696] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:06.494 [INFO][5696] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:06.497 [INFO][5696] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:06.509869 env[1748]: 2025-09-13 01:12:06.502 [INFO][5689] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:06.509869 env[1748]: time="2025-09-13T01:12:06.510052035Z" level=info msg="TearDown network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\" successfully" Sep 13 01:12:06.509869 env[1748]: time="2025-09-13T01:12:06.510085457Z" level=info msg="StopPodSandbox for \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\" returns successfully" Sep 13 01:12:06.952795 env[1748]: time="2025-09-13T01:12:06.950121627Z" level=info msg="RemovePodSandbox for \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\"" Sep 13 01:12:06.952795 env[1748]: time="2025-09-13T01:12:06.951206376Z" level=info msg="Forcibly stopping sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\"" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.336 [WARNING][5710] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"88619eea-3f88-422d-abc9-279657f0d3b6", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"74acd45b53c6ef2700a567753c3e4f4ef8fd13cde9302844b69b9b423f71c76d", Pod:"coredns-674b8bbfcf-f4knm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6458d5cad82", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.342 [INFO][5710] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.342 [INFO][5710] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" iface="eth0" netns="" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.342 [INFO][5710] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.342 [INFO][5710] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.754 [INFO][5718] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.762 [INFO][5718] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.764 [INFO][5718] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.815 [WARNING][5718] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.815 [INFO][5718] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" HandleID="k8s-pod-network.cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--f4knm-eth0" Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.823 [INFO][5718] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:07.851847 env[1748]: 2025-09-13 01:12:07.834 [INFO][5710] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04" Sep 13 01:12:07.891145 env[1748]: time="2025-09-13T01:12:07.852004599Z" level=info msg="TearDown network for sandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\" successfully" Sep 13 01:12:07.891145 env[1748]: time="2025-09-13T01:12:07.874356211Z" level=info msg="RemovePodSandbox \"cf8e103b8b542876b1414203659f6a5a81c4d7f44046b2b71e90f4d7ffe37e04\" returns successfully" Sep 13 01:12:08.917732 env[1748]: time="2025-09-13T01:12:08.917222002Z" level=info msg="StopPodSandbox for \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\"" Sep 13 01:12:09.380764 sshd[5669]: pam_unix(sshd:session): session closed for user core Sep 13 01:12:09.463764 kernel: kauditd_printk_skb: 10 callbacks suppressed Sep 13 01:12:09.491899 kernel: audit: type=1106 audit(1757725929.448:1535): pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:09.493629 kernel: audit: type=1104 audit(1757725929.460:1536): pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:09.496103 kernel: audit: type=1131 audit(1757725929.480:1537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.15:22-147.75.109.163:59294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:09.448000 audit[5669]: USER_END pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:09.460000 audit[5669]: CRED_DISP pid=5669 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:09.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.15:22-147.75.109.163:59294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:09.471442 systemd[1]: sshd@12-172.31.27.15:22-147.75.109.163:59294.service: Deactivated successfully. Sep 13 01:12:09.487114 systemd[1]: session-13.scope: Deactivated successfully. Sep 13 01:12:09.487318 systemd[1]: session-13.scope: Consumed 1.302s CPU time. Sep 13 01:12:09.492578 systemd-logind[1738]: Session 13 logged out. Waiting for processes to exit. Sep 13 01:12:09.542258 systemd-logind[1738]: Removed session 13. Sep 13 01:12:10.263679 kubelet[2911]: E0913 01:12:10.263590 2911 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.59s" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:09.935 [WARNING][5741] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5a9d0e00-dcb6-4851-8665-0e6584f4aec1", ResourceVersion:"1199", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b", Pod:"goldmane-54d579b49d-rctrp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.31.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali103ae138570", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:09.939 [INFO][5741] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:09.939 [INFO][5741] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" iface="eth0" netns="" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:09.939 [INFO][5741] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:09.939 [INFO][5741] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:10.418 [INFO][5789] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:10.424 [INFO][5789] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:10.425 [INFO][5789] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:10.518 [WARNING][5789] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:10.518 [INFO][5789] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:10.522 [INFO][5789] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:10.550123 env[1748]: 2025-09-13 01:12:10.542 [INFO][5741] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:10.550123 env[1748]: time="2025-09-13T01:12:10.550085209Z" level=info msg="TearDown network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\" successfully" Sep 13 01:12:10.550123 env[1748]: time="2025-09-13T01:12:10.550112368Z" level=info msg="StopPodSandbox for \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\" returns successfully" Sep 13 01:12:10.592612 env[1748]: time="2025-09-13T01:12:10.592512081Z" level=info msg="RemovePodSandbox for \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\"" Sep 13 01:12:10.592792 env[1748]: time="2025-09-13T01:12:10.592612420Z" level=info msg="Forcibly stopping sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\"" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:12.613 [WARNING][5803] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"5a9d0e00-dcb6-4851-8665-0e6584f4aec1", ResourceVersion:"1199", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"78a33603bb5b98228cd22096286eeb65ba28831403586cf837f646ca0124400b", Pod:"goldmane-54d579b49d-rctrp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.31.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali103ae138570", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:12.641 [INFO][5803] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:12.641 [INFO][5803] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" iface="eth0" netns="" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:12.641 [INFO][5803] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:12.641 [INFO][5803] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:13.270 [INFO][5810] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:13.295 [INFO][5810] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:13.298 [INFO][5810] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:13.340 [WARNING][5810] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:13.340 [INFO][5810] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" HandleID="k8s-pod-network.9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Workload="ip--172--31--27--15-k8s-goldmane--54d579b49d--rctrp-eth0" Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:13.347 [INFO][5810] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:13.400177 env[1748]: 2025-09-13 01:12:13.361 [INFO][5803] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c" Sep 13 01:12:13.400177 env[1748]: time="2025-09-13T01:12:13.389404489Z" level=info msg="TearDown network for sandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\" successfully" Sep 13 01:12:13.567979 env[1748]: time="2025-09-13T01:12:13.409024457Z" level=info msg="RemovePodSandbox \"9a0ce90e2588e7b0c6649be4f3b0b73b5e46b0024e302bf5e397f2eb537c352c\" returns successfully" Sep 13 01:12:13.677388 env[1748]: time="2025-09-13T01:12:13.676761748Z" level=info msg="StopPodSandbox for \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\"" Sep 13 01:12:14.502517 systemd[1]: Started sshd@13-172.31.27.15:22-147.75.109.163:51754.service. Sep 13 01:12:14.528454 kernel: audit: type=1130 audit(1757725934.507:1538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.15:22-147.75.109.163:51754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:14.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.15:22-147.75.109.163:51754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.183 [WARNING][5825] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.188 [INFO][5825] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.188 [INFO][5825] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" iface="eth0" netns="" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.188 [INFO][5825] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.188 [INFO][5825] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.891 [INFO][5832] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.898 [INFO][5832] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.899 [INFO][5832] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.928 [WARNING][5832] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.928 [INFO][5832] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.930 [INFO][5832] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:14.937856 env[1748]: 2025-09-13 01:12:14.934 [INFO][5825] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:14.942000 audit[5837]: USER_ACCT pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:14.974716 kernel: audit: type=1101 audit(1757725934.942:1539): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:14.974840 kernel: audit: type=1103 audit(1757725934.953:1540): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:14.974880 kernel: audit: type=1006 audit(1757725934.953:1541): pid=5837 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 13 01:12:14.953000 audit[5837]: CRED_ACQ pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:14.953000 audit[5837]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7a845440 a2=3 a3=0 items=0 ppid=1 pid=5837 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:15.002376 kernel: audit: type=1300 audit(1757725934.953:1541): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7a845440 a2=3 a3=0 items=0 ppid=1 pid=5837 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:15.002484 kernel: audit: type=1327 audit(1757725934.953:1541): proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:14.953000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:15.002763 env[1748]: time="2025-09-13T01:12:14.938569313Z" level=info msg="TearDown network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\" successfully" Sep 13 01:12:15.002763 env[1748]: time="2025-09-13T01:12:14.938618346Z" level=info msg="StopPodSandbox for \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\" returns successfully" Sep 13 01:12:15.002763 env[1748]: time="2025-09-13T01:12:14.998069976Z" level=info msg="RemovePodSandbox for \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\"" Sep 13 01:12:15.002763 env[1748]: time="2025-09-13T01:12:14.998119612Z" level=info msg="Forcibly stopping sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\"" Sep 13 01:12:15.002998 sshd[5837]: Accepted publickey for core from 147.75.109.163 port 51754 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:12:14.960354 