Sep 13 03:03:50.557720 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Sep 12 23:13:49 -00 2025 Sep 13 03:03:50.557732 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=65d14b740db9e581daa1d0206188b16d2f1a39e5c5e0878b6855323cd7c584ec Sep 13 03:03:50.557739 kernel: BIOS-provided physical RAM map: Sep 13 03:03:50.557743 kernel: BIOS-e820: [mem 0x0000000000000000-0x00000000000997ff] usable Sep 13 03:03:50.557747 kernel: BIOS-e820: [mem 0x0000000000099800-0x000000000009ffff] reserved Sep 13 03:03:50.557751 kernel: BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved Sep 13 03:03:50.557755 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003fffffff] usable Sep 13 03:03:50.557759 kernel: BIOS-e820: [mem 0x0000000040000000-0x00000000403fffff] reserved Sep 13 03:03:50.557763 kernel: BIOS-e820: [mem 0x0000000040400000-0x0000000080fcefff] usable Sep 13 03:03:50.557767 kernel: BIOS-e820: [mem 0x0000000080fcf000-0x0000000080fcffff] ACPI NVS Sep 13 03:03:50.557771 kernel: BIOS-e820: [mem 0x0000000080fd0000-0x0000000080fd0fff] reserved Sep 13 03:03:50.557775 kernel: BIOS-e820: [mem 0x0000000080fd1000-0x000000008afc2fff] usable Sep 13 03:03:50.557779 kernel: BIOS-e820: [mem 0x000000008afc3000-0x000000008c0a7fff] reserved Sep 13 03:03:50.557783 kernel: BIOS-e820: [mem 0x000000008c0a8000-0x000000008c230fff] usable Sep 13 03:03:50.557788 kernel: BIOS-e820: [mem 0x000000008c231000-0x000000008c662fff] ACPI NVS Sep 13 03:03:50.557793 kernel: BIOS-e820: [mem 0x000000008c663000-0x000000008eefefff] reserved Sep 13 03:03:50.557797 kernel: BIOS-e820: [mem 0x000000008eeff000-0x000000008eefffff] usable Sep 13 03:03:50.557801 kernel: BIOS-e820: [mem 0x000000008ef00000-0x000000008fffffff] reserved Sep 13 03:03:50.557805 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved Sep 13 03:03:50.557809 kernel: BIOS-e820: [mem 0x00000000fe000000-0x00000000fe010fff] reserved Sep 13 03:03:50.557814 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved Sep 13 03:03:50.557818 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Sep 13 03:03:50.557822 kernel: BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved Sep 13 03:03:50.557826 kernel: BIOS-e820: [mem 0x0000000100000000-0x000000086effffff] usable Sep 13 03:03:50.557830 kernel: NX (Execute Disable) protection: active Sep 13 03:03:50.557834 kernel: SMBIOS 3.2.1 present. Sep 13 03:03:50.557839 kernel: DMI: Supermicro SYS-5019C-MR-PH004/X11SCM-F, BIOS 1.9 09/16/2022 Sep 13 03:03:50.557843 kernel: tsc: Detected 3400.000 MHz processor Sep 13 03:03:50.557848 kernel: tsc: Detected 3399.906 MHz TSC Sep 13 03:03:50.557852 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 13 03:03:50.557857 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 13 03:03:50.557861 kernel: last_pfn = 0x86f000 max_arch_pfn = 0x400000000 Sep 13 03:03:50.557865 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 13 03:03:50.557870 kernel: last_pfn = 0x8ef00 max_arch_pfn = 0x400000000 Sep 13 03:03:50.557874 kernel: Using GB pages for direct mapping Sep 13 03:03:50.557878 kernel: ACPI: Early table checksum verification disabled Sep 13 03:03:50.557883 kernel: ACPI: RSDP 0x00000000000F05B0 000024 (v02 SUPERM) Sep 13 03:03:50.557888 kernel: ACPI: XSDT 0x000000008C5440C8 00010C (v01 SUPERM SUPERM 01072009 AMI 00010013) Sep 13 03:03:50.557892 kernel: ACPI: FACP 0x000000008C580670 000114 (v06 01072009 AMI 00010013) Sep 13 03:03:50.557897 kernel: ACPI: DSDT 0x000000008C544268 03C404 (v02 SUPERM SMCI--MB 01072009 INTL 20160527) Sep 13 03:03:50.557903 kernel: ACPI: FACS 0x000000008C662F80 000040 Sep 13 03:03:50.557907 kernel: ACPI: APIC 0x000000008C580788 00012C (v04 01072009 AMI 00010013) Sep 13 03:03:50.557913 kernel: ACPI: FPDT 0x000000008C5808B8 000044 (v01 01072009 AMI 00010013) Sep 13 03:03:50.557918 kernel: ACPI: FIDT 0x000000008C580900 00009C (v01 SUPERM SMCI--MB 01072009 AMI 00010013) Sep 13 03:03:50.557922 kernel: ACPI: MCFG 0x000000008C5809A0 00003C (v01 SUPERM SMCI--MB 01072009 MSFT 00000097) Sep 13 03:03:50.557927 kernel: ACPI: SPMI 0x000000008C5809E0 000041 (v05 SUPERM SMCI--MB 00000000 AMI. 00000000) Sep 13 03:03:50.557932 kernel: ACPI: SSDT 0x000000008C580A28 001B1C (v02 CpuRef CpuSsdt 00003000 INTL 20160527) Sep 13 03:03:50.557936 kernel: ACPI: SSDT 0x000000008C582548 0031C6 (v02 SaSsdt SaSsdt 00003000 INTL 20160527) Sep 13 03:03:50.557941 kernel: ACPI: SSDT 0x000000008C585710 00232B (v02 PegSsd PegSsdt 00001000 INTL 20160527) Sep 13 03:03:50.557946 kernel: ACPI: HPET 0x000000008C587A40 000038 (v01 SUPERM SMCI--MB 00000002 01000013) Sep 13 03:03:50.557951 kernel: ACPI: SSDT 0x000000008C587A78 000FAE (v02 SUPERM Ther_Rvp 00001000 INTL 20160527) Sep 13 03:03:50.557956 kernel: ACPI: SSDT 0x000000008C588A28 0008F4 (v02 INTEL xh_mossb 00000000 INTL 20160527) Sep 13 03:03:50.557960 kernel: ACPI: UEFI 0x000000008C589320 000042 (v01 SUPERM SMCI--MB 00000002 01000013) Sep 13 03:03:50.557965 kernel: ACPI: LPIT 0x000000008C589368 000094 (v01 SUPERM SMCI--MB 00000002 01000013) Sep 13 03:03:50.557969 kernel: ACPI: SSDT 0x000000008C589400 0027DE (v02 SUPERM PtidDevc 00001000 INTL 20160527) Sep 13 03:03:50.557974 kernel: ACPI: SSDT 0x000000008C58BBE0 0014E2 (v02 SUPERM TbtTypeC 00000000 INTL 20160527) Sep 13 03:03:50.557979 kernel: ACPI: DBGP 0x000000008C58D0C8 000034 (v01 SUPERM SMCI--MB 00000002 01000013) Sep 13 03:03:50.557983 kernel: ACPI: DBG2 0x000000008C58D100 000054 (v00 SUPERM SMCI--MB 00000002 01000013) Sep 13 03:03:50.557989 kernel: ACPI: SSDT 0x000000008C58D158 001B67 (v02 SUPERM UsbCTabl 00001000 INTL 20160527) Sep 13 03:03:50.557993 kernel: ACPI: DMAR 0x000000008C58ECC0 000070 (v01 INTEL EDK2 00000002 01000013) Sep 13 03:03:50.557998 kernel: ACPI: SSDT 0x000000008C58ED30 000144 (v02 Intel ADebTabl 00001000 INTL 20160527) Sep 13 03:03:50.558002 kernel: ACPI: TPM2 0x000000008C58EE78 000034 (v04 SUPERM SMCI--MB 00000001 AMI 00000000) Sep 13 03:03:50.558007 kernel: ACPI: SSDT 0x000000008C58EEB0 000D8F (v02 INTEL SpsNm 00000002 INTL 20160527) Sep 13 03:03:50.558012 kernel: ACPI: WSMT 0x000000008C58FC40 000028 (v01 SUPERM 01072009 AMI 00010013) Sep 13 03:03:50.558016 kernel: ACPI: EINJ 0x000000008C58FC68 000130 (v01 AMI AMI.EINJ 00000000 AMI. 00000000) Sep 13 03:03:50.558021 kernel: ACPI: ERST 0x000000008C58FD98 000230 (v01 AMIER AMI.ERST 00000000 AMI. 00000000) Sep 13 03:03:50.558026 kernel: ACPI: BERT 0x000000008C58FFC8 000030 (v01 AMI AMI.BERT 00000000 AMI. 00000000) Sep 13 03:03:50.558031 kernel: ACPI: HEST 0x000000008C58FFF8 00027C (v01 AMI AMI.HEST 00000000 AMI. 00000000) Sep 13 03:03:50.558036 kernel: ACPI: SSDT 0x000000008C590278 000162 (v01 SUPERM SMCCDN 00000000 INTL 20181221) Sep 13 03:03:50.558040 kernel: ACPI: Reserving FACP table memory at [mem 0x8c580670-0x8c580783] Sep 13 03:03:50.558045 kernel: ACPI: Reserving DSDT table memory at [mem 0x8c544268-0x8c58066b] Sep 13 03:03:50.558050 kernel: ACPI: Reserving FACS table memory at [mem 0x8c662f80-0x8c662fbf] Sep 13 03:03:50.558054 kernel: ACPI: Reserving APIC table memory at [mem 0x8c580788-0x8c5808b3] Sep 13 03:03:50.558059 kernel: ACPI: Reserving FPDT table memory at [mem 0x8c5808b8-0x8c5808fb] Sep 13 03:03:50.558063 kernel: ACPI: Reserving FIDT table memory at [mem 0x8c580900-0x8c58099b] Sep 13 03:03:50.558069 kernel: ACPI: Reserving MCFG table memory at [mem 0x8c5809a0-0x8c5809db] Sep 13 03:03:50.558073 kernel: ACPI: Reserving SPMI table memory at [mem 0x8c5809e0-0x8c580a20] Sep 13 03:03:50.558078 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c580a28-0x8c582543] Sep 13 03:03:50.558083 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c582548-0x8c58570d] Sep 13 03:03:50.558087 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c585710-0x8c587a3a] Sep 13 03:03:50.558092 kernel: ACPI: Reserving HPET table memory at [mem 0x8c587a40-0x8c587a77] Sep 13 03:03:50.558096 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c587a78-0x8c588a25] Sep 13 03:03:50.558101 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c588a28-0x8c58931b] Sep 13 03:03:50.558105 kernel: ACPI: Reserving UEFI table memory at [mem 0x8c589320-0x8c589361] Sep 13 03:03:50.558111 kernel: ACPI: Reserving LPIT table memory at [mem 0x8c589368-0x8c5893fb] Sep 13 03:03:50.558115 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c589400-0x8c58bbdd] Sep 13 03:03:50.558120 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58bbe0-0x8c58d0c1] Sep 13 03:03:50.558125 kernel: ACPI: Reserving DBGP table memory at [mem 0x8c58d0c8-0x8c58d0fb] Sep 13 03:03:50.558129 kernel: ACPI: Reserving DBG2 table memory at [mem 0x8c58d100-0x8c58d153] Sep 13 03:03:50.558134 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58d158-0x8c58ecbe] Sep 13 03:03:50.558138 kernel: ACPI: Reserving DMAR table memory at [mem 0x8c58ecc0-0x8c58ed2f] Sep 13 03:03:50.558143 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58ed30-0x8c58ee73] Sep 13 03:03:50.558148 kernel: ACPI: Reserving TPM2 table memory at [mem 0x8c58ee78-0x8c58eeab] Sep 13 03:03:50.558153 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c58eeb0-0x8c58fc3e] Sep 13 03:03:50.558157 kernel: ACPI: Reserving WSMT table memory at [mem 0x8c58fc40-0x8c58fc67] Sep 13 03:03:50.558162 kernel: ACPI: Reserving EINJ table memory at [mem 0x8c58fc68-0x8c58fd97] Sep 13 03:03:50.558167 kernel: ACPI: Reserving ERST table memory at [mem 0x8c58fd98-0x8c58ffc7] Sep 13 03:03:50.558171 kernel: ACPI: Reserving BERT table memory at [mem 0x8c58ffc8-0x8c58fff7] Sep 13 03:03:50.558176 kernel: ACPI: Reserving HEST table memory at [mem 0x8c58fff8-0x8c590273] Sep 13 03:03:50.558180 kernel: ACPI: Reserving SSDT table memory at [mem 0x8c590278-0x8c5903d9] Sep 13 03:03:50.558185 kernel: No NUMA configuration found Sep 13 03:03:50.558190 kernel: Faking a node at [mem 0x0000000000000000-0x000000086effffff] Sep 13 03:03:50.558195 kernel: NODE_DATA(0) allocated [mem 0x86effa000-0x86effffff] Sep 13 03:03:50.558200 kernel: Zone ranges: Sep 13 03:03:50.558204 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 13 03:03:50.558209 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Sep 13 03:03:50.558214 kernel: Normal [mem 0x0000000100000000-0x000000086effffff] Sep 13 03:03:50.558218 kernel: Movable zone start for each node Sep 13 03:03:50.558223 kernel: Early memory node ranges Sep 13 03:03:50.558228 kernel: node 0: [mem 0x0000000000001000-0x0000000000098fff] Sep 13 03:03:50.558232 kernel: node 0: [mem 0x0000000000100000-0x000000003fffffff] Sep 13 03:03:50.558237 kernel: node 0: [mem 0x0000000040400000-0x0000000080fcefff] Sep 13 03:03:50.558242 kernel: node 0: [mem 0x0000000080fd1000-0x000000008afc2fff] Sep 13 03:03:50.558247 kernel: node 0: [mem 0x000000008c0a8000-0x000000008c230fff] Sep 13 03:03:50.558251 kernel: node 0: [mem 0x000000008eeff000-0x000000008eefffff] Sep 13 03:03:50.558256 kernel: node 0: [mem 0x0000000100000000-0x000000086effffff] Sep 13 03:03:50.558263 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000086effffff] Sep 13 03:03:50.558268 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 13 03:03:50.558276 kernel: On node 0, zone DMA: 103 pages in unavailable ranges Sep 13 03:03:50.558282 kernel: On node 0, zone DMA32: 1024 pages in unavailable ranges Sep 13 03:03:50.558286 kernel: On node 0, zone DMA32: 2 pages in unavailable ranges Sep 13 03:03:50.558291 kernel: On node 0, zone DMA32: 4325 pages in unavailable ranges Sep 13 03:03:50.558297 kernel: On node 0, zone DMA32: 11470 pages in unavailable ranges Sep 13 03:03:50.558302 kernel: On node 0, zone Normal: 4352 pages in unavailable ranges Sep 13 03:03:50.558307 kernel: On node 0, zone Normal: 4096 pages in unavailable ranges Sep 13 03:03:50.558326 kernel: ACPI: PM-Timer IO Port: 0x1808 Sep 13 03:03:50.558331 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Sep 13 03:03:50.558336 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Sep 13 03:03:50.558341 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Sep 13 03:03:50.558347 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Sep 13 03:03:50.558351 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Sep 13 03:03:50.558356 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Sep 13 03:03:50.558361 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Sep 13 03:03:50.558366 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Sep 13 03:03:50.558371 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Sep 13 03:03:50.558376 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Sep 13 03:03:50.558381 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Sep 13 03:03:50.558385 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Sep 13 03:03:50.558391 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Sep 13 03:03:50.558396 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Sep 13 03:03:50.558401 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Sep 13 03:03:50.558405 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Sep 13 03:03:50.558410 kernel: IOAPIC[0]: apic_id 2, version 32, address 0xfec00000, GSI 0-119 Sep 13 03:03:50.558415 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Sep 13 03:03:50.558420 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 13 03:03:50.558425 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 13 03:03:50.558430 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Sep 13 03:03:50.558436 kernel: TSC deadline timer available Sep 13 03:03:50.558440 kernel: smpboot: Allowing 16 CPUs, 0 hotplug CPUs Sep 13 03:03:50.558445 kernel: [mem 0x90000000-0xdfffffff] available for PCI devices Sep 13 03:03:50.558450 kernel: Booting paravirtualized kernel on bare hardware Sep 13 03:03:50.558455 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 13 03:03:50.558460 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:16 nr_node_ids:1 Sep 13 03:03:50.558465 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Sep 13 03:03:50.558470 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Sep 13 03:03:50.558475 kernel: pcpu-alloc: [0] 00 01 02 03 04 05 06 07 [0] 08 09 10 11 12 13 14 15 Sep 13 03:03:50.558480 kernel: Built 1 zonelists, mobility grouping on. Total pages: 8232405 Sep 13 03:03:50.558485 kernel: Policy zone: Normal Sep 13 03:03:50.558490 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=65d14b740db9e581daa1d0206188b16d2f1a39e5c5e0878b6855323cd7c584ec Sep 13 03:03:50.558496 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 13 03:03:50.558500 kernel: Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes, linear) Sep 13 03:03:50.558505 kernel: Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear) Sep 13 03:03:50.558510 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 13 03:03:50.558515 kernel: Memory: 32722564K/33452940K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47492K init, 4088K bss, 730116K reserved, 0K cma-reserved) Sep 13 03:03:50.558521 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=16, Nodes=1 Sep 13 03:03:50.558526 kernel: ftrace: allocating 34614 entries in 136 pages Sep 13 03:03:50.558531 kernel: ftrace: allocated 136 pages with 2 groups Sep 13 03:03:50.558536 kernel: rcu: Hierarchical RCU implementation. Sep 13 03:03:50.558541 kernel: rcu: RCU event tracing is enabled. Sep 13 03:03:50.558546 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=16. Sep 13 03:03:50.558551 kernel: Rude variant of Tasks RCU enabled. Sep 13 03:03:50.558556 kernel: Tracing variant of Tasks RCU enabled. Sep 13 03:03:50.558561 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 13 03:03:50.558567 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=16 Sep 13 03:03:50.558572 kernel: NR_IRQS: 33024, nr_irqs: 2184, preallocated irqs: 16 Sep 13 03:03:50.558577 kernel: random: crng init done Sep 13 03:03:50.558581 kernel: Console: colour dummy device 80x25 Sep 13 03:03:50.558586 kernel: printk: console [tty0] enabled Sep 13 03:03:50.558591 kernel: printk: console [ttyS1] enabled Sep 13 03:03:50.558596 kernel: ACPI: Core revision 20210730 Sep 13 03:03:50.558601 kernel: hpet: HPET dysfunctional in PC10. Force disabled. Sep 13 03:03:50.558606 kernel: APIC: Switch to symmetric I/O mode setup Sep 13 03:03:50.558611 kernel: DMAR: Host address width 39 Sep 13 03:03:50.558616 kernel: DMAR: DRHD base: 0x000000fed91000 flags: 0x1 Sep 13 03:03:50.558621 kernel: DMAR: dmar0: reg_base_addr fed91000 ver 1:0 cap d2008c40660462 ecap f050da Sep 13 03:03:50.558626 kernel: DMAR: RMRR base: 0x0000008cf10000 end: 0x0000008d159fff Sep 13 03:03:50.558631 kernel: DMAR-IR: IOAPIC id 2 under DRHD base 0xfed91000 IOMMU 0 Sep 13 03:03:50.558636 kernel: DMAR-IR: HPET id 0 under DRHD base 0xfed91000 Sep 13 03:03:50.558641 kernel: DMAR-IR: Queued invalidation will be enabled to support x2apic and Intr-remapping. Sep 13 03:03:50.558646 kernel: DMAR-IR: Enabled IRQ remapping in x2apic mode Sep 13 03:03:50.558650 kernel: x2apic enabled Sep 13 03:03:50.558656 kernel: Switched APIC routing to cluster x2apic. Sep 13 03:03:50.558661 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x3101f59f5e6, max_idle_ns: 440795259996 ns Sep 13 03:03:50.558666 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 6799.81 BogoMIPS (lpj=3399906) Sep 13 03:03:50.558671 kernel: CPU0: Thermal monitoring enabled (TM1) Sep 13 03:03:50.558676 kernel: process: using mwait in idle threads Sep 13 03:03:50.558680 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Sep 13 03:03:50.558685 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Sep 13 03:03:50.558690 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 13 03:03:50.558695 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Sep 13 03:03:50.558700 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Sep 13 03:03:50.558705 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Sep 13 03:03:50.558710 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Sep 13 03:03:50.558715 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Sep 13 03:03:50.558720 kernel: RETBleed: Mitigation: Enhanced IBRS Sep 13 03:03:50.558724 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Sep 13 03:03:50.558729 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Sep 13 03:03:50.558734 kernel: TAA: Mitigation: TSX disabled Sep 13 03:03:50.558739 kernel: MMIO Stale Data: Mitigation: Clear CPU buffers Sep 13 03:03:50.558744 kernel: SRBDS: Mitigation: Microcode Sep 13 03:03:50.558748 kernel: GDS: Vulnerable: No microcode Sep 13 03:03:50.558754 kernel: active return thunk: its_return_thunk Sep 13 03:03:50.558759 kernel: ITS: Mitigation: Aligned branch/return thunks Sep 13 03:03:50.558764 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 13 03:03:50.558768 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 13 03:03:50.558773 