sshd[5837]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:12:15.022814 systemd[1]: Started session-14.scope. Sep 13 01:12:15.023319 systemd-logind[1738]: New session 14 of user core. Sep 13 01:12:15.052762 kernel: audit: type=1105 audit(1757725935.038:1542): pid=5837 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:15.038000 audit[5837]: USER_START pid=5837 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:15.051000 audit[5846]: CRED_ACQ pid=5846 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:15.064798 kernel: audit: type=1103 audit(1757725935.051:1543): pid=5846 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.174 [WARNING][5851] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" WorkloadEndpoint="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.180 [INFO][5851] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.180 [INFO][5851] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" iface="eth0" netns="" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.180 [INFO][5851] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.181 [INFO][5851] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.653 [INFO][5861] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.655 [INFO][5861] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.656 [INFO][5861] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.703 [WARNING][5861] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.703 [INFO][5861] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" HandleID="k8s-pod-network.bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Workload="ip--172--31--27--15-k8s-whisker--cb5c4f999--v8r94-eth0" Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.712 [INFO][5861] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:15.718719 env[1748]: 2025-09-13 01:12:15.716 [INFO][5851] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31" Sep 13 01:12:15.720554 env[1748]: time="2025-09-13T01:12:15.719553554Z" level=info msg="TearDown network for sandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\" successfully" Sep 13 01:12:15.744899 env[1748]: time="2025-09-13T01:12:15.744802132Z" level=info msg="RemovePodSandbox \"bcf16a9ae34e699fdfbb680969650ab758e8064439dfdf2773f9010b00e0cd31\" returns successfully" Sep 13 01:12:16.154734 env[1748]: time="2025-09-13T01:12:16.153740097Z" level=info msg="StopPodSandbox for \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\"" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:16.841 [WARNING][5880] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"374abec8-51d5-4f8f-bf3e-193eab0492f1", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655", Pod:"calico-apiserver-669f46fc95-kdqwx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib67edea235a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:16.850 [INFO][5880] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:16.850 [INFO][5880] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" iface="eth0" netns="" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:16.850 [INFO][5880] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:16.850 [INFO][5880] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:17.506 [INFO][5888] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:17.508 [INFO][5888] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:17.508 [INFO][5888] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:17.529 [WARNING][5888] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:17.529 [INFO][5888] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:17.532 [INFO][5888] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:17.540890 env[1748]: 2025-09-13 01:12:17.536 [INFO][5880] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:17.569817 env[1748]: time="2025-09-13T01:12:17.541480369Z" level=info msg="TearDown network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\" successfully" Sep 13 01:12:17.569817 env[1748]: time="2025-09-13T01:12:17.541535058Z" level=info msg="StopPodSandbox for \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\" returns successfully" Sep 13 01:12:19.152589 env[1748]: time="2025-09-13T01:12:19.152521915Z" level=info msg="RemovePodSandbox for \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\"" Sep 13 01:12:19.181690 env[1748]: time="2025-09-13T01:12:19.153340895Z" level=info msg="Forcibly stopping sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\"" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.030 [WARNING][5924] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"374abec8-51d5-4f8f-bf3e-193eab0492f1", ResourceVersion:"1109", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"daa0f81079c378fb9927c08c203680f00a244d427512ad1b68318b47bd83d655", Pod:"calico-apiserver-669f46fc95-kdqwx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib67edea235a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.077 [INFO][5924] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.078 [INFO][5924] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" iface="eth0" netns="" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.080 [INFO][5924] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.080 [INFO][5924] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.876 [INFO][5931] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.885 [INFO][5931] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.886 [INFO][5931] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.914 [WARNING][5931] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.914 [INFO][5931] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" HandleID="k8s-pod-network.3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--kdqwx-eth0" Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.918 [INFO][5931] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:20.951514 env[1748]: 2025-09-13 01:12:20.927 [INFO][5924] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46" Sep 13 01:12:20.951514 env[1748]: time="2025-09-13T01:12:20.943249008Z" level=info msg="TearDown network for sandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\" successfully" Sep 13 01:12:21.153479 env[1748]: time="2025-09-13T01:12:20.963572487Z" level=info msg="RemovePodSandbox \"3764ecb3ec83ae823e4f661a33a39ec40de5dad67c2f193b2105ed3960867f46\" returns successfully" Sep 13 01:12:22.203998 sshd[5837]: pam_unix(sshd:session): session closed for user core Sep 13 01:12:22.218971 update_engine[1740]: I0913 01:12:22.200934 1740 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Sep 13 01:12:22.218971 update_engine[1740]: I0913 01:12:22.204308 1740 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Sep 13 01:12:22.218971 update_engine[1740]: I0913 01:12:22.214735 1740 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Sep 13 01:12:22.218971 update_engine[1740]: I0913 01:12:22.217818 1740 omaha_request_params.cc:62] Current group set to lts Sep 13 01:12:22.247122 update_engine[1740]: I0913 01:12:22.247002 1740 update_attempter.cc:499] Already updated boot flags. Skipping. Sep 13 01:12:22.247122 update_engine[1740]: I0913 01:12:22.247032 1740 update_attempter.cc:643] Scheduling an action processor start. Sep 13 01:12:22.247122 update_engine[1740]: I0913 01:12:22.247057 1740 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 13 01:12:22.260375 update_engine[1740]: I0913 01:12:22.256982 1740 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Sep 13 01:12:22.260375 update_engine[1740]: I0913 01:12:22.257099 1740 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 13 01:12:22.260375 update_engine[1740]: I0913 01:12:22.257107 1740 omaha_request_action.cc:271] Request: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: Sep 13 01:12:22.260375 update_engine[1740]: I0913 01:12:22.257114 1740 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:12:22.290172 kernel: audit: type=1130 audit(1757725942.271:1544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.15:22-147.75.109.163:39744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:22.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.15:22-147.75.109.163:39744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:22.318969 kernel: audit: type=1106 audit(1757725942.298:1545): pid=5837 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.298000 audit[5837]: USER_END pid=5837 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.298000 audit[5837]: CRED_DISP pid=5837 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.271432 systemd[1]: Started sshd@14-172.31.27.15:22-147.75.109.163:39744.service. Sep 13 01:12:22.337006 kernel: audit: type=1104 audit(1757725942.298:1546): pid=5837 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.337858 kernel: audit: type=1131 audit(1757725942.298:1547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.15:22-147.75.109.163:51754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:22.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.15:22-147.75.109.163:51754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:22.340023 update_engine[1740]: I0913 01:12:22.336154 1740 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:12:22.340023 update_engine[1740]: I0913 01:12:22.338064 1740 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:12:22.301880 systemd[1]: sshd@13-172.31.27.15:22-147.75.109.163:51754.service: Deactivated successfully. Sep 13 01:12:22.305580 systemd[1]: session-14.scope: Deactivated successfully. Sep 13 01:12:22.305777 systemd[1]: session-14.scope: Consumed 1.700s CPU time. Sep 13 01:12:22.317953 systemd-logind[1738]: Session 14 logged out. Waiting for processes to exit. Sep 13 01:12:22.319343 systemd-logind[1738]: Removed session 14. Sep 13 01:12:22.366039 update_engine[1740]: E0913 01:12:22.365867 1740 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:12:22.366039 update_engine[1740]: I0913 01:12:22.366000 1740 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Sep 13 01:12:22.429681 locksmithd[1812]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Sep 13 01:12:22.547000 audit[5938]: USER_ACCT pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.559306 kernel: audit: type=1101 audit(1757725942.547:1548): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.559402 sshd[5938]: Accepted publickey for core from 147.75.109.163 port 39744 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:12:22.560947 sshd[5938]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:12:22.557000 audit[5938]: CRED_ACQ pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.577197 kernel: audit: type=1103 audit(1757725942.557:1549): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.590673 kernel: audit: type=1006 audit(1757725942.557:1550): pid=5938 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 13 01:12:22.557000 audit[5938]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec90b5550 a2=3 a3=0 items=0 ppid=1 pid=5938 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:22.610507 kernel: audit: type=1300 audit(1757725942.557:1550): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec90b5550 a2=3 a3=0 items=0 ppid=1 pid=5938 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:22.557000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:22.617759 kernel: audit: type=1327 audit(1757725942.557:1550): proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:22.630924 systemd[1]: Started session-15.scope. Sep 13 01:12:22.633091 systemd-logind[1738]: New session 15 of user core. Sep 13 01:12:22.654502 kernel: audit: type=1105 audit(1757725942.639:1551): pid=5938 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.639000 audit[5938]: USER_START pid=5938 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.653000 audit[5941]: CRED_ACQ pid=5941 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:22.963725 env[1748]: time="2025-09-13T01:12:22.963570145Z" level=info msg="StopPodSandbox for \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\"" Sep 13 01:12:23.187163 kubelet[2911]: E0913 01:12:23.187125 2911 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="6.972s" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:23.756 [WARNING][5966] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684", Pod:"coredns-674b8bbfcf-gnfr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5f17cae898", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:23.762 [INFO][5966] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:23.762 [INFO][5966] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" iface="eth0" netns="" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:23.762 [INFO][5966] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:23.762 [INFO][5966] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:24.506 [INFO][5986] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:24.519 [INFO][5986] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:24.523 [INFO][5986] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:24.729 [WARNING][5986] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:24.729 [INFO][5986] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:24.753 [INFO][5986] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:24.936648 env[1748]: 2025-09-13 01:12:24.880 [INFO][5966] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:24.936648 env[1748]: time="2025-09-13T01:12:24.904882934Z" level=info msg="TearDown network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\" successfully" Sep 13 01:12:24.936648 env[1748]: time="2025-09-13T01:12:24.904929971Z" level=info msg="StopPodSandbox for \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\" returns successfully" Sep 13 01:12:27.123894 env[1748]: time="2025-09-13T01:12:27.120840242Z" level=info msg="RemovePodSandbox for \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\"" Sep 13 01:12:27.123894 env[1748]: time="2025-09-13T01:12:27.120890107Z" level=info msg="Forcibly stopping sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\"" Sep 13 01:12:27.392609 kubelet[2911]: E0913 01:12:27.380438 2911 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.414s" Sep 13 01:12:28.342767 sshd[5938]: pam_unix(sshd:session): session closed for user core Sep 13 01:12:28.492492 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:12:28.511214 kernel: audit: type=1106 audit(1757725948.436:1553): pid=5938 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:28.529190 kernel: audit: type=1104 audit(1757725948.447:1554): pid=5938 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:28.529324 kernel: audit: type=1130 audit(1757725948.477:1555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.15:22-147.75.109.163:39754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:28.436000 audit[5938]: USER_END pid=5938 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:28.589141 kernel: audit: type=1131 audit(1757725948.530:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.15:22-147.75.109.163:39744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:28.447000 audit[5938]: CRED_DISP pid=5938 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:28.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.15:22-147.75.109.163:39754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:28.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.15:22-147.75.109.163:39744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:28.478245 systemd[1]: Started sshd@15-172.31.27.15:22-147.75.109.163:39754.service. Sep 13 01:12:28.531176 systemd[1]: sshd@14-172.31.27.15:22-147.75.109.163:39744.service: Deactivated successfully. Sep 13 01:12:28.542284 systemd[1]: session-15.scope: Deactivated successfully. Sep 13 01:12:28.547184 systemd-logind[1738]: Session 15 logged out. Waiting for processes to exit. Sep 13 01:12:28.556496 systemd-logind[1738]: Removed session 15. Sep 13 01:12:29.022689 kernel: audit: type=1101 audit(1757725949.012:1557): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:29.012000 audit[6012]: USER_ACCT pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:29.027305 sshd[6012]: Accepted publickey for core from 147.75.109.163 port 39754 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:12:29.022000 audit[6012]: CRED_ACQ pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:29.026634 sshd[6012]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:12:29.039303 kernel: audit: type=1103 audit(1757725949.022:1558): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:29.045713 kernel: audit: type=1006 audit(1757725949.022:1559): pid=6012 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 13 01:12:29.045881 kernel: audit: type=1300 audit(1757725949.022:1559): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc039fb3e0 a2=3 a3=0 items=0 ppid=1 pid=6012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:29.022000 audit[6012]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc039fb3e0 a2=3 a3=0 items=0 ppid=1 pid=6012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:29.143373 kernel: audit: type=1327 audit(1757725949.022:1559): proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:29.022000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:29.288410 systemd[1]: Started session-16.scope. Sep 13 01:12:29.289760 systemd-logind[1738]: New session 16 of user core. Sep 13 01:12:29.295000 audit[6012]: USER_START pid=6012 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:29.307236 kernel: audit: type=1105 audit(1757725949.295:1560): pid=6012 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:29.316000 audit[6021]: CRED_ACQ pid=6021 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:28.728 [WARNING][6004] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"b0ad198e-b7d8-4aca-9152-6be1b3a26aa7", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"f9cb77fbfdcce53b76a94bf006f95e86f414499bfc146a23d4013d14ea8eb684", Pod:"coredns-674b8bbfcf-gnfr7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.31.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5f17cae898", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:28.834 [INFO][6004] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:28.834 [INFO][6004] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" iface="eth0" netns="" Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:28.835 [INFO][6004] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:28.835 [INFO][6004] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:31.471 [INFO][6016] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:31.512 [INFO][6016] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:31.512 [INFO][6016] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:31.814 [WARNING][6016] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:31.814 [INFO][6016] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" HandleID="k8s-pod-network.667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Workload="ip--172--31--27--15-k8s-coredns--674b8bbfcf--gnfr7-eth0" Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:31.829 [INFO][6016] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:32.017134 env[1748]: 2025-09-13 01:12:31.935 [INFO][6004] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107" Sep 13 01:12:32.017134 env[1748]: time="2025-09-13T01:12:32.001276753Z" level=info msg="TearDown network for sandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\" successfully" Sep 13 01:12:32.295739 env[1748]: time="2025-09-13T01:12:32.047150247Z" level=info msg="RemovePodSandbox \"667969c53d88b03086bb55561adefe63ccf20924152f0c8745974868f1ca3107\" returns successfully" Sep 13 01:12:32.295818 update_engine[1740]: I0913 01:12:32.192873 1740 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:12:32.295818 update_engine[1740]: I0913 01:12:32.239774 1740 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:12:32.295818 update_engine[1740]: I0913 01:12:32.244226 1740 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:12:32.295818 update_engine[1740]: E0913 01:12:32.260782 1740 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:12:32.295818 update_engine[1740]: I0913 01:12:32.260950 1740 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Sep 13 01:12:34.275674 env[1748]: time="2025-09-13T01:12:34.275609682Z" level=info msg="StopPodSandbox for \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\"" Sep 13 01:12:34.574067 kubelet[2911]: E0913 01:12:34.019772 2911 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="5.347s" Sep 13 01:12:36.128734 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:12:36.251706 kernel: audit: type=1400 audit(1757725956.120:1562): avc: denied { watch } for pid=5258 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.313247475/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c459,c974 tclass=file permissive=0 Sep 13 01:12:36.253487 kernel: audit: type=1300 audit(1757725956.120:1562): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001a47540 a2=fc6 a3=0 items=0 ppid=4431 pid=5258 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 key=(null) Sep 13 01:12:36.253768 kernel: audit: type=1327 audit(1757725956.120:1562): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:12:36.120000 audit[5258]: AVC avc: denied { watch } for pid=5258 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.313247475/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c459,c974 tclass=file permissive=0 Sep 13 01:12:36.120000 audit[5258]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001a47540 a2=fc6 a3=0 items=0 ppid=4431 pid=5258 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 key=(null) Sep 13 01:12:36.120000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:35.690 [WARNING][6083] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"5f00d1b8-5e83-4b8b-ab26-87798c93eddb", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5", Pod:"calico-apiserver-669f46fc95-4lw7t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali61f8aa88016", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:35.698 [INFO][6083] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:35.698 [INFO][6083] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" iface="eth0" netns="" Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:35.698 [INFO][6083] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:35.698 [INFO][6083] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:36.228 [INFO][6090] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:36.244 [INFO][6090] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:36.246 [INFO][6090] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:37.713 [WARNING][6090] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:37.846 [INFO][6090] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:38.090 [INFO][6090] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:38.726236 env[1748]: 2025-09-13 01:12:38.433 [INFO][6083] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:38.726236 env[1748]: time="2025-09-13T01:12:38.665870728Z" level=info msg="TearDown network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\" successfully" Sep 13 01:12:38.726236 env[1748]: time="2025-09-13T01:12:38.665920588Z" level=info msg="StopPodSandbox for \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\" returns successfully" Sep 13 01:12:39.561132 kernel: audit: type=1400 audit(1757725959.179:1563): avc: denied { watch } for pid=5333 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.2829829244/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c127,c604 tclass=file permissive=0 Sep 13 01:12:39.568268 kernel: audit: type=1300 audit(1757725959.179:1563): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001284500 a2=fc6 a3=0 items=0 ppid=4907 pid=5333 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 key=(null) Sep 13 01:12:39.568360 kernel: audit: type=1327 audit(1757725959.179:1563): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:12:39.179000 audit[5333]: AVC avc: denied { watch } for pid=5333 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.2829829244/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c127,c604 tclass=file permissive=0 Sep 13 01:12:39.179000 audit[5333]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001284500 a2=fc6 a3=0 items=0 ppid=4907 pid=5333 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 key=(null) Sep 13 01:12:39.179000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:12:40.238000 audit[6099]: NETFILTER_CFG table=filter:126 family=2 entries=20 op=nft_register_rule pid=6099 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:40.269650 kernel: audit: type=1325 audit(1757725960.238:1564): table=filter:126 family=2 entries=20 op=nft_register_rule pid=6099 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:40.283484 kernel: audit: type=1300 audit(1757725960.238:1564): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcb29dd0f0 a2=0 a3=7ffcb29dd0dc items=0 ppid=3065 pid=6099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:40.283648 kernel: audit: type=1327 audit(1757725960.238:1564): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:12:40.286056 kernel: audit: type=1325 audit(1757725960.261:1565): table=nat:127 family=2 entries=26 op=nft_register_rule pid=6099 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:40.238000 audit[6099]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcb29dd0f0 a2=0 a3=7ffcb29dd0dc items=0 ppid=3065 pid=6099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:40.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:12:40.261000 audit[6099]: NETFILTER_CFG table=nat:127 family=2 entries=26 op=nft_register_rule pid=6099 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:40.261000 audit[6099]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffcb29dd0f0 a2=0 a3=0 items=0 ppid=3065 pid=6099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:40.261000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:12:40.286000 audit[6101]: NETFILTER_CFG table=filter:128 family=2 entries=32 op=nft_register_rule pid=6101 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:40.286000 audit[6101]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffca33b8450 a2=0 a3=7ffca33b843c items=0 ppid=3065 pid=6101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:40.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:12:40.291000 audit[6101]: NETFILTER_CFG table=nat:129 family=2 entries=26 op=nft_register_rule pid=6101 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:40.291000 audit[6101]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffca33b8450 a2=0 a3=0 items=0 ppid=3065 pid=6101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:40.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:12:41.099460 sshd[6012]: pam_unix(sshd:session): session closed for user core Sep 13 01:12:41.232697 kernel: kauditd_printk_skb: 8 callbacks suppressed Sep 13 01:12:41.233760 kernel: audit: type=1106 audit(1757725961.221:1568): pid=6012 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.240037 kernel: audit: type=1130 audit(1757725961.226:1569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.15:22-147.75.109.163:34014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:41.221000 audit[6012]: USER_END pid=6012 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.246644 kernel: audit: type=1104 audit(1757725961.231:1570): pid=6012 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.15:22-147.75.109.163:34014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:41.258157 kernel: audit: type=1131 audit(1757725961.238:1571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.15:22-147.75.109.163:39754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:41.231000 audit[6012]: CRED_DISP pid=6012 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.15:22-147.75.109.163:39754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:41.228695 systemd[1]: Started sshd@16-172.31.27.15:22-147.75.109.163:34014.service. Sep 13 01:12:41.240785 systemd[1]: sshd@15-172.31.27.15:22-147.75.109.163:39754.service: Deactivated successfully. Sep 13 01:12:41.242684 systemd[1]: session-16.scope: Deactivated successfully. Sep 13 01:12:41.248284 systemd-logind[1738]: Session 16 logged out. Waiting for processes to exit. Sep 13 01:12:41.256558 systemd-logind[1738]: Removed session 16. Sep 13 01:12:41.543000 audit[6103]: USER_ACCT pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.554247 kernel: audit: type=1101 audit(1757725961.543:1572): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.562916 kernel: audit: type=1103 audit(1757725961.544:1573): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.544000 audit[6103]: CRED_ACQ pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.569221 kernel: audit: type=1006 audit(1757725961.544:1574): pid=6103 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 13 01:12:41.578336 kernel: audit: type=1300 audit(1757725961.544:1574): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb821cbf0 a2=3 a3=0 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:41.544000 audit[6103]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb821cbf0 a2=3 a3=0 items=0 ppid=1 pid=6103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:41.615084 kernel: audit: type=1327 audit(1757725961.544:1574): proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:41.544000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:41.622322 sshd[6103]: Accepted publickey for core from 147.75.109.163 port 34014 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:12:41.553792 sshd[6103]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:12:41.700468 systemd-logind[1738]: New session 17 of user core. Sep 13 01:12:41.702369 systemd[1]: Started session-17.scope. Sep 13 01:12:41.731000 audit[6103]: USER_START pid=6103 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.752692 kernel: audit: type=1105 audit(1757725961.731:1575): pid=6103 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:41.750000 audit[6106]: CRED_ACQ pid=6106 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:42.194128 update_engine[1740]: I0913 01:12:42.189927 1740 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:12:42.214327 update_engine[1740]: I0913 01:12:42.213959 1740 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:12:42.214327 update_engine[1740]: I0913 01:12:42.214274 1740 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:12:42.216079 update_engine[1740]: E0913 01:12:42.215917 1740 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:12:42.216079 update_engine[1740]: I0913 01:12:42.216048 1740 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Sep 13 01:12:45.049768 env[1748]: time="2025-09-13T01:12:45.048996210Z" level=info msg="RemovePodSandbox for \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\"" Sep 13 01:12:45.049768 env[1748]: time="2025-09-13T01:12:45.049042542Z" level=info msg="Forcibly stopping sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\"" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:45.761 [WARNING][6120] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0", GenerateName:"calico-apiserver-669f46fc95-", Namespace:"calico-apiserver", SelfLink:"", UID:"5f00d1b8-5e83-4b8b-ab26-87798c93eddb", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"669f46fc95", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"4898b0ca2f504a64363c4a19419b0826c05614751861fa49459bc07c0a5abea5", Pod:"calico-apiserver-669f46fc95-4lw7t", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.31.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali61f8aa88016", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:45.770 [INFO][6120] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:45.770 [INFO][6120] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" iface="eth0" netns="" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:45.770 [INFO][6120] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:45.770 [INFO][6120] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:46.265 [INFO][6128] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:46.279 [INFO][6128] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:46.280 [INFO][6128] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:46.320 [WARNING][6128] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:46.320 [INFO][6128] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" HandleID="k8s-pod-network.c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Workload="ip--172--31--27--15-k8s-calico--apiserver--669f46fc95--4lw7t-eth0" Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:46.322 [INFO][6128] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:46.334037 env[1748]: 2025-09-13 01:12:46.326 [INFO][6120] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9" Sep 13 01:12:46.334037 env[1748]: time="2025-09-13T01:12:46.334060419Z" level=info msg="TearDown network for sandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\" successfully" Sep 13 01:12:46.405564 env[1748]: time="2025-09-13T01:12:46.354735326Z" level=info msg="RemovePodSandbox \"c26dc65a0802b83bf256317e9b5089279745511c6bae1a9727d6f63460b73ba9\" returns successfully" Sep 13 01:12:47.063886 sshd[6103]: pam_unix(sshd:session): session closed for user core Sep 13 01:12:47.183525 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:12:47.197213 kernel: audit: type=1106 audit(1757725967.168:1577): pid=6103 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.168000 audit[6103]: USER_END pid=6103 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.241102 kernel: audit: type=1104 audit(1757725967.183:1578): pid=6103 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.241211 kernel: audit: type=1130 audit(1757725967.192:1579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.15:22-147.75.109.163:34022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:47.242380 kernel: audit: type=1131 audit(1757725967.205:1580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.15:22-147.75.109.163:34014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:47.183000 audit[6103]: CRED_DISP pid=6103 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.15:22-147.75.109.163:34022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:47.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.15:22-147.75.109.163:34014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:47.194209 systemd[1]: Started sshd@17-172.31.27.15:22-147.75.109.163:34022.service. Sep 13 01:12:47.207065 systemd[1]: sshd@16-172.31.27.15:22-147.75.109.163:34014.service: Deactivated successfully. Sep 13 01:12:47.208338 systemd[1]: session-17.scope: Deactivated successfully. Sep 13 01:12:47.208520 systemd[1]: session-17.scope: Consumed 1.392s CPU time. Sep 13 01:12:47.216198 systemd-logind[1738]: Session 17 logged out. Waiting for processes to exit. Sep 13 01:12:47.231847 systemd-logind[1738]: Removed session 17. Sep 13 01:12:47.464000 audit[6137]: USER_ACCT pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.489806 kernel: audit: type=1101 audit(1757725967.464:1581): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.489926 kernel: audit: type=1103 audit(1757725967.472:1582): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.489970 kernel: audit: type=1006 audit(1757725967.472:1583): pid=6137 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Sep 13 01:12:47.472000 audit[6137]: CRED_ACQ pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.500870 kernel: audit: type=1300 audit(1757725967.472:1583): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffce3c1c0 a2=3 a3=0 items=0 ppid=1 pid=6137 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:47.472000 audit[6137]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffce3c1c0 a2=3 a3=0 items=0 ppid=1 pid=6137 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:47.514465 kernel: audit: type=1327 audit(1757725967.472:1583): proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:47.472000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:12:47.514620 sshd[6137]: Accepted publickey for core from 147.75.109.163 port 34022 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:12:47.476875 sshd[6137]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:12:47.527075 systemd[1]: Started session-18.scope. Sep 13 01:12:47.528225 systemd-logind[1738]: New session 18 of user core. Sep 13 01:12:47.534000 audit[6137]: USER_START pid=6137 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.545720 kernel: audit: type=1105 audit(1757725967.534:1584): pid=6137 