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 13 03:03:50.558778 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Sep 13 03:03:50.558783 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Sep 13 03:03:50.558788 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 13 03:03:50.558792 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Sep 13 03:03:50.558797 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Sep 13 03:03:50.558802 kernel: x86/fpu: Enabled xstate features 0x1f, context size is 960 bytes, using 'compacted' format. Sep 13 03:03:50.558807 kernel: Freeing SMP alternatives memory: 32K Sep 13 03:03:50.558812 kernel: pid_max: default: 32768 minimum: 301 Sep 13 03:03:50.558817 kernel: LSM: Security Framework initializing Sep 13 03:03:50.558822 kernel: SELinux: Initializing. Sep 13 03:03:50.558827 kernel: Mount-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 13 03:03:50.558831 kernel: Mountpoint-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 13 03:03:50.558837 kernel: smpboot: Estimated ratio of average max frequency by base frequency (times 1024): 1445 Sep 13 03:03:50.558841 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Sep 13 03:03:50.558846 kernel: Performance Events: PEBS fmt3+, Skylake events, 32-deep LBR, full-width counters, Intel PMU driver. Sep 13 03:03:50.558851 kernel: ... version: 4 Sep 13 03:03:50.558856 kernel: ... bit width: 48 Sep 13 03:03:50.558862 kernel: ... generic registers: 4 Sep 13 03:03:50.558867 kernel: ... value mask: 0000ffffffffffff Sep 13 03:03:50.558871 kernel: ... max period: 00007fffffffffff Sep 13 03:03:50.558876 kernel: ... fixed-purpose events: 3 Sep 13 03:03:50.558881 kernel: ... event mask: 000000070000000f Sep 13 03:03:50.558886 kernel: signal: max sigframe size: 2032 Sep 13 03:03:50.558891 kernel: rcu: Hierarchical SRCU implementation. Sep 13 03:03:50.558896 kernel: NMI watchdog: Enabled. Permanently consumes one hw-PMU counter. Sep 13 03:03:50.558901 kernel: smp: Bringing up secondary CPUs ... Sep 13 03:03:50.558905 kernel: x86: Booting SMP configuration: Sep 13 03:03:50.558911 kernel: .... node #0, CPUs: #1 #2 #3 #4 #5 #6 #7 #8 Sep 13 03:03:50.558916 kernel: Transient Scheduler Attacks: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Sep 13 03:03:50.558921 kernel: #9 #10 #11 #12 #13 #14 #15 Sep 13 03:03:50.558926 kernel: smp: Brought up 1 node, 16 CPUs Sep 13 03:03:50.558931 kernel: smpboot: Max logical packages: 1 Sep 13 03:03:50.558936 kernel: smpboot: Total of 16 processors activated (108796.99 BogoMIPS) Sep 13 03:03:50.558941 kernel: devtmpfs: initialized Sep 13 03:03:50.558945 kernel: x86/mm: Memory block size: 128MB Sep 13 03:03:50.558951 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x80fcf000-0x80fcffff] (4096 bytes) Sep 13 03:03:50.558956 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x8c231000-0x8c662fff] (4399104 bytes) Sep 13 03:03:50.558961 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 13 03:03:50.558966 kernel: futex hash table entries: 4096 (order: 6, 262144 bytes, linear) Sep 13 03:03:50.558971 kernel: pinctrl core: initialized pinctrl subsystem Sep 13 03:03:50.558976 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 13 03:03:50.558980 kernel: audit: initializing netlink subsys (disabled) Sep 13 03:03:50.558985 kernel: audit: type=2000 audit(1757732625.041:1): state=initialized audit_enabled=0 res=1 Sep 13 03:03:50.558990 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 13 03:03:50.558996 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 13 03:03:50.559000 kernel: cpuidle: using governor menu Sep 13 03:03:50.559005 kernel: ACPI: bus type PCI registered Sep 13 03:03:50.559010 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 13 03:03:50.559015 kernel: dca service started, version 1.12.1 Sep 13 03:03:50.559020 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xe0000000-0xefffffff] (base 0xe0000000) Sep 13 03:03:50.559025 kernel: PCI: MMCONFIG at [mem 0xe0000000-0xefffffff] reserved in E820 Sep 13 03:03:50.559029 kernel: PCI: Using configuration type 1 for base access Sep 13 03:03:50.559034 kernel: ENERGY_PERF_BIAS: Set to 'normal', was 'performance' Sep 13 03:03:50.559040 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 13 03:03:50.559045 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 13 03:03:50.559050 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 13 03:03:50.559054 kernel: ACPI: Added _OSI(Module Device) Sep 13 03:03:50.559059 kernel: ACPI: Added _OSI(Processor Device) Sep 13 03:03:50.559064 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 13 03:03:50.559069 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 13 03:03:50.559074 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 13 03:03:50.559079 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 13 03:03:50.559084 kernel: ACPI: 12 ACPI AML tables successfully acquired and loaded Sep 13 03:03:50.559089 kernel: ACPI: Dynamic OEM Table Load: Sep 13 03:03:50.559094 kernel: ACPI: SSDT 0xFFFF972C4021A900 0000F4 (v02 PmRef Cpu0Psd 00003000 INTL 20160527) Sep 13 03:03:50.559099 kernel: ACPI: \_SB_.PR00: _OSC native thermal LVT Acked Sep 13 03:03:50.559104 kernel: ACPI: Dynamic OEM Table Load: Sep 13 03:03:50.559109 kernel: ACPI: SSDT 0xFFFF972C41AE2C00 000400 (v02 PmRef Cpu0Cst 00003001 INTL 20160527) Sep 13 03:03:50.559114 kernel: ACPI: Dynamic OEM Table Load: Sep 13 03:03:50.559118 kernel: ACPI: SSDT 0xFFFF972C41A5B000 000683 (v02 PmRef Cpu0Ist 00003000 INTL 20160527) Sep 13 03:03:50.559123 kernel: ACPI: Dynamic OEM Table Load: Sep 13 03:03:50.559128 kernel: ACPI: SSDT 0xFFFF972C41B49800 0005FC (v02 PmRef ApIst 00003000 INTL 20160527) Sep 13 03:03:50.559133 kernel: ACPI: Dynamic OEM Table Load: Sep 13 03:03:50.559138 kernel: ACPI: SSDT 0xFFFF972C4014D000 000AB0 (v02 PmRef ApPsd 00003000 INTL 20160527) Sep 13 03:03:50.559143 kernel: ACPI: Dynamic OEM Table Load: Sep 13 03:03:50.559148 kernel: ACPI: SSDT 0xFFFF972C41AE3400 00030A (v02 PmRef ApCst 00003000 INTL 20160527) Sep 13 03:03:50.559153 kernel: ACPI: Interpreter enabled Sep 13 03:03:50.559158 kernel: ACPI: PM: (supports S0 S5) Sep 13 03:03:50.559162 kernel: ACPI: Using IOAPIC for interrupt routing Sep 13 03:03:50.559167 kernel: HEST: Enabling Firmware First mode for corrected errors. Sep 13 03:03:50.559172 kernel: mce: [Firmware Bug]: Ignoring request to disable invalid MCA bank 14. Sep 13 03:03:50.559178 kernel: HEST: Table parsing has been initialized. Sep 13 03:03:50.559183 kernel: GHES: APEI firmware first mode is enabled by APEI bit and WHEA _OSC. Sep 13 03:03:50.559188 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 13 03:03:50.559192 kernel: ACPI: Enabled 9 GPEs in block 00 to 7F Sep 13 03:03:50.559197 kernel: ACPI: PM: Power Resource [USBC] Sep 13 03:03:50.559202 kernel: ACPI: PM: Power Resource [V0PR] Sep 13 03:03:50.559207 kernel: ACPI: PM: Power Resource [V1PR] Sep 13 03:03:50.559212 kernel: ACPI: PM: Power Resource [V2PR] Sep 13 03:03:50.559217 kernel: ACPI: PM: Power Resource [WRST] Sep 13 03:03:50.559222 kernel: ACPI: PM: Power Resource [FN00] Sep 13 03:03:50.559227 kernel: ACPI: PM: Power Resource [FN01] Sep 13 03:03:50.559232 kernel: ACPI: PM: Power Resource [FN02] Sep 13 03:03:50.559236 kernel: ACPI: PM: Power Resource [FN03] Sep 13 03:03:50.559241 kernel: ACPI: PM: Power Resource [FN04] Sep 13 03:03:50.559246 kernel: ACPI: PM: Power Resource [PIN] Sep 13 03:03:50.559251 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-fe]) Sep 13 03:03:50.559353 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 13 03:03:50.559402 kernel: acpi PNP0A08:00: _OSC: platform does not support [AER] Sep 13 03:03:50.559444 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability LTR] Sep 13 03:03:50.559452 kernel: PCI host bridge to bus 0000:00 Sep 13 03:03:50.559496 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Sep 13 03:03:50.559536 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Sep 13 03:03:50.559574 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Sep 13 03:03:50.559613 kernel: pci_bus 0000:00: root bus resource [mem 0x90000000-0xdfffffff window] Sep 13 03:03:50.559652 kernel: pci_bus 0000:00: root bus resource [mem 0xfc800000-0xfe7fffff window] Sep 13 03:03:50.559690 kernel: pci_bus 0000:00: root bus resource [bus 00-fe] Sep 13 03:03:50.559742 kernel: pci 0000:00:00.0: [8086:3e31] type 00 class 0x060000 Sep 13 03:03:50.559793 kernel: pci 0000:00:01.0: [8086:1901] type 01 class 0x060400 Sep 13 03:03:50.559838 kernel: pci 0000:00:01.0: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.559886 kernel: pci 0000:00:08.0: [8086:1911] type 00 class 0x088000 Sep 13 03:03:50.559931 kernel: pci 0000:00:08.0: reg 0x10: [mem 0x95520000-0x95520fff 64bit] Sep 13 03:03:50.559979 kernel: pci 0000:00:12.0: [8086:a379] type 00 class 0x118000 Sep 13 03:03:50.560022 kernel: pci 0000:00:12.0: reg 0x10: [mem 0x9551f000-0x9551ffff 64bit] Sep 13 03:03:50.560069 kernel: pci 0000:00:14.0: [8086:a36d] type 00 class 0x0c0330 Sep 13 03:03:50.560114 kernel: pci 0000:00:14.0: reg 0x10: [mem 0x95500000-0x9550ffff 64bit] Sep 13 03:03:50.560159 kernel: pci 0000:00:14.0: PME# supported from D3hot D3cold Sep 13 03:03:50.560206 kernel: pci 0000:00:14.2: [8086:a36f] type 00 class 0x050000 Sep 13 03:03:50.560252 kernel: pci 0000:00:14.2: reg 0x10: [mem 0x95512000-0x95513fff 64bit] Sep 13 03:03:50.560320 kernel: pci 0000:00:14.2: reg 0x18: [mem 0x9551e000-0x9551efff 64bit] Sep 13 03:03:50.560369 kernel: pci 0000:00:14.5: [8086:a375] type 00 class 0x080501 Sep 13 03:03:50.560413 kernel: pci 0000:00:14.5: reg 0x10: [mem 0x9551d000-0x9551dfff 64bit] Sep 13 03:03:50.560464 kernel: pci 0000:00:15.0: [8086:a368] type 00 class 0x0c8000 Sep 13 03:03:50.560507 kernel: pci 0000:00:15.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Sep 13 03:03:50.560558 kernel: pci 0000:00:15.1: [8086:a369] type 00 class 0x0c8000 Sep 13 03:03:50.560602 kernel: pci 0000:00:15.1: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Sep 13 03:03:50.560651 kernel: pci 0000:00:16.0: [8086:a360] type 00 class 0x078000 Sep 13 03:03:50.560695 kernel: pci 0000:00:16.0: reg 0x10: [mem 0x9551a000-0x9551afff 64bit] Sep 13 03:03:50.560738 kernel: pci 0000:00:16.0: PME# supported from D3hot Sep 13 03:03:50.560786 kernel: pci 0000:00:16.1: [8086:a361] type 00 class 0x078000 Sep 13 03:03:50.560831 kernel: pci 0000:00:16.1: reg 0x10: [mem 0x95519000-0x95519fff 64bit] Sep 13 03:03:50.560875 kernel: pci 0000:00:16.1: PME# supported from D3hot Sep 13 03:03:50.560923 kernel: pci 0000:00:16.4: [8086:a364] type 00 class 0x078000 Sep 13 03:03:50.560967 kernel: pci 0000:00:16.4: reg 0x10: [mem 0x95518000-0x95518fff 64bit] Sep 13 03:03:50.561010 kernel: pci 0000:00:16.4: PME# supported from D3hot Sep 13 03:03:50.561057 kernel: pci 0000:00:17.0: [8086:a352] type 00 class 0x010601 Sep 13 03:03:50.561107 kernel: pci 0000:00:17.0: reg 0x10: [mem 0x95510000-0x95511fff] Sep 13 03:03:50.561154 kernel: pci 0000:00:17.0: reg 0x14: [mem 0x95517000-0x955170ff] Sep 13 03:03:50.561198 kernel: pci 0000:00:17.0: reg 0x18: [io 0x6050-0x6057] Sep 13 03:03:50.561242 kernel: pci 0000:00:17.0: reg 0x1c: [io 0x6040-0x6043] Sep 13 03:03:50.561288 kernel: pci 0000:00:17.0: reg 0x20: [io 0x6020-0x603f] Sep 13 03:03:50.561333 kernel: pci 0000:00:17.0: reg 0x24: [mem 0x95516000-0x955167ff] Sep 13 03:03:50.561377 kernel: pci 0000:00:17.0: PME# supported from D3hot Sep 13 03:03:50.561427 kernel: pci 0000:00:1b.0: [8086:a340] type 01 class 0x060400 Sep 13 03:03:50.561474 kernel: pci 0000:00:1b.0: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.561524 kernel: pci 0000:00:1b.4: [8086:a32c] type 01 class 0x060400 Sep 13 03:03:50.561569 kernel: pci 0000:00:1b.4: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.561618 kernel: pci 0000:00:1b.5: [8086:a32d] type 01 class 0x060400 Sep 13 03:03:50.561662 kernel: pci 0000:00:1b.5: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.561712 kernel: pci 0000:00:1c.0: [8086:a338] type 01 class 0x060400 Sep 13 03:03:50.561757 kernel: pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.561807 kernel: pci 0000:00:1c.3: [8086:a33b] type 01 class 0x060400 Sep 13 03:03:50.561852 kernel: pci 0000:00:1c.3: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.561902 kernel: pci 0000:00:1e.0: [8086:a328] type 00 class 0x078000 Sep 13 03:03:50.561948 kernel: pci 0000:00:1e.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] Sep 13 03:03:50.561995 kernel: pci 0000:00:1f.0: [8086:a309] type 00 class 0x060100 Sep 13 03:03:50.562047 kernel: pci 0000:00:1f.4: [8086:a323] type 00 class 0x0c0500 Sep 13 03:03:50.562091 kernel: pci 0000:00:1f.4: reg 0x10: [mem 0x95514000-0x955140ff 64bit] Sep 13 03:03:50.562136 kernel: pci 0000:00:1f.4: reg 0x20: [io 0xefa0-0xefbf] Sep 13 03:03:50.562183 kernel: pci 0000:00:1f.5: [8086:a324] type 00 class 0x0c8000 Sep 13 03:03:50.562230 kernel: pci 0000:00:1f.5: reg 0x10: [mem 0xfe010000-0xfe010fff] Sep 13 03:03:50.562285 kernel: pci 0000:01:00.0: [15b3:1015] type 00 class 0x020000 Sep 13 03:03:50.562332 kernel: pci 0000:01:00.0: reg 0x10: [mem 0x92000000-0x93ffffff 64bit pref] Sep 13 03:03:50.562379 kernel: pci 0000:01:00.0: reg 0x30: [mem 0x95200000-0x952fffff pref] Sep 13 03:03:50.562424 kernel: pci 0000:01:00.0: PME# supported from D3cold Sep 13 03:03:50.562471 kernel: pci 0000:01:00.0: reg 0x1a4: [mem 0x00000000-0x000fffff 64bit pref] Sep 13 03:03:50.562532 kernel: pci 0000:01:00.0: VF(n) BAR0 space: [mem 0x00000000-0x007fffff 64bit pref] (contains BAR0 for 8 VFs) Sep 13 03:03:50.562585 kernel: pci 0000:01:00.1: [15b3:1015] type 00 class 0x020000 Sep 13 03:03:50.562631 kernel: pci 0000:01:00.1: reg 0x10: [mem 0x90000000-0x91ffffff 64bit pref] Sep 13 03:03:50.562677 kernel: pci 0000:01:00.1: reg 0x30: [mem 0x95100000-0x951fffff pref] Sep 13 03:03:50.562721 kernel: pci 0000:01:00.1: PME# supported from D3cold Sep 13 03:03:50.562767 kernel: pci 0000:01:00.1: reg 0x1a4: [mem 0x00000000-0x000fffff 64bit pref] Sep 13 03:03:50.562811 kernel: pci 0000:01:00.1: VF(n) BAR0 space: [mem 0x00000000-0x007fffff 64bit pref] (contains BAR0 for 8 VFs) Sep 13 03:03:50.562857 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Sep 13 03:03:50.562901 kernel: pci 0000:00:01.0: bridge window [mem 0x95100000-0x952fffff] Sep 13 03:03:50.562944 kernel: pci 0000:00:01.0: bridge window [mem 0x90000000-0x93ffffff 64bit pref] Sep 13 03:03:50.562988 kernel: pci 0000:00:1b.0: PCI bridge to [bus 02] Sep 13 03:03:50.563038 kernel: pci 0000:03:00.0: working around ROM BAR overlap defect Sep 13 03:03:50.563084 kernel: pci 0000:03:00.0: [8086:1533] type 00 class 0x020000 Sep 13 03:03:50.563129 kernel: pci 0000:03:00.0: reg 0x10: [mem 0x95400000-0x9547ffff] Sep 13 03:03:50.563173 kernel: pci 0000:03:00.0: reg 0x18: [io 0x5000-0x501f] Sep 13 03:03:50.563220 kernel: pci 0000:03:00.0: reg 0x1c: [mem 0x95480000-0x95483fff] Sep 13 03:03:50.563289 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.563355 kernel: pci 0000:00:1b.4: PCI bridge to [bus 03] Sep 13 03:03:50.563398 kernel: pci 0000:00:1b.4: bridge window [io 0x5000-0x5fff] Sep 13 03:03:50.563443 kernel: pci 0000:00:1b.4: bridge window [mem 0x95400000-0x954fffff] Sep 13 03:03:50.563491 kernel: pci 0000:04:00.0: working around ROM BAR overlap defect Sep 13 03:03:50.563538 kernel: pci 0000:04:00.0: [8086:1533] type 00 class 0x020000 Sep 13 03:03:50.563585 kernel: pci 0000:04:00.0: reg 0x10: [mem 0x95300000-0x9537ffff] Sep 13 03:03:50.563630 kernel: pci 0000:04:00.0: reg 0x18: [io 0x4000-0x401f] Sep 13 03:03:50.563674 kernel: pci 0000:04:00.0: reg 0x1c: [mem 0x95380000-0x95383fff] Sep 13 03:03:50.563719 kernel: pci 0000:04:00.0: PME# supported from D0 D3hot D3cold Sep 13 03:03:50.563764 kernel: pci 0000:00:1b.5: PCI bridge to [bus 04] Sep 13 03:03:50.563808 kernel: pci 0000:00:1b.5: bridge window [io 0x4000-0x4fff] Sep 13 03:03:50.563883 kernel: pci 0000:00:1b.5: bridge window [mem 0x95300000-0x953fffff] Sep 13 03:03:50.563948 kernel: pci 0000:00:1c.0: PCI bridge to [bus 05] Sep 13 03:03:50.564002 kernel: pci 0000:06:00.0: [1a03:1150] type 01 class 0x060400 Sep 13 03:03:50.564048 kernel: pci 0000:06:00.0: enabling Extended Tags Sep 13 03:03:50.564094 kernel: pci 0000:06:00.0: supports D1 D2 Sep 13 03:03:50.564139 kernel: pci 0000:06:00.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 13 03:03:50.564184 kernel: pci 0000:00:1c.3: PCI bridge to [bus 06-07] Sep 13 03:03:50.564227 kernel: pci 0000:00:1c.3: bridge window [io 0x3000-0x3fff] Sep 13 03:03:50.564291 kernel: pci 0000:00:1c.3: bridge window [mem 0x94000000-0x950fffff] Sep 13 03:03:50.564361 kernel: pci_bus 0000:07: extended config space not accessible Sep 13 03:03:50.564413 kernel: pci 0000:07:00.0: [1a03:2000] type 00 class 0x030000 Sep 13 03:03:50.564461 kernel: pci 0000:07:00.0: reg 0x10: [mem 0x94000000-0x94ffffff] Sep 13 03:03:50.564509 kernel: pci 0000:07:00.0: reg 0x14: [mem 0x95000000-0x9501ffff] Sep 13 03:03:50.564555 kernel: pci 0000:07:00.0: reg 0x18: [io 0x3000-0x307f] Sep 13 03:03:50.564604 kernel: pci 0000:07:00.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Sep 13 03:03:50.564651 kernel: pci 0000:07:00.0: supports D1 D2 Sep 13 03:03:50.564701 kernel: pci 0000:07:00.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 13 03:03:50.564746 kernel: pci 0000:06:00.0: PCI bridge to [bus 07] Sep 13 03:03:50.564792 kernel: pci 0000:06:00.0: bridge window [io 0x3000-0x3fff] Sep 13 03:03:50.564836 kernel: pci 0000:06:00.0: bridge window [mem 0x94000000-0x950fffff] Sep 13 03:03:50.564844 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 0 Sep 13 03:03:50.564849 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 1 Sep 13 03:03:50.564855 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 0 Sep 13 03:03:50.564860 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 0 Sep 13 03:03:50.564866 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 0 Sep 13 03:03:50.564872 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 0 Sep 13 03:03:50.564877 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 0 Sep 13 03:03:50.564882 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 0 Sep 13 03:03:50.564887 kernel: iommu: Default domain type: Translated Sep 13 03:03:50.564893 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 13 03:03:50.564941 kernel: pci 0000:07:00.0: vgaarb: setting as boot VGA device Sep 13 03:03:50.564987 kernel: pci 0000:07:00.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Sep 13 03:03:50.565035 kernel: pci 0000:07:00.0: vgaarb: bridge control possible Sep 13 03:03:50.565044 kernel: vgaarb: loaded Sep 13 03:03:50.565049 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 13 03:03:50.565055 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 13 03:03:50.565060 kernel: PTP clock support registered Sep 13 03:03:50.565066 kernel: PCI: Using ACPI for IRQ routing Sep 13 03:03:50.565071 kernel: PCI: pci_cache_line_size set to 64 bytes Sep 13 03:03:50.565076 kernel: e820: reserve RAM buffer [mem 0x00099800-0x0009ffff] Sep 13 03:03:50.565081 kernel: e820: reserve RAM buffer [mem 0x80fcf000-0x83ffffff] Sep 13 03:03:50.565087 kernel: e820: reserve RAM buffer [mem 0x8afc3000-0x8bffffff] Sep 13 03:03:50.565093 kernel: e820: reserve RAM buffer [mem 0x8c231000-0x8fffffff] Sep 13 03:03:50.565098 kernel: e820: reserve RAM buffer [mem 0x8ef00000-0x8fffffff] Sep 13 03:03:50.565103 kernel: e820: reserve RAM buffer [mem 0x86f000000-0x86fffffff] Sep 13 03:03:50.565108 kernel: clocksource: Switched to clocksource tsc-early Sep 13 03:03:50.565113 kernel: VFS: Disk quotas dquot_6.6.0 Sep 13 03:03:50.565119 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 13 03:03:50.565124 kernel: pnp: PnP ACPI init Sep 13 03:03:50.565169 kernel: system 00:00: [mem 0x40000000-0x403fffff] has been reserved Sep 13 03:03:50.565215 kernel: pnp 00:02: [dma 0 disabled] Sep 13 03:03:50.565262 kernel: pnp 00:03: [dma 0 disabled] Sep 13 03:03:50.565348 kernel: system 00:04: [io 0x0680-0x069f] has been reserved Sep 13 03:03:50.565388 kernel: system 00:04: [io 0x164e-0x164f] has been reserved Sep 13 03:03:50.565430 kernel: system 00:05: [io 0x1854-0x1857] has been reserved Sep 13 03:03:50.565474 kernel: system 00:06: [mem 0xfed10000-0xfed17fff] has been reserved Sep 13 03:03:50.565515 kernel: system 00:06: [mem 0xfed18000-0xfed18fff] has been reserved Sep 13 03:03:50.565555 kernel: system 00:06: [mem 0xfed19000-0xfed19fff] has been reserved Sep 13 03:03:50.565594 kernel: system 00:06: [mem 0xe0000000-0xefffffff] has been reserved Sep 13 03:03:50.565633 kernel: system 00:06: [mem 0xfed20000-0xfed3ffff] has been reserved Sep 13 03:03:50.565672 kernel: system 00:06: [mem 0xfed90000-0xfed93fff] could not be reserved Sep 13 03:03:50.565712 kernel: system 00:06: [mem 0xfed45000-0xfed8ffff] has been reserved Sep 13 03:03:50.565752 kernel: system 00:06: [mem 0xfee00000-0xfeefffff] could not be reserved Sep 13 03:03:50.565796 kernel: system 00:07: [io 0x1800-0x18fe] could not be reserved Sep 13 03:03:50.565837 kernel: system 00:07: [mem 0xfd000000-0xfd69ffff] has been reserved Sep 13 03:03:50.565876 kernel: system 00:07: [mem 0xfd6c0000-0xfd6cffff] has been reserved Sep 13 03:03:50.565915 kernel: system 00:07: [mem 0xfd6f0000-0xfdffffff] has been reserved Sep 13 03:03:50.565954 kernel: system 00:07: [mem 0xfe000000-0xfe01ffff] could not be reserved Sep 13 03:03:50.565993 kernel: system 00:07: [mem 0xfe200000-0xfe7fffff] has been reserved Sep 13 03:03:50.566032 kernel: system 00:07: [mem 0xff000000-0xffffffff] has been reserved Sep 13 03:03:50.566077 kernel: system 00:08: [io 0x2000-0x20fe] has been reserved Sep 13 03:03:50.566085 kernel: pnp: PnP ACPI: found 10 devices Sep 13 03:03:50.566090 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 13 03:03:50.566095 kernel: NET: Registered PF_INET protocol family Sep 13 03:03:50.566101 kernel: IP idents hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 13 03:03:50.566106 kernel: tcp_listen_portaddr_hash hash table entries: 16384 (order: 6, 262144 bytes, linear) Sep 13 03:03:50.566111 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 13 03:03:50.566117 kernel: TCP established hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 13 03:03:50.566123 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Sep 13 03:03:50.566129 kernel: TCP: Hash tables configured (established 262144 bind 65536) Sep 13 03:03:50.566134 kernel: UDP hash table entries: 16384 (order: 7, 524288 bytes, linear) Sep 13 03:03:50.566140 kernel: UDP-Lite hash table entries: 16384 (order: 7, 524288 bytes, linear) Sep 13 03:03:50.566145 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 13 03:03:50.566150 kernel: NET: Registered PF_XDP protocol family Sep 13 03:03:50.566194 kernel: pci 0000:00:15.0: BAR 0: assigned [mem 0x95515000-0x95515fff 64bit] Sep 13 03:03:50.566239 kernel: pci 0000:00:15.1: BAR 0: assigned [mem 0x9551b000-0x9551bfff 64bit] Sep 13 03:03:50.566307 kernel: pci 0000:00:1e.0: BAR 0: assigned [mem 0x9551c000-0x9551cfff 64bit] Sep 13 03:03:50.566356 kernel: pci 0000:01:00.0: BAR 7: no space for [mem size 0x00800000 64bit pref] Sep 13 03:03:50.566402 kernel: pci 0000:01:00.0: BAR 7: failed to assign [mem size 0x00800000 64bit pref] Sep 13 03:03:50.566448 kernel: pci 0000:01:00.1: BAR 7: no space for [mem size 0x00800000 64bit pref] Sep 13 03:03:50.566494 kernel: pci 0000:01:00.1: BAR 7: failed to assign [mem size 0x00800000 64bit pref] Sep 13 03:03:50.566540 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Sep 13 03:03:50.566584 kernel: pci 0000:00:01.0: bridge window [mem 0x95100000-0x952fffff] Sep 13 03:03:50.566632 kernel: pci 0000:00:01.0: bridge window [mem 0x90000000-0x93ffffff 64bit pref] Sep 13 03:03:50.566676 kernel: pci 0000:00:1b.0: PCI bridge to [bus 02] Sep 13 03:03:50.566721 kernel: pci 0000:00:1b.4: PCI bridge to [bus 03] Sep 13 03:03:50.566766 kernel: pci 0000:00:1b.4: bridge window [io 0x5000-0x5fff] Sep 13 03:03:50.566810 kernel: pci 0000:00:1b.4: bridge window [mem 0x95400000-0x954fffff] Sep 13 03:03:50.566854 kernel: pci 0000:00:1b.5: PCI bridge to [bus 04] Sep 13 03:03:50.566900 kernel: pci 0000:00:1b.5: bridge window [io 0x4000-0x4fff] Sep 13 03:03:50.566945 kernel: pci 0000:00:1b.5: bridge window [mem 0x95300000-0x953fffff] Sep 13 03:03:50.566989 kernel: pci 0000:00:1c.0: PCI bridge to [bus 05] Sep 13 03:03:50.567035 kernel: pci 0000:06:00.0: PCI bridge to [bus 07] Sep 13 03:03:50.567080 kernel: pci 0000:06:00.0: bridge window [io 0x3000-0x3fff] Sep 13 03:03:50.567126 kernel: pci 0000:06:00.0: bridge window [mem 0x94000000-0x950fffff] Sep 13 03:03:50.567170 kernel: pci 0000:00:1c.3: PCI bridge to [bus 06-07] Sep 13 03:03:50.567214 kernel: pci 0000:00:1c.3: bridge window [io 0x3000-0x3fff] Sep 13 03:03:50.567259 kernel: pci 0000:00:1c.3: bridge window [mem 0x94000000-0x950fffff] Sep 13 03:03:50.567305 kernel: pci_bus 0000:00: Some PCI device resources are unassigned, try booting with pci=realloc Sep 13 03:03:50.567346 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Sep 13 03:03:50.567385 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Sep 13 03:03:50.567424 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Sep 13 03:03:50.567463 kernel: pci_bus 0000:00: resource 7 [mem 0x90000000-0xdfffffff window] Sep 13 03:03:50.567501 kernel: pci_bus 0000:00: resource 8 [mem 0xfc800000-0xfe7fffff window] Sep 13 03:03:50.567549 kernel: pci_bus 0000:01: resource 1 [mem 0x95100000-0x952fffff] Sep 13 03:03:50.567592 kernel: pci_bus 0000:01: resource 2 [mem 0x90000000-0x93ffffff 64bit pref] Sep 13 03:03:50.567640 kernel: pci_bus 0000:03: resource 0 [io 0x5000-0x5fff] Sep 13 03:03:50.567681 kernel: pci_bus 0000:03: resource 1 [mem 0x95400000-0x954fffff] Sep 13 03:03:50.567727 kernel: pci_bus 0000:04: resource 0 [io 0x4000-0x4fff] Sep 13 03:03:50.567768 kernel: pci_bus 0000:04: resource 1 [mem 0x95300000-0x953fffff] Sep 13 03:03:50.567813 kernel: pci_bus 0000:06: resource 0 [io 0x3000-0x3fff] Sep 13 03:03:50.567855 kernel: pci_bus 0000:06: resource 1 [mem 0x94000000-0x950fffff] Sep 13 03:03:50.567900 kernel: pci_bus 0000:07: resource 0 [io 0x3000-0x3fff] Sep 13 03:03:50.567944 kernel: pci_bus 0000:07: resource 1 [mem 0x94000000-0x950fffff] Sep 13 03:03:50.567951 kernel: PCI: CLS 64 bytes, default 64 Sep 13 03:03:50.567957 kernel: DMAR: No ATSR found Sep 13 03:03:50.567962 kernel: DMAR: No SATC found Sep 13 03:03:50.567968 kernel: DMAR: dmar0: Using Queued invalidation Sep 13 03:03:50.568011 kernel: pci 0000:00:00.0: Adding to iommu group 0 Sep 13 03:03:50.568057 kernel: pci 0000:00:01.0: Adding to iommu group 1 Sep 13 03:03:50.568104 kernel: pci 0000:00:08.0: Adding to iommu group 2 Sep 13 03:03:50.568149 kernel: pci 0000:00:12.0: Adding to iommu group 3 Sep 13 03:03:50.568193 kernel: pci 0000:00:14.0: Adding to iommu group 4 Sep 13 03:03:50.568237 kernel: pci 0000:00:14.2: Adding to iommu group 4 Sep 13 03:03:50.568285 kernel: pci 0000:00:14.5: Adding to iommu group 4 Sep 13 03:03:50.568329 kernel: pci 0000:00:15.0: Adding to iommu group 5 Sep 13 03:03:50.568373 kernel: pci 0000:00:15.1: Adding to iommu group 5 Sep 13 03:03:50.568417 kernel: pci 0000:00:16.0: Adding to iommu group 6 Sep 13 03:03:50.568463 kernel: pci 0000:00:16.1: Adding to iommu group 6 Sep 13 03:03:50.568507 kernel: pci 0000:00:16.4: Adding to iommu group 6 Sep 13 03:03:50.568550 kernel: pci 0000:00:17.0: Adding to iommu group 7 Sep 13 03:03:50.568594 kernel: pci 0000:00:1b.0: Adding to iommu group 8 Sep 13 03:03:50.568639 kernel: pci 0000:00:1b.4: Adding to iommu group 9 Sep 13 03:03:50.568683 kernel: pci 0000:00:1b.5: Adding to iommu group 10 Sep 13 03:03:50.568726 kernel: pci 0000:00:1c.0: Adding to iommu group 11 Sep 13 03:03:50.568771 kernel: pci 0000:00:1c.3: Adding to iommu group 12 Sep 13 03:03:50.568814 kernel: pci 0000:00:1e.0: Adding to iommu group 13 Sep 13 03:03:50.568861 kernel: pci 0000:00:1f.0: Adding to iommu group 14 Sep 13 03:03:50.568905 kernel: pci 0000:00:1f.4: Adding to iommu group 14 Sep 13 03:03:50.568949 kernel: pci 0000:00:1f.5: Adding to iommu group 14 Sep 13 03:03:50.568995 kernel: pci 0000:01:00.0: Adding to iommu group 1 Sep 13 03:03:50.569041 kernel: pci 0000:01:00.1: Adding to iommu group 1 Sep 13 03:03:50.569088 kernel: pci 0000:03:00.0: Adding to iommu group 15 Sep 13 03:03:50.569134 kernel: pci 0000:04:00.0: Adding to iommu group 16 Sep 13 03:03:50.569180 kernel: pci 0000:06:00.0: Adding to iommu group 17 Sep 13 03:03:50.569230 kernel: pci 0000:07:00.0: Adding to iommu group 17 Sep 13 03:03:50.569238 kernel: DMAR: Intel(R) Virtualization Technology for Directed I/O Sep 13 03:03:50.569243 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Sep 13 03:03:50.569249 kernel: software IO TLB: mapped [mem 0x0000000086fc3000-0x000000008afc3000] (64MB) Sep 13 03:03:50.569254 kernel: RAPL PMU: API unit is 2^-32 Joules, 3 fixed counters, 655360 ms ovfl timer Sep 13 03:03:50.569260 kernel: RAPL PMU: hw unit of domain pp0-core 2^-14 Joules Sep 13 03:03:50.569267 kernel: RAPL PMU: hw unit of domain package 2^-14 Joules Sep 13 03:03:50.569273 kernel: RAPL PMU: hw unit of domain dram 2^-14 Joules Sep 13 03:03:50.569322 kernel: platform rtc_cmos: registered platform RTC device (no PNP device found) Sep 13 03:03:50.569331 kernel: Initialise system trusted keyrings Sep 13 03:03:50.569336 kernel: workingset: timestamp_bits=39 max_order=23 bucket_order=0 Sep 13 03:03:50.569341 kernel: Key type asymmetric registered Sep 13 03:03:50.569347 kernel: Asymmetric key parser 'x509' registered Sep 13 03:03:50.569352 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 13 03:03:50.569357 kernel: io scheduler mq-deadline registered Sep 13 03:03:50.569363 kernel: io scheduler kyber registered Sep 13 03:03:50.569368 kernel: io scheduler bfq registered Sep 13 03:03:50.569413 kernel: pcieport 0000:00:01.0: PME: Signaling with IRQ 121 Sep 13 03:03:50.569459 kernel: pcieport 0000:00:1b.0: PME: Signaling with IRQ 122 Sep 13 03:03:50.569523 kernel: pcieport 0000:00:1b.4: PME: Signaling with IRQ 123 Sep 13 03:03:50.569567 kernel: pcieport 0000:00:1b.5: PME: Signaling with IRQ 124 Sep 13 03:03:50.569611 kernel: pcieport 0000:00:1c.0: PME: Signaling with IRQ 125 Sep 13 03:03:50.569654 kernel: pcieport 0000:00:1c.3: PME: Signaling with IRQ 126 Sep 13 03:03:50.569705 kernel: thermal LNXTHERM:00: registered as thermal_zone0 Sep 13 03:03:50.569714 kernel: ACPI: thermal: Thermal Zone [TZ00] (28 C) Sep 13 03:03:50.569719 kernel: ERST: Error Record Serialization Table (ERST) support is initialized. Sep 13 03:03:50.569725 kernel: pstore: Registered erst as persistent store backend Sep 13 03:03:50.569730 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 13 03:03:50.569735 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 13 03:03:50.569740 kernel: 00:02: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 13 03:03:50.569746 kernel: 00:03: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Sep 13 03:03:50.569751 kernel: hpet_acpi_add: no address or irqs in _CRS Sep 13 03:03:50.569795 kernel: tpm_tis MSFT0101:00: 2.0 TPM (device-id 0x1B, rev-id 16) Sep 13 03:03:50.569804 kernel: i8042: PNP: No PS/2 controller found. Sep 13 03:03:50.569845 kernel: rtc_cmos rtc_cmos: RTC can wake from S4 Sep 13 03:03:50.569885 kernel: rtc_cmos rtc_cmos: registered as rtc0 Sep 13 03:03:50.569926 kernel: rtc_cmos rtc_cmos: setting system clock to 2025-09-13T03:03:49 UTC (1757732629) Sep 13 03:03:50.569965 kernel: rtc_cmos rtc_cmos: alarms up to one month, y3k, 114 bytes nvram Sep 13 03:03:50.569972 kernel: intel_pstate: Intel P-state driver initializing Sep 13 03:03:50.569978 kernel: intel_pstate: Disabling energy efficiency optimization Sep 13 03:03:50.569985 kernel: intel_pstate: HWP enabled Sep 13 03:03:50.569990 kernel: vesafb: mode is 1024x768x8, linelength=1024, pages=0 Sep 13 03:03:50.569995 kernel: vesafb: scrolling: redraw Sep 13 03:03:50.570000 kernel: vesafb: Pseudocolor: size=0:8:8:8, shift=0:0:0:0 Sep 13 03:03:50.570006 kernel: vesafb: framebuffer at 0x94000000, mapped to 0x00000000c54368e5, using 768k, total 768k Sep 13 03:03:50.570011 kernel: Console: switching to colour frame buffer device 128x48 Sep 13 03:03:50.570016 kernel: fb0: VESA VGA frame buffer device Sep 13 03:03:50.570022 kernel: NET: Registered PF_INET6 protocol family Sep 13 03:03:50.570027 kernel: Segment Routing with IPv6 Sep 13 03:03:50.570033 kernel: In-situ OAM (IOAM) with IPv6 Sep 13 03:03:50.570038 kernel: NET: Registered PF_PACKET protocol family Sep 13 03:03:50.570043 kernel: Key type dns_resolver registered Sep 13 03:03:50.570048 kernel: microcode: sig=0x906ed, pf=0x2, revision=0xf4 Sep 13 03:03:50.570054 kernel: microcode: Microcode Update Driver: v2.2. Sep 13 03:03:50.570059 kernel: IPI shorthand broadcast: enabled Sep 13 03:03:50.570064 kernel: sched_clock: Marking stable (1693755013, 1340002880)->(4497514744, -1463756851) Sep 13 03:03:50.570069 kernel: registered taskstats version 1 Sep 13 03:03:50.570075 kernel: Loading compiled-in X.509 certificates Sep 13 03:03:50.570080 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: d4931373bb0d9b9f95da11f02ae07d3649cc6c37' Sep 13 03:03:50.570086 kernel: Key type .fscrypt registered Sep 13 03:03:50.570091 kernel: Key type fscrypt-provisioning registered Sep 13 03:03:50.570096 kernel: pstore: Using crash dump compression: deflate Sep 13 03:03:50.570102 kernel: ima: Allocated hash algorithm: sha1 Sep 13 03:03:50.570107 kernel: ima: No architecture policies found Sep 13 03:03:50.570112 kernel: clk: Disabling unused clocks Sep 13 03:03:50.570117 kernel: Freeing unused kernel image (initmem) memory: 47492K Sep 13 03:03:50.570123 kernel: Write protecting the kernel read-only data: 28672k Sep 13 03:03:50.570128 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Sep 13 03:03:50.570134 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Sep 13 03:03:50.570139 kernel: Run /init as init process Sep 13 03:03:50.570144 kernel: with arguments: Sep 13 03:03:50.570150 kernel: /init Sep 13 03:03:50.570155 kernel: with environment: Sep 13 03:03:50.570160 kernel: HOME=/ Sep 13 03:03:50.570165 kernel: TERM=linux Sep 13 03:03:50.570170 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 13 03:03:50.570177 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 03:03:50.570184 systemd[1]: Detected architecture x86-64. Sep 13 03:03:50.570189 systemd[1]: Running in initrd. Sep 13 03:03:50.570195 systemd[1]: No hostname configured, using default hostname. Sep 13 03:03:50.570200 systemd[1]: Hostname set to . Sep 13 03:03:50.570205 systemd[1]: Initializing machine ID from random generator. Sep 13 03:03:50.570211 systemd[1]: Queued start job for default target initrd.target. Sep 13 03:03:50.570217 systemd[1]: Started systemd-ask-password-console.path. Sep 13 03:03:50.570222 systemd[1]: Reached target cryptsetup.target. Sep 13 03:03:50.570228 systemd[1]: Reached target paths.target. Sep 13 03:03:50.570233 systemd[1]: Reached target slices.target. Sep 13 03:03:50.570238 systemd[1]: Reached target swap.target. Sep 13 03:03:50.570243 systemd[1]: Reached target timers.target. Sep 13 03:03:50.570249 systemd[1]: Listening on iscsid.socket. Sep 13 03:03:50.570254 systemd[1]: Listening on iscsiuio.socket. Sep 13 03:03:50.570262 systemd[1]: Listening on systemd-journald-audit.socket. Sep 13 03:03:50.570286 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 13 03:03:50.570291 systemd[1]: Listening on systemd-journald.socket. Sep 13 03:03:50.570297 systemd[1]: Listening on systemd-networkd.socket. Sep 13 03:03:50.570322 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 03:03:50.570327 kernel: tsc: Refined TSC clocksource calibration: 3407.998 MHz Sep 13 03:03:50.570332 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd208cfc, max_idle_ns: 440795283699 ns Sep 13 03:03:50.570338 kernel: clocksource: Switched to clocksource tsc Sep 13 03:03:50.570344 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 03:03:50.570349 systemd[1]: Reached target sockets.target. Sep 13 03:03:50.570354 systemd[1]: Starting kmod-static-nodes.service... Sep 13 03:03:50.570360 systemd[1]: Finished network-cleanup.service. Sep 13 03:03:50.570365 systemd[1]: Starting systemd-fsck-usr.service... Sep 13 03:03:50.570371 systemd[1]: Starting systemd-journald.service... Sep 13 03:03:50.570376 systemd[1]: Starting systemd-modules-load.service... Sep 13 03:03:50.570385 systemd-journald[268]: Journal started Sep 13 03:03:50.570412 systemd-journald[268]: Runtime Journal (/run/log/journal/e0b98664db0c48a0afc03129de319fa4) is 8.0M, max 640.0M, 632.0M free. Sep 13 03:03:50.573693 systemd-modules-load[269]: Inserted module 'overlay' Sep 13 03:03:50.577000 audit: BPF prog-id=6 op=LOAD Sep 13 03:03:50.596322 kernel: audit: type=1334 audit(1757732630.577:2): prog-id=6 op=LOAD Sep 13 03:03:50.596336 systemd[1]: Starting systemd-resolved.service... Sep 13 03:03:50.646308 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 13 03:03:50.646323 systemd[1]: Starting systemd-vconsole-setup.service... Sep 13 03:03:50.679309 kernel: Bridge firewalling registered Sep 13 03:03:50.679324 systemd[1]: Started systemd-journald.service. Sep 13 03:03:50.693620 systemd-modules-load[269]: Inserted module 'br_netfilter' Sep 13 03:03:50.743904 kernel: audit: type=1130 audit(1757732630.701:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.696399 systemd-resolved[271]: Positive Trust Anchors: Sep 13 03:03:50.821826 kernel: SCSI subsystem initialized Sep 13 03:03:50.821840 kernel: audit: type=1130 audit(1757732630.755:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.821850 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 13 03:03:50.