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:47.534000 audit[6140]: CRED_ACQ pid=6140 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:48.787924 env[1748]: time="2025-09-13T01:12:48.787739060Z" level=info msg="StopPodSandbox for \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\"" Sep 13 01:12:49.923000 audit[6185]: NETFILTER_CFG table=filter:130 family=2 entries=20 op=nft_register_rule pid=6185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:49.923000 audit[6185]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcea32ff30 a2=0 a3=7ffcea32ff1c items=0 ppid=3065 pid=6185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:49.923000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:12:49.934000 audit[6185]: NETFILTER_CFG table=nat:131 family=2 entries=110 op=nft_register_chain pid=6185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:12:49.934000 audit[6185]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffcea32ff30 a2=0 a3=7ffcea32ff1c items=0 ppid=3065 pid=6185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:12:49.934000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:12:51.154000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:51.154000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001f10f40 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:12:51.154000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:12:51.175000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:51.175000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001d3ec00 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:12:51.175000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:51.122 [WARNING][6176] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0", GenerateName:"calico-kube-controllers-66c99bdc99-", Namespace:"calico-system", SelfLink:"", UID:"b5c1a4b0-770e-47aa-89f5-af207367d613", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66c99bdc99", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52", Pod:"calico-kube-controllers-66c99bdc99-hsf56", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.31.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali58a0fcee11b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:51.199 [INFO][6176] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:51.199 [INFO][6176] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" iface="eth0" netns="" Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:51.202 [INFO][6176] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:51.202 [INFO][6176] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:52.072 [INFO][6191] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:52.081 [INFO][6191] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:52.082 [INFO][6191] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:52.125 [WARNING][6191] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:52.125 [INFO][6191] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:52.128 [INFO][6191] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:52.155531 env[1748]: 2025-09-13 01:12:52.138 [INFO][6176] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:52.155531 env[1748]: time="2025-09-13T01:12:52.156454679Z" level=info msg="TearDown network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\" successfully" Sep 13 01:12:52.155531 env[1748]: time="2025-09-13T01:12:52.156496700Z" level=info msg="StopPodSandbox for \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\" returns successfully" Sep 13 01:12:52.291496 update_engine[1740]: I0913 01:12:52.228047 1740 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:12:52.291496 update_engine[1740]: I0913 01:12:52.280679 1740 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:12:52.291496 update_engine[1740]: I0913 01:12:52.285799 1740 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:12:52.291496 update_engine[1740]: E0913 01:12:52.290868 1740 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:12:52.291496 update_engine[1740]: I0913 01:12:52.291018 1740 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 13 01:12:52.291496 update_engine[1740]: I0913 01:12:52.291038 1740 omaha_request_action.cc:621] Omaha request response: Sep 13 01:12:52.295252 update_engine[1740]: E0913 01:12:52.291956 1740 omaha_request_action.cc:640] Omaha request network transfer failed. Sep 13 01:12:52.295252 update_engine[1740]: I0913 01:12:52.292021 1740 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Sep 13 01:12:52.295252 update_engine[1740]: I0913 01:12:52.292026 1740 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 01:12:52.295252 update_engine[1740]: I0913 01:12:52.292032 1740 update_attempter.cc:306] Processing Done. Sep 13 01:12:52.295252 update_engine[1740]: E0913 01:12:52.293627 1740 update_attempter.cc:619] Update failed. Sep 13 01:12:52.295252 update_engine[1740]: I0913 01:12:52.293641 1740 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Sep 13 01:12:52.295252 update_engine[1740]: I0913 01:12:52.293646 1740 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Sep 13 01:12:52.295252 update_engine[1740]: I0913 01:12:52.293653 1740 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Sep 13 01:12:52.302773 update_engine[1740]: I0913 01:12:52.302556 1740 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 13 01:12:52.306293 update_engine[1740]: I0913 01:12:52.305759 1740 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 13 01:12:52.306293 update_engine[1740]: I0913 01:12:52.305785 1740 omaha_request_action.cc:271] Request: Sep 13 01:12:52.306293 update_engine[1740]: Sep 13 01:12:52.306293 update_engine[1740]: Sep 13 01:12:52.306293 update_engine[1740]: Sep 13 01:12:52.306293 update_engine[1740]: Sep 13 01:12:52.306293 update_engine[1740]: Sep 13 01:12:52.306293 update_engine[1740]: Sep 13 01:12:52.306293 update_engine[1740]: I0913 01:12:52.305791 1740 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:12:52.306293 update_engine[1740]: I0913 01:12:52.306026 1740 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:12:52.306293 update_engine[1740]: I0913 01:12:52.306252 1740 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:12:52.309968 update_engine[1740]: E0913 01:12:52.308022 1740 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:12:52.309968 update_engine[1740]: I0913 01:12:52.308135 1740 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 13 01:12:52.309968 update_engine[1740]: I0913 01:12:52.308143 1740 omaha_request_action.cc:621] Omaha request response: Sep 13 01:12:52.309968 update_engine[1740]: I0913 01:12:52.308151 1740 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 01:12:52.309968 update_engine[1740]: I0913 01:12:52.308156 1740 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 01:12:52.309968 update_engine[1740]: I0913 01:12:52.308159 1740 update_attempter.cc:306] Processing Done. Sep 13 01:12:52.309968 update_engine[1740]: I0913 01:12:52.308166 1740 update_attempter.cc:310] Error event sent. Sep 13 01:12:52.309968 update_engine[1740]: I0913 01:12:52.308176 1740 update_check_scheduler.cc:74] Next update check in 46m10s Sep 13 01:12:52.399990 locksmithd[1812]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Sep 13 01:12:52.399990 locksmithd[1812]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Sep 13 01:12:54.654704 env[1748]: time="2025-09-13T01:12:54.654504172Z" level=info msg="RemovePodSandbox for \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\"" Sep 13 01:12:54.654704 env[1748]: time="2025-09-13T01:12:54.654554379Z" level=info msg="Forcibly stopping sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\"" Sep 13 01:12:55.496003 sshd[6137]: pam_unix(sshd:session): session closed for user core Sep 13 01:12:55.614187 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 13 01:12:55.621103 kernel: audit: type=1106 audit(1757725975.555:1590): pid=6137 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:55.621960 kernel: audit: type=1104 audit(1757725975.556:1591): pid=6137 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:55.622031 kernel: audit: type=1131 audit(1757725975.585:1592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.15:22-147.75.109.163:34022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:55.555000 audit[6137]: USER_END pid=6137 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:55.556000 audit[6137]: CRED_DISP pid=6137 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:12:55.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.15:22-147.75.109.163:34022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:12:55.580123 systemd[1]: sshd@17-172.31.27.15:22-147.75.109.163:34022.service: Deactivated successfully. Sep 13 01:12:55.588444 systemd[1]: session-18.scope: Deactivated successfully. Sep 13 01:12:55.588666 systemd[1]: session-18.scope: Consumed 1.513s CPU time. Sep 13 01:12:55.596986 systemd-logind[1738]: Session 18 logged out. Waiting for processes to exit. Sep 13 01:12:55.613736 systemd-logind[1738]: Removed session 18. Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:55.301 [WARNING][6218] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0", GenerateName:"calico-kube-controllers-66c99bdc99-", Namespace:"calico-system", SelfLink:"", UID:"b5c1a4b0-770e-47aa-89f5-af207367d613", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"66c99bdc99", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"bb685c33e5d3442e50e760760fecda3ccb020dbe5000037701df4e153845eb52", Pod:"calico-kube-controllers-66c99bdc99-hsf56", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.31.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali58a0fcee11b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:55.310 [INFO][6218] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:55.310 [INFO][6218] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" iface="eth0" netns="" Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:55.310 [INFO][6218] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:55.310 [INFO][6218] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:55.996 [INFO][6240] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:56.053 [INFO][6240] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:56.057 [INFO][6240] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:56.490 [WARNING][6240] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:56.490 [INFO][6240] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" HandleID="k8s-pod-network.36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Workload="ip--172--31--27--15-k8s-calico--kube--controllers--66c99bdc99--hsf56-eth0" Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:56.615 [INFO][6240] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:12:56.844644 env[1748]: 2025-09-13 01:12:56.758 [INFO][6218] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576" Sep 13 01:12:56.981737 env[1748]: time="2025-09-13T01:12:56.844698408Z" level=info msg="TearDown network for sandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\" successfully" Sep 13 01:12:56.981737 env[1748]: time="2025-09-13T01:12:56.902446066Z" level=info msg="RemovePodSandbox \"36f5e14ca551c71eaeb74919136bd124fcee27e1b2e56035003f5bf8ec53f576\" returns successfully" Sep 13 01:12:57.296000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.395080 kernel: audit: type=1400 audit(1757725977.296:1593): avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.404198 kernel: audit: type=1400 audit(1757725977.296:1594): avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.404294 kernel: audit: type=1300 audit(1757725977.296:1594): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00ae7aea0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.404318 kernel: audit: type=1327 audit(1757725977.296:1594): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:57.404342 kernel: audit: type=1300 audit(1757725977.296:1593): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0090fc9c0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.404364 kernel: audit: type=1327 audit(1757725977.296:1593): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:57.404389 kernel: audit: type=1400 