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.696408 systemd-resolved[271]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 03:03:50.922866 kernel: device-mapper: uevent: version 1.0.3 Sep 13 03:03:50.922879 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 13 03:03:50.922912 kernel: audit: type=1130 audit(1757732630.877:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.696428 systemd-resolved[271]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 03:03:50.997485 kernel: audit: type=1130 audit(1757732630.931:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.698026 systemd-resolved[271]: Defaulting to hostname 'linux'. Sep 13 03:03:51.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.702550 systemd[1]: Started systemd-resolved.service. Sep 13 03:03:51.105053 kernel: audit: type=1130 audit(1757732631.005:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.105066 kernel: audit: type=1130 audit(1757732631.058:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:50.756448 systemd[1]: Finished kmod-static-nodes.service. Sep 13 03:03:50.879354 systemd[1]: Finished systemd-fsck-usr.service. Sep 13 03:03:50.924054 systemd-modules-load[269]: Inserted module 'dm_multipath' Sep 13 03:03:50.932432 systemd[1]: Finished systemd-modules-load.service. Sep 13 03:03:51.006582 systemd[1]: Finished systemd-vconsole-setup.service. Sep 13 03:03:51.059565 systemd[1]: Reached target nss-lookup.target. Sep 13 03:03:51.113884 systemd[1]: Starting dracut-cmdline-ask.service... Sep 13 03:03:51.133987 systemd[1]: Starting systemd-sysctl.service... Sep 13 03:03:51.134357 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 03:03:51.137271 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 03:03:51.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.137731 systemd[1]: Finished systemd-sysctl.service. Sep 13 03:03:51.186476 kernel: audit: type=1130 audit(1757732631.136:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.198629 systemd[1]: Finished dracut-cmdline-ask.service. Sep 13 03:03:51.263304 kernel: audit: type=1130 audit(1757732631.197:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.254970 systemd[1]: Starting dracut-cmdline.service... Sep 13 03:03:51.277359 dracut-cmdline[293]: dracut-dracut-053 Sep 13 03:03:51.277359 dracut-cmdline[293]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Sep 13 03:03:51.277359 dracut-cmdline[293]: BEL=ROOT console=tty0 console=ttyS1,115200n8 flatcar.first_boot=detected flatcar.oem.id=packet flatcar.autologin verity.usrhash=65d14b740db9e581daa1d0206188b16d2f1a39e5c5e0878b6855323cd7c584ec Sep 13 03:03:51.346341 kernel: Loading iSCSI transport class v2.0-870. Sep 13 03:03:51.346353 kernel: iscsi: registered transport (tcp) Sep 13 03:03:51.404207 kernel: iscsi: registered transport (qla4xxx) Sep 13 03:03:51.404225 kernel: QLogic iSCSI HBA Driver Sep 13 03:03:51.419839 systemd[1]: Finished dracut-cmdline.service. Sep 13 03:03:51.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:51.428988 systemd[1]: Starting dracut-pre-udev.service... Sep 13 03:03:51.484265 kernel: raid6: avx2x4 gen() 48626 MB/s Sep 13 03:03:51.519265 kernel: raid6: avx2x4 xor() 22352 MB/s Sep 13 03:03:51.554265 kernel: raid6: avx2x2 gen() 53619 MB/s Sep 13 03:03:51.589265 kernel: raid6: avx2x2 xor() 32106 MB/s Sep 13 03:03:51.624265 kernel: raid6: avx2x1 gen() 45205 MB/s Sep 13 03:03:51.659264 kernel: raid6: avx2x1 xor() 27897 MB/s Sep 13 03:03:51.693265 kernel: raid6: sse2x4 gen() 21332 MB/s Sep 13 03:03:51.727265 kernel: raid6: sse2x4 xor() 11570 MB/s Sep 13 03:03:51.761264 kernel: raid6: sse2x2 gen() 21656 MB/s Sep 13 03:03:51.795264 kernel: raid6: sse2x2 xor() 13420 MB/s Sep 13 03:03:51.829265 kernel: raid6: sse2x1 gen() 18279 MB/s Sep 13 03:03:51.880785 kernel: raid6: sse2x1 xor() 8916 MB/s Sep 13 03:03:51.880812 kernel: raid6: using algorithm avx2x2 gen() 53619 MB/s Sep 13 03:03:51.880831 kernel: raid6: .... xor() 32106 MB/s, rmw enabled Sep 13 03:03:51.898802 kernel: raid6: using avx2x2 recovery algorithm Sep 13 03:03:51.944266 kernel: xor: automatically using best checksumming function avx Sep 13 03:03:52.025270 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Sep 13 03:03:52.029864 systemd[1]: Finished dracut-pre-udev.service. Sep 13 03:03:52.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:52.038000 audit: BPF prog-id=7 op=LOAD Sep 13 03:03:52.038000 audit: BPF prog-id=8 op=LOAD Sep 13 03:03:52.040153 systemd[1]: Starting systemd-udevd.service... Sep 13 03:03:52.047922 systemd-udevd[475]: Using default interface naming scheme 'v252'. Sep 13 03:03:52.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:52.054491 systemd[1]: Started systemd-udevd.service. Sep 13 03:03:52.097385 dracut-pre-trigger[487]: rd.md=0: removing MD RAID activation Sep 13 03:03:52.072937 systemd[1]: Starting dracut-pre-trigger.service... Sep 13 03:03:52.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:52.103019 systemd[1]: Finished dracut-pre-trigger.service. Sep 13 03:03:52.116555 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 03:03:52.170891 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 03:03:52.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:52.199279 kernel: cryptd: max_cpu_qlen set to 1000 Sep 13 03:03:52.236632 kernel: ACPI: bus type USB registered Sep 13 03:03:52.236669 kernel: usbcore: registered new interface driver usbfs Sep 13 03:03:52.236679 kernel: usbcore: registered new interface driver hub Sep 13 03:03:52.271520 kernel: usbcore: registered new device driver usb Sep 13 03:03:52.291267 kernel: sdhci: Secure Digital Host Controller Interface driver Sep 13 03:03:52.291290 kernel: libata version 3.00 loaded. Sep 13 03:03:52.291302 kernel: sdhci: Copyright(c) Pierre Ossman Sep 13 03:03:52.330271 kernel: AVX2 version of gcm_enc/dec engaged. Sep 13 03:03:52.367734 kernel: mlx5_core 0000:01:00.0: firmware version: 14.28.2006 Sep 13 03:03:52.926328 kernel: mlx5_core 0000:01:00.0: 63.008 Gb/s available PCIe bandwidth (8.0 GT/s PCIe x8 link) Sep 13 03:03:52.926397 kernel: AES CTR mode by8 optimization enabled Sep 13 03:03:52.926406 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:52.975127 kernel: igb: Intel(R) Gigabit Ethernet Network Driver Sep 13 03:03:52.975137 kernel: igb: Copyright (c) 2007-2014 Intel Corporation. Sep 13 03:03:52.975144 kernel: ahci 0000:00:17.0: version 3.0 Sep 13 03:03:52.975210 kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Sep 13 03:03:52.975273 kernel: ahci 0000:00:17.0: AHCI 0001.0301 32 slots 7 ports 6 Gbps 0x7f impl SATA mode Sep 13 03:03:52.975327 kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 1 Sep 13 03:03:52.975385 kernel: ahci 0000:00:17.0: flags: 64bit ncq sntf clo only pio slum part ems deso sadm sds apst Sep 13 03:03:52.975436 kernel: igb 0000:03:00.0: added PHC on eth0 Sep 13 03:03:52.975491 kernel: xhci_hcd 0000:00:14.0: hcc params 0x200077c1 hci version 0x110 quirks 0x0000000000009810 Sep 13 03:03:52.975540 kernel: scsi host0: ahci Sep 13 03:03:52.975601 kernel: scsi host1: ahci Sep 13 03:03:52.975657 kernel: scsi host2: ahci Sep 13 03:03:52.975714 kernel: scsi host3: ahci Sep 13 03:03:52.975767 kernel: scsi host4: ahci Sep 13 03:03:52.975821 kernel: scsi host5: ahci Sep 13 03:03:52.975873 kernel: scsi host6: ahci Sep 13 03:03:52.975929 kernel: ata1: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516100 irq 127 Sep 13 03:03:52.975937 kernel: ata2: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516180 irq 127 Sep 13 03:03:52.975943 kernel: ata3: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516200 irq 127 Sep 13 03:03:52.975950 kernel: ata4: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516280 irq 127 Sep 13 03:03:52.975956 kernel: ata5: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516300 irq 127 Sep 13 03:03:52.975963 kernel: ata6: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516380 irq 127 Sep 13 03:03:52.975970 kernel: ata7: SATA max UDMA/133 abar m2048@0x95516000 port 0x95516400 irq 127 Sep 13 03:03:52.975976 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:52.976027 kernel: igb 0000:03:00.0: Intel(R) Gigabit Ethernet Network Connection Sep 13 03:03:52.976080 kernel: xhci_hcd 0000:00:14.0: xHCI Host Controller Sep 13 03:03:52.976132 kernel: igb 0000:03:00.0: eth0: (PCIe:2.5Gb/s:Width x1) 3c:ec:ef:70:d8:b0 Sep 13 03:03:52.976183 kernel: xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 2 Sep 13 03:03:52.976233 kernel: igb 0000:03:00.0: eth0: PBA No: 010000-000 Sep 13 03:03:52.976294 kernel: xhci_hcd 0000:00:14.0: Host supports USB 3.1 Enhanced SuperSpeed Sep 13 03:03:52.976345 kernel: igb 0000:03:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s) Sep 13 03:03:52.976396 kernel: hub 1-0:1.0: USB hub found Sep 13 03:03:52.976462 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:52.976513 kernel: hub 1-0:1.0: 16 ports detected Sep 13 03:03:52.976569 kernel: mlx5_core 0000:01:00.0: E-Switch: Total vports 10, per vport: max uc(1024) max mc(16384) Sep 13 03:03:52.976622 kernel: mlx5_core 0000:01:00.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Sep 13 03:03:52.976674 kernel: igb 0000:04:00.0: added PHC on eth1 Sep 13 03:03:52.976728 kernel: igb 0000:04:00.0: Intel(R) Gigabit Ethernet Network Connection Sep 13 03:03:52.976779 kernel: igb 0000:04:00.0: eth1: (PCIe:2.5Gb/s:Width x1) 3c:ec:ef:70:d8:b1 Sep 13 03:03:52.976831 kernel: igb 0000:04:00.0: eth1: PBA No: 010000-000 Sep 13 03:03:52.976884 kernel: igb 0000:04:00.0: Using MSI-X interrupts. 4 rx queue(s), 4 tx queue(s) Sep 13 03:03:52.976936 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:52.976985 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:52.977032 kernel: hub 2-0:1.0: USB hub found Sep 13 03:03:52.977092 kernel: hub 2-0:1.0: 10 ports detected Sep 13 03:03:52.977150 kernel: ata7: SATA link down (SStatus 0 SControl 300) Sep 13 03:03:52.977158 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:52.977209 kernel: ata6: SATA link down (SStatus 0 SControl 300) Sep 13 03:03:52.977218 kernel: mlx5_core 0000:01:00.0: Supported tc offload range - chains: 4294967294, prios: 4294967295 Sep 13 03:03:52.977273 kernel: usb 1-14: new high-speed USB device number 2 using xhci_hcd Sep 13 03:03:52.977289 kernel: ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Sep 13 03:03:52.977296 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:52.977344 kernel: mlx5_core 0000:01:00.1: firmware version: 14.28.2006 Sep 13 03:03:53.532921 kernel: mlx5_core 0000:01:00.1: 63.008 Gb/s available PCIe bandwidth (8.0 GT/s PCIe x8 link) Sep 13 03:03:53.533027 kernel: ata5: SATA link down (SStatus 0 SControl 300) Sep 13 03:03:53.533036 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:53.594533 kernel: ata1.00: ATA-10: Micron_5200_MTFDDAK480TDN, D1MU020, max UDMA/133 Sep 13 03:03:53.594543 kernel: hub 1-14:1.0: USB hub found Sep 13 03:03:53.594614 kernel: ata2: SATA link up 6.0 Gbps (SStatus 133 SControl 300) Sep 13 03:03:53.594622 kernel: hub 1-14:1.0: 4 ports detected Sep 13 03:03:53.594680 kernel: ata3: SATA link down (SStatus 0 SControl 300) Sep 13 03:03:53.594687 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:53.594736 kernel: ata2.00: ATA-10: Micron_5200_MTFDDAK480TDN, D1MU020, max UDMA/133 Sep 13 03:03:53.594744 kernel: mlx5_core 0000:01:00.1: E-Switch: Total vports 10, per vport: max uc(1024) max mc(16384) Sep 13 03:03:53.594798 kernel: ata4: SATA link down (SStatus 0 SControl 300) Sep 13 03:03:53.594806 kernel: port_module: 9 callbacks suppressed Sep 13 03:03:53.594812 kernel: mlx5_core 0000:01:00.1: Port module event: module 1, Cable plugged Sep 13 03:03:53.594862 kernel: ata1.00: 937703088 sectors, multi 16: LBA48 NCQ (depth 32), AA Sep 13 03:03:53.594870 kernel: mlx5_core 0000:01:00.1: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Sep 13 03:03:53.594920 kernel: ata1.00: Features: NCQ-prio Sep 13 03:03:53.594927 kernel: usb 1-14.1: new low-speed USB device number 3 using xhci_hcd Sep 13 03:03:53.594993 kernel: ata2.00: 937703088 sectors, multi 16: LBA48 NCQ (depth 32), AA Sep 13 03:03:53.595001 kernel: ata2.00: Features: NCQ-prio Sep 13 03:03:53.595007 kernel: mlx5_core 0000:01:00.1: Supported tc offload range - chains: 4294967294, prios: 4294967295 Sep 13 03:03:53.595060 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:53.595108 kernel: ata1.00: configured for UDMA/133 Sep 13 03:03:53.595115 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:53.595163 kernel: ata2.00: configured for UDMA/133 Sep 13 03:03:53.595170 kernel: scsi 0:0:0:0: Direct-Access ATA Micron_5200_MTFD U020 PQ: 0 ANSI: 5 Sep 13 03:03:53.595232 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:53.595308 kernel: scsi 1:0:0:0: Direct-Access ATA Micron_5200_MTFD U020 PQ: 0 ANSI: 5 Sep 13 03:03:53.671268 kernel: igb 0000:03:00.0 eno1: renamed from eth0 Sep 13 03:03:53.671354 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 13 03:03:53.726716 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:53.746140 kernel: usbcore: registered new interface driver usbhid Sep 13 03:03:53.746150 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:53.746208 kernel: usbhid: USB HID core driver Sep 13 03:03:53.777725 kernel: ata1.00: Enabling discard_zeroes_data Sep 13 03:03:53.777746 kernel: igb 0000:04:00.0 eno2: renamed from eth1 Sep 13 03:03:53.777827 kernel: ata2.00: Enabling discard_zeroes_data Sep 13 03:03:53.777835 kernel: sd 0:0:0:0: [sdb] 937703088 512-byte logical blocks: (480 GB/447 GiB) Sep 13 03:03:54.393905 kernel: sd 1:0:0:0: [sda] 937703088 512-byte logical blocks: (480 GB/447 GiB) Sep 13 03:03:54.393990 kernel: sd 1:0:0:0: [sda] 4096-byte physical blocks Sep 13 03:03:54.394069 kernel: sd 1:0:0:0: [sda] Write Protect is off Sep 13 03:03:54.394163 kernel: sd 1:0:0:0: [sda] Mode Sense: 00 3a 00 00 Sep 13 03:03:54.394230 kernel: sd 1:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Sep 13 03:03:54.394320 kernel: ata2.00: Enabling discard_zeroes_data Sep 13 03:03:54.394334 kernel: ata2.00: Enabling discard_zeroes_data Sep 13 03:03:54.394343 kernel: sd 1:0:0:0: [sda] Attached SCSI disk Sep 13 03:03:54.394407 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:54.394465 kernel: input: HID 0557:2419 as /devices/pci0000:00/0000:00:14.0/usb1/1-14/1-14.1/1-14.1:1.0/0003:0557:2419.0001/input/input0 Sep 13 03:03:54.394473 kernel: sd 0:0:0:0: [sdb] 4096-byte physical blocks Sep 13 03:03:54.394531 kernel: sd 0:0:0:0: [sdb] Write Protect is off Sep 13 03:03:54.394588 kernel: hid-generic 0003:0557:2419.0001: input,hidraw0: USB HID v1.00 Keyboard [HID 0557:2419] on usb-0000:00:14.0-14.1/input0 Sep 13 03:03:54.394690 kernel: sd 0:0:0:0: [sdb] Mode Sense: 00 3a 00 00 Sep 13 03:03:54.394786 kernel: sd 0:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Sep 13 03:03:54.394884 kernel: input: HID 0557:2419 as /devices/pci0000:00/0000:00:14.0/usb1/1-14/1-14.1/1-14.1:1.1/0003:0557:2419.0002/input/input1 Sep 13 03:03:54.394897 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:54.394983 kernel: ata1.00: Enabling discard_zeroes_data Sep 13 03:03:54.394996 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: renamed from eth3 Sep 13 03:03:54.395089 kernel: hid-generic 0003:0557:2419.0002: input,hidraw1: USB HID v1.00 Mouse [HID 0557:2419] on usb-0000:00:14.0-14.1/input1 Sep 13 03:03:54.395182 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 13 03:03:54.395191 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:54.395244 kernel: GPT:9289727 != 937703087 Sep 13 03:03:54.395251 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 13 03:03:54.395258 kernel: GPT:9289727 != 937703087 Sep 13 03:03:54.395269 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 13 03:03:54.395276 kernel: sdb: sdb1 sdb2 sdb3 sdb4 sdb6 sdb7 sdb9 Sep 13 03:03:54.395283 kernel: ata1.00: Enabling discard_zeroes_data Sep 13 03:03:54.395289 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: renamed from eth2 Sep 13 03:03:54.395349 kernel: sd 0:0:0:0: [sdb] Attached SCSI disk Sep 13 03:03:54.395408 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:03:54.440537 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 13 03:03:54.461395 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sdb6 scanned by (udev-worker) (538) Sep 13 03:03:54.455688 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 13 03:03:54.478468 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 13 03:03:54.521588 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 13 03:03:54.539881 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 03:03:54.550575 systemd[1]: Starting disk-uuid.service... Sep 13 03:03:54.587363 kernel: ata1.00: Enabling discard_zeroes_data Sep 13 03:03:54.587375 kernel: sdb: sdb1 sdb2 sdb3 sdb4 sdb6 sdb7 sdb9 Sep 13 03:03:54.587429 disk-uuid[693]: Primary Header is updated. Sep 13 03:03:54.587429 disk-uuid[693]: Secondary Entries is updated. Sep 13 03:03:54.587429 disk-uuid[693]: Secondary Header is updated. Sep 13 03:03:54.660369 kernel: ata1.00: Enabling discard_zeroes_data Sep 13 03:03:54.660380 kernel: GPT:disk_guids don't match. Sep 13 03:03:54.660387 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 13 03:03:54.660393 kernel: sdb: sdb1 sdb2 sdb3 sdb4 sdb6 sdb7 sdb9 Sep 13 03:03:54.660399 kernel: ata1.00: Enabling discard_zeroes_data Sep 13 03:03:54.700311 kernel: sdb: sdb1 sdb2 sdb3 sdb4 sdb6 sdb7 sdb9 Sep 13 03:03:55.648387 kernel: ata1.00: Enabling discard_zeroes_data Sep 13 03:03:55.666742 disk-uuid[694]: The operation has completed successfully. Sep 13 03:03:55.675389 kernel: sdb: sdb1 sdb2 sdb3 sdb4 sdb6 sdb7 sdb9 Sep 13 03:03:55.700435 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 13 03:03:55.794963 kernel: audit: type=1130 audit(1757732635.706:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:55.794978 kernel: audit: type=1131 audit(1757732635.706:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:55.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:55.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:55.700480 systemd[1]: Finished disk-uuid.service. Sep 13 03:03:55.825367 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Sep 13 03:03:55.713563 systemd[1]: Starting verity-setup.service... Sep 13 03:03:55.858019 systemd[1]: Found device dev-mapper-usr.device. Sep 13 03:03:55.867412 systemd[1]: Mounting sysusr-usr.mount... Sep 13 03:03:55.873523 systemd[1]: Finished verity-setup.service. Sep 13 03:03:55.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:55.931267 kernel: audit: type=1130 audit(1757732635.883:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:55.988102 systemd[1]: Mounted sysusr-usr.mount. Sep 13 03:03:56.005933 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 13 03:03:56.005947 kernel: BTRFS info (device sdb6): using crc32c (crc32c-intel) checksum algorithm Sep 13 03:03:55.988211 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 13 03:03:56.095321 kernel: BTRFS info (device sdb6): using free space tree Sep 13 03:03:56.095335 kernel: BTRFS info (device sdb6): has skinny extents Sep 13 03:03:56.095342 kernel: BTRFS info (device sdb6): enabling ssd optimizations Sep 13 03:03:55.988639 systemd[1]: Starting ignition-setup.service... Sep 13 03:03:56.083797 systemd[1]: Starting parse-ip-for-networkd.service... Sep 13 03:03:56.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.103629 systemd[1]: Finished ignition-setup.service. Sep 13 03:03:56.174378 kernel: audit: type=1130 audit(1757732636.110:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.111819 systemd[1]: Starting ignition-fetch-offline.service... Sep 13 03:03:56.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.167527 systemd[1]: Finished parse-ip-for-networkd.service. Sep 13 03:03:56.246715 kernel: audit: type=1130 audit(1757732636.173:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.246731 kernel: audit: type=1334 audit(1757732636.223:24): prog-id=9 op=LOAD Sep 13 03:03:56.223000 audit: BPF prog-id=9 op=LOAD Sep 13 03:03:56.235012 ignition[846]: Ignition 2.14.0 Sep 13 03:03:56.225107 systemd[1]: Starting systemd-networkd.service... Sep 13 03:03:56.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.309272 kernel: audit: type=1130 audit(1757732636.258:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.235017 ignition[846]: Stage: fetch-offline Sep 13 03:03:56.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.247115 unknown[846]: fetched base config from "system" Sep 13 03:03:56.381359 kernel: audit: type=1130 audit(1757732636.316:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.235045 ignition[846]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 03:03:56.247119 unknown[846]: fetched user config from "system" Sep 13 03:03:56.235059 ignition[846]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Sep 13 03:03:56.254445 systemd[1]: Finished ignition-fetch-offline.service. Sep 13 03:03:56.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.243076 ignition[846]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Sep 13 03:03:56.485471 kernel: audit: type=1130 audit(1757732636.418:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.261552 systemd-networkd[882]: lo: Link UP Sep 13 03:03:56.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.243139 ignition[846]: parsed url from cmdline: "" Sep 13 03:03:56.503809 iscsid[903]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 13 03:03:56.503809 iscsid[903]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 13 03:03:56.503809 iscsid[903]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 13 03:03:56.503809 iscsid[903]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 13 03:03:56.503809 iscsid[903]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 13 03:03:56.503809 iscsid[903]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 13 03:03:56.503809 iscsid[903]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 13 03:03:56.672761 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Sep 13 03:03:56.672856 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp1s0f1np1: link becomes ready Sep 13 03:03:56.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.261554 systemd-networkd[882]: lo: Gained carrier Sep 13 03:03:56.243141 ignition[846]: no config URL provided Sep 13 03:03:56.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:03:56.261898 systemd-networkd[882]: Enumeration completed Sep 13 03:03:56.726395 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: Link up Sep 13 03:03:56.243144 ignition[846]: reading system config file "/usr/lib/ignition/user.ign" Sep 13 03:03:56.261966 systemd[1]: Started systemd-networkd.service. Sep 13 03:03:56.243170 ignition[846]: parsing config with SHA512: a30f0779785300acb14d5d1f9a7d7aeb9755aa38880c4199acfc28006c2c5870e0b3090864ad9fd25da0e820bec96ad409eb238d797ef4e0d2d4d175370f59d6 Sep 13 03:03:56.309651 systemd-networkd[882]: enp1s0f1np1: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 03:03:56.247384 ignition[846]: fetch-offline: fetch-offline passed Sep 13 03:03:56.317504 systemd[1]: Reached target network.target. Sep 13 03:03:56.247387 ignition[846]: POST message to Packet Timeline Sep 13 03:03:56.374480 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Sep 13 03:03:56.247391 ignition[846]: POST Status error: resource requires networking Sep 13 03:03:56.374930 systemd[1]: Starting ignition-kargs.service... Sep 13 03:03:56.247430 ignition[846]: Ignition finished successfully Sep 13 03:03:56.388881 systemd[1]: Starting iscsiuio.service... Sep 13 03:03:56.379833 ignition[889]: Ignition 2.14.0 Sep 13 03:03:56.405542 systemd[1]: Started iscsiuio.service. Sep 13 03:03:56.379837 ignition[889]: Stage: kargs Sep 13 03:03:56.420061 systemd[1]: Starting iscsid.service... Sep 13 03:03:56.379895 ignition[889]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 03:03:56.475518 systemd[1]: Started iscsid.service. Sep 13 03:03:56.379905 ignition[889]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Sep 13 03:03:56.492906 systemd[1]: Starting dracut-initqueue.service... Sep 13 03:03:56.381212 ignition[889]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Sep 13 03:03:56.521189 systemd-networkd[882]: enp1s0f0np0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 03:03:56.382789 ignition[889]: kargs: kargs passed Sep 13 03:03:56.532477 systemd[1]: Finished dracut-initqueue.service. Sep 13 03:03:56.382792 ignition[889]: POST message to Packet Timeline Sep 13 03:03:56.588411 systemd[1]: Reached target remote-fs-pre.target. Sep 13 03:03:56.382802 ignition[889]: GET https://metadata.packet.net/metadata: attempt #1 Sep 13 03:03:56.625427 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 03:03:56.385950 ignition[889]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:52028->[::1]:53: read: connection refused Sep 13 03:03:56.625471 systemd[1]: Reached target remote-fs.target. Sep 13 03:03:56.586239 ignition[889]: GET https://metadata.packet.net/metadata: attempt #2 Sep 13 03:03:56.661582 systemd[1]: Starting dracut-pre-mount.service... Sep 13 03:03:56.586493 ignition[889]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:53585->[::1]:53: read: connection refused Sep 13 03:03:56.680579 systemd[1]: Finished dracut-pre-mount.service. Sep 13 03:03:56.986974 ignition[889]: GET https://metadata.packet.net/metadata: attempt #3 Sep 13 03:03:56.722896 systemd-networkd[882]: eno2: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 03:03:56.988225 ignition[889]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:48521->[::1]:53: read: connection refused Sep 13 03:03:56.751727 systemd-networkd[882]: eno1: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 03:03:56.770649 systemd-networkd[882]: enp1s0f1np1: Link UP Sep 13 03:03:56.770970 systemd-networkd[882]: enp1s0f1np1: Gained carrier Sep 13 03:03:56.785705 systemd-networkd[882]: enp1s0f0np0: Link UP Sep 13 03:03:56.786080 systemd-networkd[882]: eno2: Link UP Sep 13 03:03:56.786450 systemd-networkd[882]: eno1: Link UP Sep 13 03:03:57.551060 systemd-networkd[882]: enp1s0f0np0: Gained carrier Sep 13 03:03:57.559545 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp1s0f0np0: link becomes ready Sep 13 03:03:57.599414 systemd-networkd[882]: enp1s0f0np0: DHCPv4 address 86.109.11.213/31, gateway 86.109.11.212 acquired from 145.40.83.140 Sep 13 03:03:57.788632 ignition[889]: GET https://metadata.packet.net/metadata: attempt #4 Sep 13 03:03:57.789800 ignition[889]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:45067->[::1]:53: read: connection refused Sep 13 03:03:58.489762 systemd-networkd[882]: enp1s0f1np1: Gained IPv6LL Sep 13 03:03:59.257550 systemd-networkd[882]: enp1s0f0np0: Gained IPv6LL Sep 13 03:03:59.391763 ignition[889]: GET https://metadata.packet.net/metadata: attempt #5 Sep 13 03:03:59.392997 ignition[889]: GET error: Get "https://metadata.packet.net/metadata": dial tcp: lookup metadata.packet.net on [::1]:53: read udp [::1]:50725->[::1]:53: read: connection refused Sep 13 03:04:02.596309 ignition[889]: GET https://metadata.packet.net/metadata: attempt #6 Sep 13 03:04:03.753195 ignition[889]: GET result: OK Sep 13 03:04:04.207348 ignition[889]: Ignition finished successfully Sep 13 03:04:04.211773 systemd[1]: Finished ignition-kargs.service. Sep 13 03:04:04.292570 kernel: kauditd_printk_skb: 3 callbacks suppressed Sep 13 03:04:04.292622 kernel: audit: type=1130 audit(1757732644.221:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:04.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:04.230947 ignition[922]: Ignition 2.14.0 Sep 13 03:04:04.224595 systemd[1]: Starting ignition-disks.service... Sep 13 03:04:04.230950 ignition[922]: Stage: disks Sep 13 03:04:04.231025 ignition[922]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 03:04:04.231033 ignition[922]: parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Sep 13 03:04:04.233641 ignition[922]: no config dir at "/usr/lib/ignition/base.platform.d/packet" Sep 13 03:04:04.234215 ignition[922]: disks: disks passed Sep 13 03:04:04.234219 ignition[922]: POST message to Packet Timeline Sep 13 03:04:04.234229 ignition[922]: GET https://metadata.packet.net/metadata: attempt #1 Sep 13 03:04:05.344608 ignition[922]: GET result: OK Sep 13 03:04:05.870824 ignition[922]: Ignition finished successfully Sep 13 03:04:05.874110 systemd[1]: Finished ignition-disks.service. Sep 13 03:04:05.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:05.886916 systemd[1]: Reached target initrd-root-device.target. Sep 13 03:04:05.959535 kernel: audit: type=1130 audit(1757732645.885:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:05.945490 systemd[1]: Reached target local-fs-pre.target. Sep 13 03:04:05.945525 systemd[1]: Reached target local-fs.target. Sep 13 03:04:05.969483 systemd[1]: Reached target sysinit.target. Sep 13 03:04:05.983434 systemd[1]: Reached target basic.target. Sep 13 03:04:05.984054 systemd[1]: Starting systemd-fsck-root.service... Sep 13 03:04:06.011142 systemd-fsck[939]: ROOT: clean, 629/553520 files, 56028/553472 blocks Sep 13 03:04:06.026901 systemd[1]: Finished systemd-fsck-root.service. Sep 13 03:04:06.115397 kernel: audit: type=1130 audit(1757732646.035:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:06.115411 kernel: EXT4-fs (sdb9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 13 03:04:06.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:06.046571 systemd[1]: Mounting sysroot.mount... Sep 13 03:04:06.122888 systemd[1]: Mounted sysroot.mount. Sep 13 03:04:06.138601 systemd[1]: Reached target initrd-root-fs.target. Sep 13 03:04:06.156352 systemd[1]: Mounting sysroot-usr.mount... Sep 13 03:04:06.171382 systemd[1]: Starting flatcar-metadata-hostname.service... Sep 13 03:04:06.187285 systemd[1]: Starting flatcar-static-network.service... Sep 13 03:04:06.203450 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 13 03:04:06.203543 systemd[1]: Reached target ignition-diskful.target. Sep 13 03:04:06.222885 systemd[1]: Mounted sysroot-usr.mount. Sep 13 03:04:06.247220 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 03:04:06.309353 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/sdb6 scanned by mount (953) Sep 13 03:04:06.309376 kernel: BTRFS info (device sdb6): using crc32c (crc32c-intel) checksum algorithm Sep 13 03:04:06.260167 systemd[1]: Starting initrd-setup-root.service... Sep 13 03:04:06.383119 kernel: BTRFS info (device sdb6): using free space tree Sep 13 03:04:06.383136 kernel: BTRFS info (device sdb6): has skinny extents Sep 13 03:04:06.383144 kernel: BTRFS info (device sdb6): enabling ssd optimizations Sep 13 03:04:06.318142 systemd[1]: Finished initrd-setup-root.service. Sep 13 03:04:06.444324 kernel: audit: type=1130 audit(1757732646.390:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:06.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:06.444402 coreos-metadata[948]: Sep 13 03:04:06.320 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Sep 13 03:04:06.466524 coreos-metadata[947]: Sep 13 03:04:06.321 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Sep 13 03:04:06.486307 initrd-setup-root[958]: cut: /sysroot/etc/passwd: No such file or directory Sep 13 03:04:06.392617 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 03:04:06.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:06.537461 initrd-setup-root[966]: cut: /sysroot/etc/group: No such file or directory Sep 13 03:04:06.569512 kernel: audit: type=1130 audit(1757732646.502:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:06.452872 systemd[1]: Starting ignition-mount.service... Sep 13 03:04:06.577566 initrd-setup-root[974]: cut: /sysroot/etc/shadow: No such file or directory Sep 13 03:04:06.473841 systemd[1]: Starting sysroot-boot.service... Sep 13 03:04:06.596515 initrd-setup-root[982]: cut: /sysroot/etc/gshadow: No such file or directory Sep 13 03:04:06.494026 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 13 03:04:06.618564 ignition[1024]: INFO : Ignition 2.14.0 Sep 13 03:04:06.618564 ignition[1024]: INFO : Stage: mount Sep 13 03:04:06.618564 ignition[1024]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 03:04:06.618564 ignition[1024]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Sep 13 03:04:06.618564 ignition[1024]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Sep 13 03:04:06.618564 ignition[1024]: INFO : mount: mount passed Sep 13 03:04:06.618564 ignition[1024]: INFO : POST message to Packet Timeline Sep 13 03:04:06.618564 ignition[1024]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Sep 13 03:04:06.494067 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 13 03:04:06.494648 systemd[1]: Finished sysroot-boot.service. Sep 13 03:04:07.435561 coreos-metadata[947]: Sep 13 03:04:07.435 INFO Fetch successful Sep 13 03:04:07.450339 coreos-metadata[948]: Sep 13 03:04:07.450 INFO Fetch successful Sep 13 03:04:07.515216 coreos-metadata[947]: Sep 13 03:04:07.515 INFO wrote hostname ci-3510.3.8-n-ba666c4ddc to /sysroot/etc/hostname Sep 13 03:04:07.515601 systemd[1]: Finished flatcar-metadata-hostname.service. Sep 13 03:04:07.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:07.538657 systemd[1]: flatcar-static-network.service: Deactivated successfully. Sep 13 03:04:07.633356 kernel: audit: type=1130 audit(1757732647.537:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:07.633370 kernel: audit: type=1130 audit(1757732647.601:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:07.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:07.538697 systemd[1]: Finished flatcar-static-network.service. Sep 13 03:04:07.724485 kernel: audit: type=1131 audit(1757732647.601:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:07.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-static-network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:08.177352 ignition[1024]: INFO : GET result: OK Sep 13 03:04:08.618773 ignition[1024]: INFO : Ignition finished successfully Sep 13 03:04:08.621571 systemd[1]: Finished ignition-mount.service. Sep 13 03:04:08.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:08.638435 systemd[1]: Starting ignition-files.service... Sep 13 03:04:08.710363 kernel: audit: type=1130 audit(1757732648.635:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:08.705145 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 03:04:08.766455 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sdb6 scanned by mount (1040) Sep 13 03:04:08.766470 kernel: BTRFS info (device sdb6): using crc32c (crc32c-intel) checksum algorithm Sep 13 03:04:08.766480 kernel: BTRFS info (device sdb6): using free space tree Sep 13 03:04:08.789594 kernel: BTRFS info (device sdb6): has skinny extents Sep 13 03:04:08.838306 kernel: BTRFS info (device sdb6): enabling ssd optimizations Sep 13 03:04:08.840777 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 03:04:08.858377 ignition[1059]: INFO : Ignition 2.14.0 Sep 13 03:04:08.858377 ignition[1059]: INFO : Stage: files Sep 13 03:04:08.858377 ignition[1059]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 03:04:08.858377 ignition[1059]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Sep 13 03:04:08.858377 ignition[1059]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Sep 13 03:04:08.858377 ignition[1059]: DEBUG : files: compiled without relabeling support, skipping Sep 13 03:04:08.858377 ignition[1059]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 13 03:04:08.858377 ignition[1059]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 13 03:04:08.861037 unknown[1059]: wrote ssh authorized keys file for user: core Sep 13 03:04:08.957347 ignition[1059]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 13 03:04:08.957347 ignition[1059]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 13 03:04:08.957347 ignition[1059]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 13 03:04:08.957347 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 13 03:04:08.957347 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Sep 13 03:04:08.957347 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/packet-phone-home.service" Sep 13 03:04:09.035463 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1921422528" Sep 13 03:04:09.286595 ignition[1059]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1921422528": device or resource busy Sep 13 03:04:09.286595 ignition[1059]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1921422528", trying btrfs: device or resource busy Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1921422528" Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1921422528" Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem1921422528" Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem1921422528" Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/packet-phone-home.service" Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 03:04:09.286595 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Sep 13 03:04:09.553260 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Sep 13 03:04:10.188364 ignition[1059]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Sep 13 03:04:10.188364 ignition[1059]: INFO : files: op(f): [started] processing unit "packet-phone-home.