audit(1757725977.328:1595): avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.296000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.296000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00ae7aea0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:57.296000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0090fc9c0 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:57.328000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.328000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00dd88960 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:57.328000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.328000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00dd88a20 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:57.360000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.360000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0011e0900 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.360000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:57.360000 audit[2505]: AVC avc: denied { watch } for pid=2505 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:12:57.360000 audit[2505]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00318ce80 a2=fc6 a3=0 items=0 ppid=2332 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c774 key=(null) Sep 13 01:12:57.360000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:12:59.203281 env[1748]: time="2025-09-13T01:12:59.203028604Z" level=info msg="StopPodSandbox for \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\"" Sep 13 01:12:59.654023 kubelet[2911]: E0913 01:12:59.501640 2911 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="15.262s" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:12:59.887 [WARNING][6288] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"05fa90eb-9dab-4217-8797-8c89464df9e5", ResourceVersion:"1239", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da", Pod:"csi-node-driver-p9jh8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.31.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali734d5866b41", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:12:59.890 [INFO][6288] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:12:59.890 [INFO][6288] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" iface="eth0" netns="" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:12:59.890 [INFO][6288] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:12:59.890 [INFO][6288] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:13:00.457 [INFO][6299] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:13:00.461 [INFO][6299] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:13:00.463 [INFO][6299] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:13:00.487 [WARNING][6299] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:13:00.487 [INFO][6299] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:13:00.492 [INFO][6299] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:13:00.501177 env[1748]: 2025-09-13 01:13:00.496 [INFO][6288] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:00.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.15:22-147.75.109.163:54576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:13:00.524211 systemd[1]: Started sshd@18-172.31.27.15:22-147.75.109.163:54576.service. Sep 13 01:13:00.554817 env[1748]: time="2025-09-13T01:13:00.502558859Z" level=info msg="TearDown network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\" successfully" Sep 13 01:13:00.554817 env[1748]: time="2025-09-13T01:13:00.502603895Z" level=info msg="StopPodSandbox for \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\" returns successfully" Sep 13 01:13:00.554817 env[1748]: time="2025-09-13T01:13:00.511780679Z" level=info msg="RemovePodSandbox for \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\"" Sep 13 01:13:00.554817 env[1748]: time="2025-09-13T01:13:00.511829480Z" level=info msg="Forcibly stopping sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\"" Sep 13 01:13:00.860512 sshd[6307]: Accepted publickey for core from 147.75.109.163 port 54576 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:13:00.858000 audit[6307]: USER_ACCT pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:00.864867 kernel: kauditd_printk_skb: 12 callbacks suppressed Sep 13 01:13:00.874002 kernel: audit: type=1101 audit(1757725980.858:1600): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:00.874128 kernel: audit: type=1103 audit(1757725980.872:1601): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:00.872000 audit[6307]: CRED_ACQ pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:00.885745 kernel: audit: type=1006 audit(1757725980.872:1602): pid=6307 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 13 01:13:00.872000 audit[6307]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9d5478d0 a2=3 a3=0 items=0 ppid=1 pid=6307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:00.915165 kernel: audit: type=1300 audit(1757725980.872:1602): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9d5478d0 a2=3 a3=0 items=0 ppid=1 pid=6307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:00.915266 kernel: audit: type=1327 audit(1757725980.872:1602): proctitle=737368643A20636F7265205B707269765D Sep 13 01:13:00.872000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:13:00.907372 sshd[6307]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:13:01.035731 systemd[1]: Started session-19.scope. Sep 13 01:13:01.036783 systemd-logind[1738]: New session 19 of user core. Sep 13 01:13:01.080000 audit[6307]: USER_START pid=6307 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:01.094718 kernel: audit: type=1105 audit(1757725981.080:1603): pid=6307 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:01.094894 kernel: audit: type=1103 audit(1757725981.080:1604): pid=6324 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:01.080000 audit[6324]: CRED_ACQ pid=6324 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:00.903 [WARNING][6315] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"05fa90eb-9dab-4217-8797-8c89464df9e5", ResourceVersion:"1239", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 10, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-15", ContainerID:"7119d4980537359f24a285dc36a05f4e393520a009b3f0fdac61b3d43a8f85da", Pod:"csi-node-driver-p9jh8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.31.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali734d5866b41", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:00.908 [INFO][6315] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:00.908 [INFO][6315] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" iface="eth0" netns="" Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:00.908 [INFO][6315] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:00.908 [INFO][6315] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:02.332 [INFO][6323] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:02.340 [INFO][6323] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:02.346 [INFO][6323] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:02.459 [WARNING][6323] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:02.460 [INFO][6323] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" HandleID="k8s-pod-network.a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Workload="ip--172--31--27--15-k8s-csi--node--driver--p9jh8-eth0" Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:02.509 [INFO][6323] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:13:02.647169 env[1748]: 2025-09-13 01:13:02.568 [INFO][6315] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360" Sep 13 01:13:02.647169 env[1748]: time="2025-09-13T01:13:02.647188959Z" level=info msg="TearDown network for sandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\" successfully" Sep 13 01:13:02.792204 env[1748]: time="2025-09-13T01:13:02.774896731Z" level=info msg="RemovePodSandbox \"a659eb85e15a82721281aeb4b7c247d15438105bcff26eb6b68a15b608a0b360\" returns successfully" Sep 13 01:13:04.538000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:13:04.573031 kernel: audit: type=1400 audit(1757725984.538:1605): avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:13:04.575186 kernel: audit: type=1300 audit(1757725984.538:1605): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d50800 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:13:04.575277 kernel: audit: type=1327 audit(1757725984.538:1605): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:13:04.538000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d50800 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:13:04.538000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:13:04.538000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:13:04.538000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002c0b220 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:13:04.538000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:13:04.559000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:13:04.559000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002c0b280 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:13:04.559000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:13:04.582000 audit[2489]: AVC avc: denied { watch } for pid=2489 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:13:04.582000 audit[2489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d50f00 a2=fc6 a3=0 items=0 ppid=2359 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:13:04.582000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:13:06.412779 kubelet[2911]: E0913 01:13:06.179811 2911 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="3.603s" Sep 13 01:13:06.707196 sshd[6307]: pam_unix(sshd:session): session closed for user core Sep 13 01:13:06.800099 kernel: kauditd_printk_skb: 9 callbacks suppressed Sep 13 01:13:06.811405 kernel: audit: type=1106 audit(1757725986.786:1609): pid=6307 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:06.811515 kernel: audit: type=1104 audit(1757725986.798:1610): pid=6307 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:06.786000 audit[6307]: USER_END pid=6307 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:06.798000 audit[6307]: CRED_DISP pid=6307 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:06.833627 systemd[1]: sshd@18-172.31.27.15:22-147.75.109.163:54576.service: Deactivated successfully. Sep 13 01:13:06.851511 kernel: audit: type=1131 audit(1757725986.838:1611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.15:22-147.75.109.163:54576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:13:06.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.15:22-147.75.109.163:54576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:13:06.849292 systemd[1]: session-19.scope: Deactivated successfully. Sep 13 01:13:06.850954 systemd-logind[1738]: Session 19 logged out. Waiting for processes to exit. Sep 13 01:13:06.864138 systemd-logind[1738]: Removed session 19. Sep 13 01:13:11.722339 systemd[1]: Started sshd@19-172.31.27.15:22-147.75.109.163:56048.service. Sep 13 01:13:11.764960 kernel: audit: type=1130 audit(1757725991.724:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.15:22-147.75.109.163:56048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:13:11.