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(f): [finished] processing unit "packet-phone-home.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(13): [started] setting preset to enabled for "packet-phone-home.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(13): [finished] setting preset to enabled for "packet-phone-home.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(14): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(14): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(15): [started] setting preset to enabled for "prepare-helm.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-helm.service" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 13 03:04:10.220514 ignition[1059]: INFO : files: files passed Sep 13 03:04:10.220514 ignition[1059]: INFO : POST message to Packet Timeline Sep 13 03:04:10.220514 ignition[1059]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Sep 13 03:04:11.919378 ignition[1059]: INFO : GET result: OK Sep 13 03:04:12.368627 ignition[1059]: INFO : Ignition finished successfully Sep 13 03:04:12.371620 systemd[1]: Finished ignition-files.service. Sep 13 03:04:12.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.391186 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 13 03:04:12.462522 kernel: audit: type=1130 audit(1757732652.384:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.452535 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 13 03:04:12.487521 initrd-setup-root-after-ignition[1093]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 13 03:04:12.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.452855 systemd[1]: Starting ignition-quench.service... Sep 13 03:04:12.683517 kernel: audit: type=1130 audit(1757732652.496:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.683533 kernel: audit: type=1130 audit(1757732652.562:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.683540 kernel: audit: type=1131 audit(1757732652.562:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.469640 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 13 03:04:12.497941 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 13 03:04:12.498063 systemd[1]: Finished ignition-quench.service. Sep 13 03:04:12.838757 kernel: audit: type=1130 audit(1757732652.723:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.838775 kernel: audit: type=1131 audit(1757732652.723:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.563629 systemd[1]: Reached target ignition-complete.target. Sep 13 03:04:12.691876 systemd[1]: Starting initrd-parse-etc.service... Sep 13 03:04:12.713144 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 13 03:04:12.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.713195 systemd[1]: Finished initrd-parse-etc.service. Sep 13 03:04:12.959497 kernel: audit: type=1130 audit(1757732652.886:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.724655 systemd[1]: Reached target initrd-fs.target. Sep 13 03:04:12.847496 systemd[1]: Reached target initrd.target. Sep 13 03:04:12.847554 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 13 03:04:12.847920 systemd[1]: Starting dracut-pre-pivot.service... Sep 13 03:04:12.868634 systemd[1]: Finished dracut-pre-pivot.service. Sep 13 03:04:13.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.887866 systemd[1]: Starting initrd-cleanup.service... Sep 13 03:04:13.105519 kernel: audit: type=1131 audit(1757732653.024:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:12.954274 systemd[1]: Stopped target nss-lookup.target. Sep 13 03:04:12.968539 systemd[1]: Stopped target remote-cryptsetup.target. Sep 13 03:04:12.984522 systemd[1]: Stopped target timers.target. Sep 13 03:04:13.009582 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 13 03:04:13.009709 systemd[1]: Stopped dracut-pre-pivot.service. Sep 13 03:04:13.025802 systemd[1]: Stopped target initrd.target. Sep 13 03:04:13.098590 systemd[1]: Stopped target basic.target. Sep 13 03:04:13.112540 systemd[1]: Stopped target ignition-complete.target. Sep 13 03:04:13.119585 systemd[1]: Stopped target ignition-diskful.target. Sep 13 03:04:13.142654 systemd[1]: Stopped target initrd-root-device.target. Sep 13 03:04:13.157579 systemd[1]: Stopped target remote-fs.target. Sep 13 03:04:13.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.174686 systemd[1]: Stopped target remote-fs-pre.target. Sep 13 03:04:13.357538 kernel: audit: type=1131 audit(1757732653.268:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.189884 systemd[1]: Stopped target sysinit.target. Sep 13 03:04:13.427265 kernel: audit: type=1131 audit(1757732653.365:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.205983 systemd[1]: Stopped target local-fs.target. Sep 13 03:04:13.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.220864 systemd[1]: Stopped target local-fs-pre.target. Sep 13 03:04:13.237881 systemd[1]: Stopped target swap.target. Sep 13 03:04:13.253747 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 13 03:04:13.254115 systemd[1]: Stopped dracut-pre-mount.service. Sep 13 03:04:13.270095 systemd[1]: Stopped target cryptsetup.target. Sep 13 03:04:13.508000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.348502 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 13 03:04:13.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.348570 systemd[1]: Stopped dracut-initqueue.service. Sep 13 03:04:13.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.366649 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 13 03:04:13.564338 ignition[1108]: INFO : Ignition 2.14.0 Sep 13 03:04:13.564338 ignition[1108]: INFO : Stage: umount Sep 13 03:04:13.564338 ignition[1108]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 03:04:13.564338 ignition[1108]: DEBUG : parsing config with SHA512: 0131bd505bfe1b1215ca4ec9809701a3323bf448114294874f7249d8d300440bd742a7532f60673bfa0746c04de0bd5ca68d0fe9a8ecd59464b13a6401323cb4 Sep 13 03:04:13.564338 ignition[1108]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/packet" Sep 13 03:04:13.564338 ignition[1108]: INFO : umount: umount passed Sep 13 03:04:13.564338 ignition[1108]: INFO : POST message to Packet Timeline Sep 13 03:04:13.564338 ignition[1108]: INFO : GET https://metadata.packet.net/metadata: attempt #1 Sep 13 03:04:13.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.702949 iscsid[903]: iscsid shutting down. Sep 13 03:04:13.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.366734 systemd[1]: Stopped ignition-fetch-offline.service. Sep 13 03:04:13.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:13.435729 systemd[1]: Stopped target paths.target. Sep 13 03:04:13.449539 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 13 03:04:13.453515 systemd[1]: Stopped systemd-ask-password-console.path. Sep 13 03:04:13.456606 systemd[1]: Stopped target slices.target. Sep 13 03:04:13.470572 systemd[1]: Stopped target sockets.target. Sep 13 03:04:13.492666 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 13 03:04:13.492784 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 13 03:04:13.509694 systemd[1]: ignition-files.service: Deactivated successfully. Sep 13 03:04:13.509856 systemd[1]: Stopped ignition-files.service. Sep 13 03:04:13.524893 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 13 03:04:13.525193 systemd[1]: Stopped flatcar-metadata-hostname.service. Sep 13 03:04:13.544049 systemd[1]: Stopping ignition-mount.service... Sep 13 03:04:13.555407 systemd[1]: Stopping iscsid.service... Sep 13 03:04:13.571936 systemd[1]: Stopping sysroot-boot.service... Sep 13 03:04:13.585505 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 13 03:04:13.585900 systemd[1]: Stopped systemd-udev-trigger.service. Sep 13 03:04:13.593054 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 13 03:04:13.593409 systemd[1]: Stopped dracut-pre-trigger.service. Sep 13 03:04:13.623967 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 13 03:04:13.624281 systemd[1]: iscsid.service: Deactivated successfully. Sep 13 03:04:13.624326 systemd[1]: Stopped iscsid.service. Sep 13 03:04:13.645759 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 13 03:04:13.645999 systemd[1]: Stopped sysroot-boot.service. Sep 13 03:04:13.663715 systemd[1]: iscsid.socket: Deactivated successfully. Sep 13 03:04:13.663977 systemd[1]: Closed iscsid.socket. Sep 13 03:04:13.677739 systemd[1]: Stopping iscsiuio.service... Sep 13 03:04:13.692959 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 13 03:04:13.693203 systemd[1]: Stopped iscsiuio.service. Sep 13 03:04:13.710306 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 13 03:04:13.710532 systemd[1]: Finished initrd-cleanup.service. Sep 13 03:04:13.726559 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 13 03:04:13.726651 systemd[1]: Closed iscsiuio.socket. Sep 13 03:04:15.313455 ignition[1108]: INFO : GET result: OK Sep 13 03:04:16.654819 ignition[1108]: INFO : Ignition finished successfully Sep 13 03:04:16.657768 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 13 03:04:16.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.658011 systemd[1]: Stopped ignition-mount.service. Sep 13 03:04:16.673810 systemd[1]: Stopped target network.target. Sep 13 03:04:16.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.689520 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 13 03:04:16.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.689775 systemd[1]: Stopped ignition-disks.service. Sep 13 03:04:16.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.704691 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 13 03:04:16.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.704821 systemd[1]: Stopped ignition-kargs.service. Sep 13 03:04:16.719771 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 13 03:04:16.719917 systemd[1]: Stopped ignition-setup.service. Sep 13 03:04:16.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.735724 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 13 03:04:16.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.812000 audit: BPF prog-id=6 op=UNLOAD Sep 13 03:04:16.735877 systemd[1]: Stopped initrd-setup-root.service. Sep 13 03:04:16.750943 systemd[1]: Stopping systemd-networkd.service... Sep 13 03:04:16.756380 systemd-networkd[882]: enp1s0f0np0: DHCPv6 lease lost Sep 13 03:04:16.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.764485 systemd-networkd[882]: enp1s0f1np1: DHCPv6 lease lost Sep 13 03:04:16.866000 audit: BPF prog-id=9 op=UNLOAD Sep 13 03:04:16.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.766841 systemd[1]: Stopping systemd-resolved.service... Sep 13 03:04:16.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.781240 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 13 03:04:16.781512 systemd[1]: Stopped systemd-resolved.service. Sep 13 03:04:16.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.797301 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 13 03:04:16.797553 systemd[1]: Stopped systemd-networkd.service. Sep 13 03:04:16.812058 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 13 03:04:16.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.812149 systemd[1]: Closed systemd-networkd.socket. Sep 13 03:04:16.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.831125 systemd[1]: Stopping network-cleanup.service... Sep 13 03:04:16.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.843496 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 13 03:04:16.843666 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 13 03:04:17.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.859697 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 13 03:04:17.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.859833 systemd[1]: Stopped systemd-sysctl.service. Sep 13 03:04:17.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.875877 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 13 03:04:17.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:17.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.876006 systemd[1]: Stopped systemd-modules-load.service. Sep 13 03:04:16.891817 systemd[1]: Stopping systemd-udevd.service... Sep 13 03:04:16.910276 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 13 03:04:16.910855 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 13 03:04:16.910913 systemd[1]: Stopped systemd-udevd.service. Sep 13 03:04:16.916526 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 13 03:04:16.916550 systemd[1]: Closed systemd-udevd-control.socket. Sep 13 03:04:16.936457 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 13 03:04:16.936484 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 13 03:04:16.952523 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 13 03:04:17.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:16.952595 systemd[1]: Stopped dracut-pre-udev.service. Sep 13 03:04:16.967577 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 13 03:04:16.967667 systemd[1]: Stopped dracut-cmdline.service. Sep 13 03:04:16.983646 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 13 03:04:16.983780 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 13 03:04:17.000879 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 13 03:04:17.013516 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 13 03:04:17.013546 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 13 03:04:17.031520 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 13 03:04:17.031551 systemd[1]: Stopped kmod-static-nodes.service. Sep 13 03:04:17.048413 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 13 03:04:17.048459 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 13 03:04:17.066078 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 13 03:04:17.066991 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 13 03:04:17.067166 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 13 03:04:17.166446 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 13 03:04:17.166702 systemd[1]: Stopped network-cleanup.service. Sep 13 03:04:17.175935 systemd[1]: Reached target initrd-switch-root.target. Sep 13 03:04:17.193404 systemd[1]: Starting initrd-switch-root.service... Sep 13 03:04:17.231152 systemd[1]: Switching root. Sep 13 03:04:17.283782 systemd-journald[268]: Journal stopped Sep 13 03:04:21.199519 systemd-journald[268]: Received SIGTERM from PID 1 (systemd). Sep 13 03:04:21.199532 kernel: SELinux: Class mctp_socket not defined in policy. Sep 13 03:04:21.199541 kernel: SELinux: Class anon_inode not defined in policy. Sep 13 03:04:21.199547 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 13 03:04:21.199552 kernel: SELinux: policy capability network_peer_controls=1 Sep 13 03:04:21.199557 kernel: SELinux: policy capability open_perms=1 Sep 13 03:04:21.199563 kernel: SELinux: policy capability extended_socket_class=1 Sep 13 03:04:21.199569 kernel: SELinux: policy capability always_check_network=0 Sep 13 03:04:21.199574 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 13 03:04:21.199580 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 13 03:04:21.199586 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 13 03:04:21.199591 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 13 03:04:21.199596 kernel: kauditd_printk_skb: 33 callbacks suppressed Sep 13 03:04:21.199602 kernel: audit: type=1403 audit(1757732657.673:83): auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 13 03:04:21.199608 systemd[1]: Successfully loaded SELinux policy in 311.610ms. Sep 13 03:04:21.199616 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.014ms. Sep 13 03:04:21.199623 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 03:04:21.199629 systemd[1]: Detected architecture x86-64. Sep 13 03:04:21.199635 systemd[1]: Detected first boot. Sep 13 03:04:21.199641 systemd[1]: Hostname set to . Sep 13 03:04:21.199648 systemd[1]: Initializing machine ID from random generator. Sep 13 03:04:21.199654 kernel: audit: type=1400 audit(1757732657.988:84): avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 13 03:04:21.199661 kernel: audit: type=1400 audit(1757732658.044:85): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 03:04:21.199667 kernel: audit: type=1400 audit(1757732658.044:86): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 03:04:21.199673 kernel: audit: type=1334 audit(1757732658.098:87): prog-id=10 op=LOAD Sep 13 03:04:21.199678 kernel: audit: type=1334 audit(1757732658.098:88): prog-id=10 op=UNLOAD Sep 13 03:04:21.199684 kernel: audit: type=1334 audit(1757732658.175:89): prog-id=11 op=LOAD Sep 13 03:04:21.199690 kernel: audit: type=1334 audit(1757732658.175:90): prog-id=11 op=UNLOAD Sep 13 03:04:21.199696 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 13 03:04:21.199702 kernel: audit: type=1400 audit(1757732658.239:91): avc: denied { associate } for pid=1148 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 03:04:21.199708 kernel: audit: type=1300 audit(1757732658.239:91): arch=c000003e syscall=188 success=yes exit=0 a0=c0001258e4 a1=c00002ce58 a2=c00002b100 a3=32 items=0 ppid=1131 pid=1148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:21.199714 systemd[1]: Populated /etc with preset unit settings. Sep 13 03:04:21.199720 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 03:04:21.199727 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 03:04:21.199734 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 03:04:21.199740 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 13 03:04:21.199746 systemd[1]: Stopped initrd-switch-root.service. Sep 13 03:04:21.199752 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 13 03:04:21.199759 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 13 03:04:21.199765 systemd[1]: Created slice system-addon\x2drun.slice. Sep 13 03:04:21.199773 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Sep 13 03:04:21.199780 systemd[1]: Created slice system-getty.slice. Sep 13 03:04:21.199786 systemd[1]: Created slice system-modprobe.slice. Sep 13 03:04:21.199793 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 13 03:04:21.199799 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 13 03:04:21.199806 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 13 03:04:21.199812 systemd[1]: Created slice user.slice. Sep 13 03:04:21.199818 systemd[1]: Started systemd-ask-password-console.path. Sep 13 03:04:21.199824 systemd[1]: Started systemd-ask-password-wall.path. Sep 13 03:04:21.199831 systemd[1]: Set up automount boot.automount. Sep 13 03:04:21.199838 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 13 03:04:21.199844 systemd[1]: Stopped target initrd-switch-root.target. Sep 13 03:04:21.199850 systemd[1]: Stopped target initrd-fs.target. Sep 13 03:04:21.199857 systemd[1]: Stopped target initrd-root-fs.target. Sep 13 03:04:21.199863 systemd[1]: Reached target integritysetup.target. Sep 13 03:04:21.199869 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 03:04:21.199876 systemd[1]: Reached target remote-fs.target. Sep 13 03:04:21.199882 systemd[1]: Reached target slices.target. Sep 13 03:04:21.199889 systemd[1]: Reached target swap.target. Sep 13 03:04:21.199896 systemd[1]: Reached target torcx.target. Sep 13 03:04:21.199902 systemd[1]: Reached target veritysetup.target. Sep 13 03:04:21.199908 systemd[1]: Listening on systemd-coredump.socket. Sep 13 03:04:21.199914 systemd[1]: Listening on systemd-initctl.socket. Sep 13 03:04:21.199920 systemd[1]: Listening on systemd-networkd.socket. Sep 13 03:04:21.199928 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 03:04:21.199935 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 03:04:21.199942 systemd[1]: Listening on systemd-userdbd.socket. Sep 13 03:04:21.199948 systemd[1]: Mounting dev-hugepages.mount... Sep 13 03:04:21.199955 systemd[1]: Mounting dev-mqueue.mount... Sep 13 03:04:21.199961 systemd[1]: Mounting media.mount... Sep 13 03:04:21.199968 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 03:04:21.199975 systemd[1]: Mounting sys-kernel-debug.mount... Sep 13 03:04:21.199982 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 13 03:04:21.199988 systemd[1]: Mounting tmp.mount... Sep 13 03:04:21.199994 systemd[1]: Starting flatcar-tmpfiles.service... Sep 13 03:04:21.200001 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 03:04:21.200007 systemd[1]: Starting kmod-static-nodes.service... Sep 13 03:04:21.200014 systemd[1]: Starting modprobe@configfs.service... Sep 13 03:04:21.200020 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 03:04:21.200027 systemd[1]: Starting modprobe@drm.service... Sep 13 03:04:21.200034 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 03:04:21.200040 systemd[1]: Starting modprobe@fuse.service... Sep 13 03:04:21.200047 kernel: fuse: init (API version 7.34) Sep 13 03:04:21.200053 systemd[1]: Starting modprobe@loop.service... Sep 13 03:04:21.200059 kernel: loop: module loaded Sep 13 03:04:21.200065 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 13 03:04:21.200071 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 13 03:04:21.200078 systemd[1]: Stopped systemd-fsck-root.service. Sep 13 03:04:21.200085 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 13 03:04:21.200092 systemd[1]: Stopped systemd-fsck-usr.service. Sep 13 03:04:21.200099 systemd[1]: Stopped systemd-journald.service. Sep 13 03:04:21.200105 systemd[1]: Starting systemd-journald.service... Sep 13 03:04:21.200112 systemd[1]: Starting systemd-modules-load.service... Sep 13 03:04:21.200120 systemd-journald[1258]: Journal started Sep 13 03:04:21.200145 systemd-journald[1258]: Runtime Journal (/run/log/journal/8af669b166fc49c59538e6c2c8ab568b) is 8.0M, max 640.0M, 632.0M free. Sep 13 03:04:17.673000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 13 03:04:17.988000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 13 03:04:18.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 03:04:18.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 03:04:18.098000 audit: BPF prog-id=10 op=LOAD Sep 13 03:04:18.098000 audit: BPF prog-id=10 op=UNLOAD Sep 13 03:04:18.175000 audit: BPF prog-id=11 op=LOAD Sep 13 03:04:18.175000 audit: BPF prog-id=11 op=UNLOAD Sep 13 03:04:18.239000 audit[1148]: AVC avc: denied { associate } for pid=1148 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 03:04:18.239000 audit[1148]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001258e4 a1=c00002ce58 a2=c00002b100 a3=32 items=0 ppid=1131 pid=1148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:18.239000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 03:04:18.270000 audit[1148]: AVC avc: denied { associate } for pid=1148 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 13 03:04:18.270000 audit[1148]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001259c9 a2=1ed a3=0 items=2 ppid=1131 pid=1148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:18.270000 audit: CWD cwd="/" Sep 13 03:04:18.270000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:18.270000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:18.270000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 03:04:19.805000 audit: BPF prog-id=12 op=LOAD Sep 13 03:04:19.805000 audit: BPF prog-id=3 op=UNLOAD Sep 13 03:04:19.806000 audit: BPF prog-id=13 op=LOAD Sep 13 03:04:19.806000 audit: BPF prog-id=14 op=LOAD Sep 13 03:04:19.806000 audit: BPF prog-id=4 op=UNLOAD Sep 13 03:04:19.806000 audit: BPF prog-id=5 op=UNLOAD Sep 13 03:04:19.806000 audit: BPF prog-id=15 op=LOAD Sep 13 03:04:19.806000 audit: BPF prog-id=12 op=UNLOAD Sep 13 03:04:19.806000 audit: BPF prog-id=16 op=LOAD Sep 13 03:04:19.806000 audit: BPF prog-id=17 op=LOAD Sep 13 03:04:19.806000 audit: BPF prog-id=13 op=UNLOAD Sep 13 03:04:19.806000 audit: BPF prog-id=14 op=UNLOAD Sep 13 03:04:19.807000 audit: BPF prog-id=18 op=LOAD Sep 13 03:04:19.807000 audit: BPF prog-id=15 op=UNLOAD Sep 13 03:04:19.807000 audit: BPF prog-id=19 op=LOAD Sep 13 03:04:19.807000 audit: BPF prog-id=20 op=LOAD Sep 13 03:04:19.807000 audit: BPF prog-id=16 op=UNLOAD Sep 13 03:04:19.807000 audit: BPF prog-id=17 op=UNLOAD Sep 13 03:04:19.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:19.857000 audit: BPF prog-id=18 op=UNLOAD Sep 13 03:04:19.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:19.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.171000 audit: BPF prog-id=21 op=LOAD Sep 13 03:04:21.172000 audit: BPF prog-id=22 op=LOAD Sep 13 03:04:21.172000 audit: BPF prog-id=23 op=LOAD Sep 13 03:04:21.172000 audit: BPF prog-id=19 op=UNLOAD Sep 13 03:04:21.172000 audit: BPF prog-id=20 op=UNLOAD Sep 13 03:04:21.194000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 13 03:04:21.194000 audit[1258]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffc187313c0 a2=4000 a3=7ffc1873145c items=0 ppid=1 pid=1258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:21.194000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 13 03:04:19.805441 systemd[1]: Queued start job for default target multi-user.target. Sep 13 03:04:18.238581 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 03:04:19.805447 systemd[1]: Unnecessary job was removed for dev-sdb6.device. Sep 13 03:04:18.239097 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 03:04:19.809233 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 13 03:04:18.239109 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 03:04:18.239127 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 13 03:04:18.239133 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 13 03:04:18.239149 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 13 03:04:18.239156 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 13 03:04:18.239271 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 13 03:04:18.239340 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 03:04:18.239348 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 03:04:18.240406 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 13 03:04:18.240428 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 13 03:04:18.240439 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 13 03:04:18.240447 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 13 03:04:18.240457 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 13 03:04:18.240464 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 13 03:04:19.461491 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:19Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 03:04:19.461632 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:19Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 03:04:19.461686 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:19Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 03:04:19.461780 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:19Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 03:04:19.461810 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:19Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 13 03:04:19.461845 /usr/lib/systemd/system-generators/torcx-generator[1148]: time="2025-09-13T03:04:19Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 13 03:04:21.231485 systemd[1]: Starting systemd-network-generator.service... Sep 13 03:04:21.253309 systemd[1]: Starting systemd-remount-fs.service... Sep 13 03:04:21.276311 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 03:04:21.308922 systemd[1]: verity-setup.service: Deactivated successfully. Sep 13 03:04:21.308943 systemd[1]: Stopped verity-setup.service. Sep 13 03:04:21.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.343311 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 03:04:21.358462 systemd[1]: Started systemd-journald.service. Sep 13 03:04:21.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.366824 systemd[1]: Mounted dev-hugepages.mount. Sep 13 03:04:21.375545 systemd[1]: Mounted dev-mqueue.mount. Sep 13 03:04:21.383647 systemd[1]: Mounted media.mount. Sep 13 03:04:21.391549 systemd[1]: Mounted sys-kernel-debug.mount. Sep 13 03:04:21.400516 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 13 03:04:21.409513 systemd[1]: Mounted tmp.mount. Sep 13 03:04:21.416612 systemd[1]: Finished flatcar-tmpfiles.service. Sep 13 03:04:21.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.425665 systemd[1]: Finished kmod-static-nodes.service. Sep 13 03:04:21.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.434706 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 13 03:04:21.434854 systemd[1]: Finished modprobe@configfs.service. Sep 13 03:04:21.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.443787 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 03:04:21.443956 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 03:04:21.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.453015 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 03:04:21.453287 systemd[1]: Finished modprobe@drm.service. Sep 13 03:04:21.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.462321 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 03:04:21.462640 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 03:04:21.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.472130 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 13 03:04:21.472597 systemd[1]: Finished modprobe@fuse.service. Sep 13 03:04:21.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.482166 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 03:04:21.482510 systemd[1]: Finished modprobe@loop.service. Sep 13 03:04:21.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.491132 systemd[1]: Finished systemd-modules-load.service. Sep 13 03:04:21.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.500093 systemd[1]: Finished systemd-network-generator.service. Sep 13 03:04:21.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.509095 systemd[1]: Finished systemd-remount-fs.service. Sep 13 03:04:21.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.518094 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 03:04:21.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.527612 systemd[1]: Reached target network-pre.target. Sep 13 03:04:21.539158 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 13 03:04:21.549981 systemd[1]: Mounting sys-kernel-config.mount... Sep 13 03:04:21.557585 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 13 03:04:21.560987 systemd[1]: Starting systemd-hwdb-update.service... Sep 13 03:04:21.570852 systemd[1]: Starting systemd-journal-flush.service... Sep 13 03:04:21.579401 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 03:04:21.579632 systemd-journald[1258]: Time spent on flushing to /var/log/journal/8af669b166fc49c59538e6c2c8ab568b is 14.851ms for 1620 entries. Sep 13 03:04:21.579632 systemd-journald[1258]: System Journal (/var/log/journal/8af669b166fc49c59538e6c2c8ab568b) is 8.0M, max 195.6M, 187.6M free. Sep 13 03:04:21.622329 systemd-journald[1258]: Received client request to flush runtime journal. Sep 13 03:04:21.579908 systemd[1]: Starting systemd-random-seed.service... Sep 13 03:04:21.603388 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 03:04:21.603902 systemd[1]: Starting systemd-sysctl.service... Sep 13 03:04:21.610882 systemd[1]: Starting systemd-sysusers.service... Sep 13 03:04:21.618816 systemd[1]: Starting systemd-udev-settle.service... Sep 13 03:04:21.626487 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 13 03:04:21.634395 systemd[1]: Mounted sys-kernel-config.mount. Sep 13 03:04:21.642528 systemd[1]: Finished systemd-journal-flush.service. Sep 13 03:04:21.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.650497 systemd[1]: Finished systemd-random-seed.service. Sep 13 03:04:21.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.658476 systemd[1]: Finished systemd-sysctl.service. Sep 13 03:04:21.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.667495 systemd[1]: Finished systemd-sysusers.service. Sep 13 03:04:21.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.676461 systemd[1]: Reached target first-boot-complete.target. Sep 13 03:04:21.686049 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 03:04:21.695330 udevadm[1274]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 13 03:04:21.704336 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 03:04:21.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.876828 systemd[1]: Finished systemd-hwdb-update.service. Sep 13 03:04:21.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.885000 audit: BPF prog-id=24 op=LOAD Sep 13 03:04:21.885000 audit: BPF prog-id=25 op=LOAD Sep 13 03:04:21.885000 audit: BPF prog-id=7 op=UNLOAD Sep 13 03:04:21.885000 audit: BPF prog-id=8 op=UNLOAD Sep 13 03:04:21.887603 systemd[1]: Starting systemd-udevd.service... Sep 13 03:04:21.898879 systemd-udevd[1277]: Using default interface naming scheme 'v252'. Sep 13 03:04:21.915683 systemd[1]: Started systemd-udevd.service. Sep 13 03:04:21.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:21.925637 systemd[1]: Condition check resulted in dev-ttyS1.device being skipped. Sep 13 03:04:21.926765 systemd[1]: Starting systemd-networkd.service... Sep 13 03:04:21.925000 audit: BPF prog-id=26 op=LOAD Sep 13 03:04:21.962291 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input2 Sep 13 03:04:21.962395 kernel: ACPI: button: Sleep Button [SLPB] Sep 13 03:04:21.962424 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:21.979997 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Sep 13 03:04:21.994000 audit: BPF prog-id=27 op=LOAD Sep 13 03:04:22.007000 audit: BPF prog-id=28 op=LOAD Sep 13 03:04:22.009267 kernel: ACPI: button: Power Button [PWRF] Sep 13 03:04:22.009298 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.044159 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.044296 kernel: mousedev: PS/2 mouse device common for all mice Sep 13 03:04:22.024000 audit: BPF prog-id=29 op=LOAD Sep 13 03:04:22.026632 systemd[1]: Starting systemd-userdbd.service... Sep 13 03:04:22.051828 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 03:04:21.993000 audit[1329]: AVC avc: denied { confidentiality } for pid=1329 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 13 03:04:21.993000 audit[1329]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=556cf91a5bd0 a1=4d9cc a2=7f72dc9fbbc5 a3=5 items=42 ppid=1277 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:21.993000 audit: CWD cwd="/" Sep 13 03:04:21.993000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=1 name=(null) inode=25049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=2 name=(null) inode=25049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=3 name=(null) inode=25050 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=4 name=(null) inode=25049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=5 name=(null) inode=25051 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:22.092305 kernel: IPMI message handler: version 39.2 Sep 13 03:04:21.993000 audit: PATH item=6 name=(null) inode=25049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=7 name=(null) inode=25052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=8 name=(null) inode=25052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=9 name=(null) inode=25053 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=10 name=(null) inode=25052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=11 name=(null) inode=25054 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=12 name=(null) inode=25052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=13 name=(null) inode=25055 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=14 name=(null) inode=25052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=15 name=(null) inode=25056 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=16 name=(null) inode=25052 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=17 name=(null) inode=25057 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=18 name=(null) inode=25049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=19 name=(null) inode=25058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=20 name=(null) inode=25058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=21 name=(null) inode=25059 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=22 name=(null) inode=25058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=23 name=(null) inode=25060 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=24 name=(null) inode=25058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=25 name=(null) inode=25061 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=26 name=(null) inode=25058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=27 name=(null) inode=25062 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=28 name=(null) inode=25058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=29 name=(null) inode=25063 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=30 name=(null) inode=25049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=31 name=(null) inode=25064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=32 name=(null) inode=25064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=33 name=(null) inode=25065 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=34 name=(null) inode=25064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=35 name=(null) inode=25066 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=36 name=(null) inode=25064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=37 name=(null) inode=25067 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=38 name=(null) inode=25064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=39 name=(null) inode=25068 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=40 name=(null) inode=25064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PATH item=41 name=(null) inode=25069 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:04:21.993000 audit: PROCTITLE proctitle="(udev-worker)" Sep 13 03:04:22.100059 systemd[1]: Started systemd-userdbd.service. Sep 13 03:04:22.