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.15:22-147.75.109.163:56048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:13:12.048000 audit[6379]: USER_ACCT pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:12.062017 kernel: audit: type=1101 audit(1757725992.048:1613): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:12.062126 kernel: audit: type=1103 audit(1757725992.058:1614): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:12.058000 audit[6379]: CRED_ACQ pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:12.064732 sshd[6379]: Accepted publickey for core from 147.75.109.163 port 56048 ssh2: RSA SHA256:sBvt9y5DdQZGi9uV+pmmiiHW60JNZstWmpRM2d5z1BI Sep 13 01:13:12.061272 sshd[6379]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:13:12.079689 kernel: audit: type=1006 audit(1757725992.058:1615): pid=6379 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Sep 13 01:13:12.058000 audit[6379]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebee3c180 a2=3 a3=0 items=0 ppid=1 pid=6379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:12.090673 kernel: audit: type=1300 audit(1757725992.058:1615): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebee3c180 a2=3 a3=0 items=0 ppid=1 pid=6379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:12.058000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:13:12.096688 kernel: audit: type=1327 audit(1757725992.058:1615): proctitle=737368643A20636F7265205B707269765D Sep 13 01:13:12.130458 systemd-logind[1738]: New session 20 of user core. Sep 13 01:13:12.141000 audit[6379]: USER_START pid=6379 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:12.132593 systemd[1]: Started session-20.scope. Sep 13 01:13:12.162321 kernel: audit: type=1105 audit(1757725992.141:1616): pid=6379 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:12.162471 kernel: audit: type=1103 audit(1757725992.144:1617): pid=6381 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:12.144000 audit[6381]: CRED_ACQ pid=6381 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:13.637171 sshd[6379]: pam_unix(sshd:session): session closed for user core Sep 13 01:13:13.663547 kernel: audit: type=1106 audit(1757725993.645:1618): pid=6379 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:13.664213 kernel: audit: type=1104 audit(1757725993.645:1619): pid=6379 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:13.645000 audit[6379]: USER_END pid=6379 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:13.645000 audit[6379]: CRED_DISP pid=6379 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Sep 13 01:13:13.672167 systemd[1]: sshd@19-172.31.27.15:22-147.75.109.163:56048.service: Deactivated successfully. Sep 13 01:13:13.683516 kernel: audit: type=1131 audit(1757725993.671:1620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.15:22-147.75.109.163:56048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:13:13.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.15:22-147.75.109.163:56048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:13:13.682255 systemd[1]: session-20.scope: Deactivated successfully. Sep 13 01:13:13.684177 systemd-logind[1738]: Session 20 logged out. Waiting for processes to exit. Sep 13 01:13:13.690251 systemd-logind[1738]: Removed session 20. Sep 13 01:13:20.816582 systemd[1]: run-containerd-runc-k8s.io-6258e6f227fc3dde99e9b7567bb07dc6241d6da8b4f3443777382644e66030b8-runc.GLrQHw.mount: Deactivated successfully. Sep 13 01:13:27.897000 audit: BPF prog-id=114 op=UNLOAD Sep 13 01:13:27.926145 kernel: audit: type=1334 audit(1757726007.897:1621): prog-id=114 op=UNLOAD Sep 13 01:13:27.928231 kernel: audit: type=1334 audit(1757726007.901:1622): prog-id=117 op=UNLOAD Sep 13 01:13:27.901000 audit: BPF prog-id=117 op=UNLOAD Sep 13 01:13:27.897904 systemd[1]: cri-containerd-e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0.scope: Deactivated successfully. Sep 13 01:13:27.898304 systemd[1]: cri-containerd-e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0.scope: Consumed 12.977s CPU time. Sep 13 01:13:27.947785 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0-rootfs.mount: Deactivated successfully. Sep 13 01:13:27.949194 env[1748]: time="2025-09-13T01:13:27.948951047Z" level=info msg="shim disconnected" id=e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0 Sep 13 01:13:27.949194 env[1748]: time="2025-09-13T01:13:27.949000983Z" level=warning msg="cleaning up after shim disconnected" id=e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0 namespace=k8s.io Sep 13 01:13:27.949194 env[1748]: time="2025-09-13T01:13:27.949009908Z" level=info msg="cleaning up dead shim" Sep 13 01:13:27.958323 env[1748]: time="2025-09-13T01:13:27.958277737Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:13:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6442 runtime=io.containerd.runc.v2\n" Sep 13 01:13:28.098749 kubelet[2911]: I0913 01:13:28.094743 2911 scope.go:117] "RemoveContainer" containerID="e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0" Sep 13 01:13:28.129581 env[1748]: time="2025-09-13T01:13:28.129530984Z" level=info msg="CreateContainer within sandbox \"d817f6db42849e723efc792fb1577474bb5f909d7966d3044fbbfb3d2f8fe265\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Sep 13 01:13:28.210733 env[1748]: time="2025-09-13T01:13:28.210618304Z" level=info msg="CreateContainer within sandbox \"d817f6db42849e723efc792fb1577474bb5f909d7966d3044fbbfb3d2f8fe265\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4\"" Sep 13 01:13:28.211613 env[1748]: time="2025-09-13T01:13:28.211583492Z" level=info msg="StartContainer for \"e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4\"" Sep 13 01:13:28.266927 systemd[1]: Started cri-containerd-e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4.scope. Sep 13 01:13:28.307647 kernel: audit: type=1400 audit(1757726008.293:1623): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.307873 kernel: audit: type=1400 audit(1757726008.293:1624): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.324550 kernel: audit: type=1400 audit(1757726008.293:1625): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.324716 kernel: audit: type=1400 audit(1757726008.293:1626): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.339410 kernel: audit: type=1400 audit(1757726008.293:1627): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.341139 kernel: audit: type=1400 audit(1757726008.293:1628): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.349710 kernel: audit: type=1400 audit(1757726008.293:1629): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.349844 kernel: audit: type=1400 audit(1757726008.293:1630): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.299000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.299000 audit: BPF prog-id=231 op=LOAD Sep 13 01:13:28.307000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.307000 audit[6463]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3002 pid=6463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:28.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666166386366333939643235323136383165616633333239323761 Sep 13 01:13:28.307000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.307000 audit[6463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3002 pid=6463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:28.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666166386366333939643235323136383165616633333239323761 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit: BPF prog-id=232 op=LOAD Sep 13 01:13:28.308000 audit[6463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003c0020 items=0 ppid=3002 pid=6463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:28.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666166386366333939643235323136383165616633333239323761 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.308000 audit: BPF prog-id=233 op=LOAD Sep 13 01:13:28.308000 audit[6463]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003c0068 items=0 ppid=3002 pid=6463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:28.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666166386366333939643235323136383165616633333239323761 Sep 13 01:13:28.308000 audit: BPF prog-id=233 op=UNLOAD Sep 13 01:13:28.309000 audit: BPF prog-id=232 op=UNLOAD Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { perfmon } for pid=6463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit[6463]: AVC avc: denied { bpf } for pid=6463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:28.309000 audit: BPF prog-id=234 op=LOAD Sep 13 01:13:28.309000 audit[6463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003c0478 items=0 ppid=3002 pid=6463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:28.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539666166386366333939643235323136383165616633333239323761 Sep 13 01:13:28.376688 env[1748]: time="2025-09-13T01:13:28.367386062Z" level=info msg="StartContainer for \"e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4\" returns successfully" Sep 13 01:13:28.949020 systemd[1]: run-containerd-runc-k8s.io-e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4-runc.uyMXK0.mount: Deactivated successfully. Sep 13 01:13:29.013217 systemd[1]: cri-containerd-35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319.scope: Deactivated successfully. Sep 13 01:13:29.013490 systemd[1]: cri-containerd-35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319.scope: Consumed 4.538s CPU time. Sep 13 01:13:29.017000 audit: BPF prog-id=73 op=UNLOAD Sep 13 01:13:29.017000 audit: BPF prog-id=96 op=UNLOAD Sep 13 01:13:29.046398 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319-rootfs.mount: Deactivated successfully. Sep 13 01:13:29.050242 env[1748]: time="2025-09-13T01:13:29.050189090Z" level=info msg="shim disconnected" id=35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319 Sep 13 01:13:29.050242 env[1748]: time="2025-09-13T01:13:29.050242002Z" level=warning msg="cleaning up after shim disconnected" id=35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319 namespace=k8s.io Sep 13 01:13:29.050784 env[1748]: time="2025-09-13T01:13:29.050254734Z" level=info msg="cleaning up dead shim" Sep 13 01:13:29.062946 env[1748]: time="2025-09-13T01:13:29.062897509Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:13:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6520 runtime=io.containerd.runc.v2\n" Sep 13 01:13:30.058112 kubelet[2911]: I0913 01:13:30.058076 2911 scope.go:117] "RemoveContainer" containerID="35ead3ec7f32f2297fec2d402c26523b15d4369386a9a5ab6bb0fe356158c319" Sep 13 01:13:30.082702 env[1748]: time="2025-09-13T01:13:30.082616633Z" level=info msg="CreateContainer within sandbox \"51e78500f1052d152525502eb35e206e74bc54678b03662a7a37badbfec34135\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Sep 13 01:13:30.156557 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount45219304.mount: Deactivated successfully. Sep 13 01:13:30.166093 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2498018397.mount: Deactivated successfully. Sep 13 01:13:30.173421 env[1748]: time="2025-09-13T01:13:30.173337005Z" level=info msg="CreateContainer within sandbox \"51e78500f1052d152525502eb35e206e74bc54678b03662a7a37badbfec34135\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"ba51ad4f509702d48fae732503bbabee89e8a87038c4f9cff90e94f6ea6b468e\"" Sep 13 01:13:30.174582 env[1748]: time="2025-09-13T01:13:30.174551198Z" level=info msg="StartContainer for \"ba51ad4f509702d48fae732503bbabee89e8a87038c4f9cff90e94f6ea6b468e\"" Sep 13 01:13:30.221600 systemd[1]: Started cri-containerd-ba51ad4f509702d48fae732503bbabee89e8a87038c4f9cff90e94f6ea6b468e.scope. Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.280000 audit: BPF prog-id=235 op=LOAD Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2359 pid=6543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:30.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353161643466353039373032643438666165373332353033626261 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2359 pid=6543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:30.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353161643466353039373032643438666165373332353033626261 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit: BPF prog-id=236 op=LOAD Sep 13 01:13:30.281000 audit[6543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0000a8370 items=0 ppid=2359 pid=6543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:30.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353161643466353039373032643438666165373332353033626261 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.281000 audit: BPF prog-id=237 op=LOAD Sep 13 01:13:30.281000 audit[6543]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0000a83b8 items=0 ppid=2359 pid=6543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:30.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353161643466353039373032643438666165373332353033626261 Sep 13 01:13:30.282000 audit: BPF prog-id=237 op=UNLOAD Sep 13 01:13:30.282000 audit: BPF prog-id=236 op=UNLOAD Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { perfmon } for pid=6543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit[6543]: AVC avc: denied { bpf } for pid=6543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:30.282000 audit: BPF prog-id=238 op=LOAD Sep 13 01:13:30.282000 audit[6543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0000a87c8 items=0 ppid=2359 pid=6543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:30.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353161643466353039373032643438666165373332353033626261 Sep 13 01:13:30.325987 env[1748]: time="2025-09-13T01:13:30.324014531Z" level=info msg="StartContainer for \"ba51ad4f509702d48fae732503bbabee89e8a87038c4f9cff90e94f6ea6b468e\" returns successfully" Sep 13 01:13:30.643124 kubelet[2911]: E0913 01:13:30.642631 2911 controller.go:195] "Failed to update lease" err="Put \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": context deadline exceeded" Sep 13 01:13:31.925000 audit[6553]: AVC avc: denied { watch } for pid=6553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:13:31.925000 audit[6553]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000555830 a2=fc6 a3=0 items=0 ppid=2359 pid=6553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:13:31.925000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:13:31.925000 audit[6553]: AVC avc: denied { watch } for pid=6553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:13:31.925000 audit[6553]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000290ec0 a2=fc6 a3=0 items=0 ppid=2359 pid=6553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c311,c1000 key=(null) Sep 13 01:13:31.925000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:13:32.614369 systemd[1]: cri-containerd-c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b.scope: Deactivated successfully. Sep 13 01:13:32.614691 systemd[1]: cri-containerd-c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b.scope: Consumed 3.266s CPU time. Sep 13 01:13:32.617000 audit: BPF prog-id=81 op=UNLOAD Sep 13 01:13:32.617000 audit: BPF prog-id=83 op=UNLOAD Sep 13 01:13:32.642894 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b-rootfs.mount: Deactivated successfully. Sep 13 01:13:32.645650 env[1748]: time="2025-09-13T01:13:32.645597672Z" level=info msg="shim disconnected" id=c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b Sep 13 01:13:32.645650 env[1748]: time="2025-09-13T01:13:32.645672788Z" level=warning msg="cleaning up after shim disconnected" id=c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b namespace=k8s.io Sep 13 01:13:32.645650 env[1748]: time="2025-09-13T01:13:32.645686810Z" level=info msg="cleaning up dead shim" Sep 13 01:13:32.655750 env[1748]: time="2025-09-13T01:13:32.655691773Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:13:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6586 runtime=io.containerd.runc.v2\n" Sep 13 01:13:33.067503 kubelet[2911]: I0913 01:13:33.067468 2911 scope.go:117] "RemoveContainer" containerID="c6d1972029a5c3ee0b9e572a189dbb4a88261faf542dd7dad676942ede15033b" Sep 13 01:13:33.070139 env[1748]: time="2025-09-13T01:13:33.070097519Z" level=info msg="CreateContainer within sandbox \"04b83926d29c4cb8896081cb53ac4b16ae997941a63bc74651c9d368afbf1535\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Sep 13 01:13:33.099287 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1066174019.mount: Deactivated successfully. Sep 13 01:13:33.107947 env[1748]: time="2025-09-13T01:13:33.107896220Z" level=info msg="CreateContainer within sandbox \"04b83926d29c4cb8896081cb53ac4b16ae997941a63bc74651c9d368afbf1535\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"d2128c5530f8518175fc4ad5bbdadcda495242df557b958bb4dd5c01c7e8b3a8\"" Sep 13 01:13:33.108516 env[1748]: time="2025-09-13T01:13:33.108480236Z" level=info msg="StartContainer for \"d2128c5530f8518175fc4ad5bbdadcda495242df557b958bb4dd5c01c7e8b3a8\"" Sep 13 01:13:33.137170 systemd[1]: Started cri-containerd-d2128c5530f8518175fc4ad5bbdadcda495242df557b958bb4dd5c01c7e8b3a8.scope. Sep 13 01:13:33.168134 kernel: kauditd_printk_skb: 116 callbacks suppressed Sep 13 01:13:33.168720 kernel: audit: type=1400 audit(1757726013.160:1665): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.175720 kernel: audit: type=1400 audit(1757726013.160:1666): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.184694 kernel: audit: type=1400 audit(1757726013.160:1667): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.184928 kernel: audit: type=1400 audit(1757726013.160:1668): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.199701 kernel: audit: type=1400 audit(1757726013.160:1669): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.207752 kernel: audit: type=1400 audit(1757726013.160:1670): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.215889 kernel: audit: type=1400 audit(1757726013.160:1671): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.230710 kernel: audit: type=1400 audit(1757726013.160:1672): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.230870 kernel: audit: type=1400 audit(1757726013.160:1673): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.239071 kernel: audit: type=1400 audit(1757726013.160:1674): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.160000 audit: BPF prog-id=239 op=LOAD Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2324 pid=6605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:33.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432313238633535333066383531383137356663346164356262646164 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2324 pid=6605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:33.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432313238633535333066383531383137356663346164356262646164 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit: BPF prog-id=240 op=LOAD Sep 13 01:13:33.168000 audit[6605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000333d30 items=0 ppid=2324 pid=6605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:33.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432313238633535333066383531383137356663346164356262646164 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit: BPF prog-id=241 op=LOAD Sep 13 01:13:33.168000 audit[6605]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000333d78 items=0 ppid=2324 pid=6605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:33.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432313238633535333066383531383137356663346164356262646164 Sep 13 01:13:33.168000 audit: BPF prog-id=241 op=UNLOAD Sep 13 01:13:33.168000 audit: BPF prog-id=240 op=UNLOAD Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { perfmon } for pid=6605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit[6605]: AVC avc: denied { bpf } for pid=6605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:13:33.168000 audit: BPF prog-id=242 op=LOAD Sep 13 01:13:33.168000 audit[6605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003a8188 items=0 ppid=2324 pid=6605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:13:33.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432313238633535333066383531383137356663346164356262646164 Sep 13 01:13:33.248386 env[1748]: time="2025-09-13T01:13:33.248030699Z" level=info msg="StartContainer for \"d2128c5530f8518175fc4ad5bbdadcda495242df557b958bb4dd5c01c7e8b3a8\" returns successfully" Sep 13 01:13:36.186000 audit[5258]: AVC avc: denied { watch } for pid=5258 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.313247475/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c459,c974 tclass=file permissive=0 Sep 13 01:13:36.186000 audit[5258]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002204420 a2=fc6 a3=0 items=0 ppid=4431 pid=5258 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c459,c974 key=(null) Sep 13 01:13:36.186000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:13:39.397000 audit[5333]: AVC avc: denied { watch } for pid=5333 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.2829829244/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c127,c604 tclass=file permissive=0 Sep 13 01:13:39.401401 kernel: kauditd_printk_skb: 50 callbacks suppressed Sep 13 01:13:39.401571 kernel: audit: type=1400 audit(1757726019.397:1684): avc: denied { watch } for pid=5333 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_11_08.2829829244/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c127,c604 tclass=file permissive=0 Sep 13 01:13:39.397000 audit[5333]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00136a040 a2=fc6 a3=0 items=0 ppid=4907 pid=5333 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 key=(null) Sep 13 01:13:39.433032 kernel: audit: type=1300 audit(1757726019.397:1684): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00136a040 a2=fc6 a3=0 items=0 ppid=4907 pid=5333 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c127,c604 key=(null) Sep 13 01:13:39.433190 kernel: audit: type=1327 audit(1757726019.397:1684): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:13:39.397000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:13:40.662018 kubelet[2911]: E0913 01:13:40.661957 2911 controller.go:195] "Failed to update lease" err="Put \"https://172.31.27.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-15?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Sep 13 01:13:40.836457 systemd[1]: cri-containerd-e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4.scope: Deactivated successfully. Sep 13 01:13:40.836000 audit: BPF prog-id=231 op=UNLOAD Sep 13 01:13:40.840905 kernel: audit: type=1334 audit(1757726020.836:1685): prog-id=231 op=UNLOAD Sep 13 01:13:40.842000 audit: BPF prog-id=234 op=UNLOAD Sep 13 01:13:40.846737 kernel: audit: type=1334 audit(1757726020.842:1686): prog-id=234 op=UNLOAD Sep 13 01:13:40.866694 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4-rootfs.mount: Deactivated successfully. Sep 13 01:13:40.920047 env[1748]: time="2025-09-13T01:13:40.919595804Z" level=info msg="shim disconnected" id=e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4 Sep 13 01:13:40.920047 env[1748]: time="2025-09-13T01:13:40.919652072Z" level=warning msg="cleaning up after shim disconnected" id=e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4 namespace=k8s.io Sep 13 01:13:40.920047 env[1748]: time="2025-09-13T01:13:40.919688444Z" level=info msg="cleaning up dead shim" Sep 13 01:13:40.928291 env[1748]: time="2025-09-13T01:13:40.928249999Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:13:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6648 runtime=io.containerd.runc.v2\n" Sep 13 01:13:41.089934 kubelet[2911]: I0913 01:13:41.089906 2911 scope.go:117] "RemoveContainer" containerID="e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0" Sep 13 01:13:41.090577 kubelet[2911]: I0913 01:13:41.090544 2911 scope.go:117] "RemoveContainer" containerID="e9faf8cf399d2521681eaf332927af2ab7f094e6c366059bf15be70e956bd5f4" Sep 13 01:13:41.097897 kubelet[2911]: E0913 01:13:41.094578 2911 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-755d956888-6k52x_tigera-operator(24b3e339-36fc-42aa-b17c-1dc6baca355d)\"" pod="tigera-operator/tigera-operator-755d956888-6k52x" podUID="24b3e339-36fc-42aa-b17c-1dc6baca355d" Sep 13 01:13:41.106360 env[1748]: time="2025-09-13T01:13:41.106289531Z" level=info msg="RemoveContainer for \"e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0\"" Sep 13 01:13:41.118489 env[1748]: time="2025-09-13T01:13:41.118424197Z" level=info msg="RemoveContainer for \"e826619b0430cfde59f7e1d66291ef29ac974aeeb7515e70b547fcb0e591ccf0\" returns successfully" Sep 13 01:13:46.590178 amazon-ssm-agent[1717]: 2025-09-13 01:13:46 INFO [HealthCheck] HealthCheck reporting agent health. Sep 13 01:13:46.830823 systemd[1]: run-containerd-runc-k8s.io-fd4d1d3b7f0848716f9b8321580b8c57eab00f676847c81aef2c526796655e7a-runc.4fAsPf.mount: Deactivated successfully.