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:22.119270 kernel: ipmi device interface Sep 13 03:04:22.123269 kernel: mei_me 0000:00:16.0: Device doesn't have valid ME Interface Sep 13 03:04:22.155925 kernel: mei_me 0000:00:16.4: Device doesn't have valid ME Interface Sep 13 03:04:22.188254 kernel: i801_smbus 0000:00:1f.4: SPD Write Disable is set Sep 13 03:04:22.220212 kernel: i801_smbus 0000:00:1f.4: SMBus using PCI interrupt Sep 13 03:04:22.220308 kernel: ipmi_si: IPMI System Interface driver Sep 13 03:04:22.220323 kernel: i2c i2c-0: 2/4 memory slots populated (from DMI) Sep 13 03:04:22.220397 kernel: ipmi_si dmi-ipmi-si.0: ipmi_platform: probing via SMBIOS Sep 13 03:04:22.234440 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.284729 kernel: ipmi_platform: ipmi_si: SMBIOS: io 0xca2 regsize 1 spacing 1 irq 0 Sep 13 03:04:22.284747 kernel: ipmi_si: Adding SMBIOS-specified kcs state machine Sep 13 03:04:22.284761 kernel: ipmi_si IPI0001:00: ipmi_platform: probing via ACPI Sep 13 03:04:22.379420 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.397352 kernel: ipmi_si IPI0001:00: ipmi_platform: [io 0x0ca2] regsize 1 spacing 1 irq 0 Sep 13 03:04:22.397427 kernel: ipmi_si dmi-ipmi-si.0: Removing SMBIOS-specified kcs state machine in favor of ACPI Sep 13 03:04:22.397507 kernel: ipmi_si: Adding ACPI-specified kcs state machine Sep 13 03:04:22.397519 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.397589 kernel: iTCO_vendor_support: vendor-support=0 Sep 13 03:04:22.397606 kernel: ipmi_si: Trying ACPI-specified kcs state machine at i/o address 0xca2, slave address 0x20, irq 0 Sep 13 03:04:22.412267 kernel: ipmi_si IPI0001:00: The BMC does not support clearing the recv irq bit, compensating, but the BMC needs to be fixed. Sep 13 03:04:22.479270 kernel: iTCO_wdt iTCO_wdt: Found a Intel PCH TCO device (Version=6, TCOBASE=0x0400) Sep 13 03:04:22.546517 kernel: ipmi_si IPI0001:00: IPMI message handler: Found new BMC (man_id: 0x002a7c, prod_id: 0x1b0f, dev_id: 0x20) Sep 13 03:04:22.546646 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.565513 kernel: iTCO_wdt iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0) Sep 13 03:04:22.565589 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.565669 kernel: ipmi_si IPI0001:00: IPMI kcs interface initialized Sep 13 03:04:22.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:22.515575 systemd-networkd[1307]: bond0: netdev ready Sep 13 03:04:22.518236 systemd-networkd[1307]: lo: Link UP Sep 13 03:04:22.518239 systemd-networkd[1307]: lo: Gained carrier Sep 13 03:04:22.518768 systemd-networkd[1307]: Enumeration completed Sep 13 03:04:22.518839 systemd[1]: Started systemd-networkd.service. Sep 13 03:04:22.519115 systemd-networkd[1307]: bond0: Configuring with /etc/systemd/network/05-bond0.network. Sep 13 03:04:22.519916 systemd-networkd[1307]: enp1s0f1np1: Configuring with /etc/systemd/network/10-0c:42:a1:97:fd:2d.network. Sep 13 03:04:22.605271 kernel: ipmi_ssif: IPMI SSIF Interface driver Sep 13 03:04:22.643386 kernel: intel_rapl_common: Found RAPL domain package Sep 13 03:04:22.643449 kernel: intel_rapl_common: Found RAPL domain core Sep 13 03:04:22.659984 kernel: intel_rapl_common: Found RAPL domain dram Sep 13 03:04:22.679268 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.697458 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Sep 13 03:04:22.720324 kernel: bond0: (slave enp1s0f1np1): Enslaving as a backup interface with an up link Sep 13 03:04:22.721015 systemd-networkd[1307]: enp1s0f0np0: Configuring with /etc/systemd/network/10-0c:42:a1:97:fd:2c.network. Sep 13 03:04:22.750317 kernel: bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond Sep 13 03:04:22.888341 kernel: bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond Sep 13 03:04:22.888485 kernel: mlx5_core 0000:01:00.0 enp1s0f0np0: Link up Sep 13 03:04:22.926315 kernel: bond0: (slave enp1s0f0np0): Enslaving as a backup interface with an up link Sep 13 03:04:22.946270 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready Sep 13 03:04:22.946316 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:22.964517 kernel: bond0: (slave enp1s0f1np1): link status definitely up, 10000 Mbps full duplex Sep 13 03:04:22.955895 systemd-networkd[1307]: bond0: Link UP Sep 13 03:04:22.956099 systemd-networkd[1307]: enp1s0f1np1: Link UP Sep 13 03:04:22.956238 systemd-networkd[1307]: enp1s0f1np1: Gained carrier Sep 13 03:04:22.957230 systemd-networkd[1307]: enp1s0f1np1: Reconfiguring with /etc/systemd/network/10-0c:42:a1:97:fd:2c.network. Sep 13 03:04:22.999190 kernel: bond0: active interface up! Sep 13 03:04:23.024311 kernel: bond0: (slave enp1s0f0np0): link status definitely up, 10000 Mbps full duplex Sep 13 03:04:23.052268 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:23.054563 systemd[1]: Finished systemd-udev-settle.service. Sep 13 03:04:23.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.063008 systemd[1]: Starting lvm2-activation-early.service... Sep 13 03:04:23.078851 lvm[1380]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 03:04:23.079125 kernel: kauditd_printk_skb: 124 callbacks suppressed Sep 13 03:04:23.079144 kernel: audit: type=1130 audit(1757732663.061:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.152266 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.175305 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.176721 systemd[1]: Finished lvm2-activation-early.service. Sep 13 03:04:23.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.193415 systemd[1]: Reached target cryptsetup.target. Sep 13 03:04:23.199312 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.199341 kernel: audit: type=1130 audit(1757732663.192:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.247310 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.285948 systemd[1]: Starting lvm2-activation.service... Sep 13 03:04:23.288118 lvm[1381]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 03:04:23.292281 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.315294 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.337267 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.359305 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.381319 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.385872 systemd[1]: Finished lvm2-activation.service. Sep 13 03:04:23.403286 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.420443 systemd[1]: Reached target local-fs-pre.target. Sep 13 03:04:23.426298 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.426322 kernel: audit: type=1130 audit(1757732663.419:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.472331 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.510360 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 13 03:04:23.510375 systemd[1]: Reached target local-fs.target. Sep 13 03:04:23.516442 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.532352 systemd[1]: Reached target machines.target. Sep 13 03:04:23.539439 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.556993 systemd[1]: Starting ldconfig.service... Sep 13 03:04:23.562310 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.578824 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 03:04:23.578844 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 03:04:23.579585 systemd[1]: Starting systemd-boot-update.service... Sep 13 03:04:23.585312 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.600820 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 13 03:04:23.607339 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.625883 systemd[1]: Starting systemd-machine-id-commit.service... Sep 13 03:04:23.629312 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.629489 systemd[1]: Starting systemd-sysext.service... Sep 13 03:04:23.629704 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1384 (bootctl) Sep 13 03:04:23.630050 systemd-networkd[1307]: enp1s0f0np0: Link UP Sep 13 03:04:23.630234 systemd-networkd[1307]: bond0: Gained carrier Sep 13 03:04:23.630290 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 13 03:04:23.630332 systemd-networkd[1307]: enp1s0f0np0: Gained carrier Sep 13 03:04:23.651329 kernel: bond0: (slave enp1s0f1np1): link status down for interface, disabling it in 200 ms Sep 13 03:04:23.651362 kernel: bond0: (slave enp1s0f1np1): invalid new link 1 on slave Sep 13 03:04:23.666820 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 13 03:04:23.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.679578 systemd[1]: Unmounting usr-share-oem.mount... Sep 13 03:04:23.722265 kernel: audit: type=1130 audit(1757732663.665:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.722799 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 13 03:04:23.722894 systemd[1]: Unmounted usr-share-oem.mount. Sep 13 03:04:23.723617 systemd-networkd[1307]: enp1s0f1np1: Link DOWN Sep 13 03:04:23.723619 systemd-networkd[1307]: enp1s0f1np1: Lost carrier Sep 13 03:04:23.756269 kernel: loop0: detected capacity change from 0 to 229808 Sep 13 03:04:23.799491 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 13 03:04:23.799849 systemd[1]: Finished systemd-machine-id-commit.service. Sep 13 03:04:23.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.857270 kernel: audit: type=1130 audit(1757732663.798:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.857325 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 13 03:04:23.862269 systemd-fsck[1393]: fsck.fat 4.2 (2021-01-31) Sep 13 03:04:23.862269 systemd-fsck[1393]: /dev/sdb1: 790 files, 120761/258078 clusters Sep 13 03:04:23.863410 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 13 03:04:23.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.896268 kernel: mlx5_core 0000:01:00.1 enp1s0f1np1: Link up Sep 13 03:04:23.896387 kernel: audit: type=1130 audit(1757732663.888:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:23.896411 systemd[1]: Mounting boot.mount... Sep 13 03:04:23.899266 kernel: bond0: (slave enp1s0f1np1): link status up again after 200 ms Sep 13 03:04:23.899295 kernel: bond0: (slave enp1s0f1np1): speed changed to 0 on port 1 Sep 13 03:04:23.899762 systemd-networkd[1307]: enp1s0f1np1: Link UP Sep 13 03:04:23.899934 systemd-networkd[1307]: enp1s0f1np1: Gained carrier Sep 13 03:04:24.007100 systemd[1]: Mounted boot.mount. Sep 13 03:04:24.014266 kernel: bond0: (slave enp1s0f1np1): link status definitely up, 10000 Mbps full duplex Sep 13 03:04:24.033266 kernel: loop1: detected capacity change from 0 to 229808 Sep 13 03:04:24.038137 systemd[1]: Finished systemd-boot-update.service. Sep 13 03:04:24.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.051312 (sd-sysext)[1397]: Using extensions 'kubernetes'. Sep 13 03:04:24.051505 (sd-sysext)[1397]: Merged extensions into '/usr'. Sep 13 03:04:24.093305 kernel: audit: type=1130 audit(1757732664.045:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.102322 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 03:04:24.103034 systemd[1]: Mounting usr-share-oem.mount... Sep 13 03:04:24.109459 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.110086 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 03:04:24.116866 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 03:04:24.123866 systemd[1]: Starting modprobe@loop.service... Sep 13 03:04:24.127553 ldconfig[1382]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 13 03:04:24.130383 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.130450 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 03:04:24.130515 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 03:04:24.132340 systemd[1]: Finished ldconfig.service. Sep 13 03:04:24.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.139522 systemd[1]: Mounted usr-share-oem.mount. Sep 13 03:04:24.186319 kernel: audit: type=1130 audit(1757732664.138:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.192515 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 03:04:24.192578 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 03:04:24.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.200549 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 03:04:24.200613 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 03:04:24.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.248296 kernel: audit: type=1130 audit(1757732664.199:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.248316 kernel: audit: type=1131 audit(1757732664.199:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.304537 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 03:04:24.304597 systemd[1]: Finished modprobe@loop.service. Sep 13 03:04:24.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.312610 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 03:04:24.312669 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.313152 systemd[1]: Finished systemd-sysext.service. Sep 13 03:04:24.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.321874 systemd[1]: Starting ensure-sysext.service... Sep 13 03:04:24.328830 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 13 03:04:24.334476 systemd-tmpfiles[1404]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 13 03:04:24.335783 systemd-tmpfiles[1404]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 13 03:04:24.336840 systemd-tmpfiles[1404]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 13 03:04:24.338527 systemd[1]: Reloading. Sep 13 03:04:24.364563 /usr/lib/systemd/system-generators/torcx-generator[1423]: time="2025-09-13T03:04:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 03:04:24.364590 /usr/lib/systemd/system-generators/torcx-generator[1423]: time="2025-09-13T03:04:24Z" level=info msg="torcx already run" Sep 13 03:04:24.417399 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 03:04:24.417407 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 03:04:24.428662 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 03:04:24.468000 audit: BPF prog-id=30 op=LOAD Sep 13 03:04:24.468000 audit: BPF prog-id=21 op=UNLOAD Sep 13 03:04:24.468000 audit: BPF prog-id=31 op=LOAD Sep 13 03:04:24.469000 audit: BPF prog-id=32 op=LOAD Sep 13 03:04:24.469000 audit: BPF prog-id=22 op=UNLOAD Sep 13 03:04:24.469000 audit: BPF prog-id=23 op=UNLOAD Sep 13 03:04:24.469000 audit: BPF prog-id=33 op=LOAD Sep 13 03:04:24.469000 audit: BPF prog-id=34 op=LOAD Sep 13 03:04:24.469000 audit: BPF prog-id=24 op=UNLOAD Sep 13 03:04:24.469000 audit: BPF prog-id=25 op=UNLOAD Sep 13 03:04:24.470000 audit: BPF prog-id=35 op=LOAD Sep 13 03:04:24.470000 audit: BPF prog-id=27 op=UNLOAD Sep 13 03:04:24.470000 audit: BPF prog-id=36 op=LOAD Sep 13 03:04:24.470000 audit: BPF prog-id=37 op=LOAD Sep 13 03:04:24.470000 audit: BPF prog-id=28 op=UNLOAD Sep 13 03:04:24.470000 audit: BPF prog-id=29 op=UNLOAD Sep 13 03:04:24.471000 audit: BPF prog-id=38 op=LOAD Sep 13 03:04:24.471000 audit: BPF prog-id=26 op=UNLOAD Sep 13 03:04:24.473407 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 13 03:04:24.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:24.484214 systemd[1]: Starting audit-rules.service... Sep 13 03:04:24.491950 systemd[1]: Starting clean-ca-certificates.service... Sep 13 03:04:24.501018 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 13 03:04:24.499000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 13 03:04:24.499000 audit[1502]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff6f66fb70 a2=420 a3=0 items=0 ppid=1486 pid=1502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:24.499000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 13 03:04:24.501296 augenrules[1502]: No rules Sep 13 03:04:24.510342 systemd[1]: Starting systemd-resolved.service... Sep 13 03:04:24.518298 systemd[1]: Starting systemd-timesyncd.service... Sep 13 03:04:24.526064 systemd[1]: Starting systemd-update-utmp.service... Sep 13 03:04:24.533696 systemd[1]: Finished audit-rules.service. Sep 13 03:04:24.540471 systemd[1]: Finished clean-ca-certificates.service. Sep 13 03:04:24.548488 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 13 03:04:24.561883 systemd[1]: Finished systemd-update-utmp.service. Sep 13 03:04:24.570890 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.571511 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 03:04:24.578895 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 03:04:24.585887 systemd[1]: Starting modprobe@loop.service... Sep 13 03:04:24.590633 systemd-resolved[1508]: Positive Trust Anchors: Sep 13 03:04:24.590638 systemd-resolved[1508]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 03:04:24.590656 systemd-resolved[1508]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 03:04:24.593367 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.593439 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 03:04:24.594163 systemd[1]: Starting systemd-update-done.service... Sep 13 03:04:24.594731 systemd-resolved[1508]: Using system hostname 'ci-3510.3.8-n-ba666c4ddc'. Sep 13 03:04:24.602358 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 03:04:24.602859 systemd[1]: Started systemd-timesyncd.service. Sep 13 03:04:24.611853 systemd[1]: Started systemd-resolved.service. Sep 13 03:04:24.620630 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 03:04:24.620707 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 03:04:24.629575 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 03:04:24.629640 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 03:04:24.637532 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 03:04:24.637595 systemd[1]: Finished modprobe@loop.service. Sep 13 03:04:24.645532 systemd[1]: Finished systemd-update-done.service. Sep 13 03:04:24.654653 systemd[1]: Reached target network.target. Sep 13 03:04:24.662395 systemd[1]: Reached target nss-lookup.target. Sep 13 03:04:24.665307 systemd-networkd[1307]: bond0: Gained IPv6LL Sep 13 03:04:24.665520 systemd-timesyncd[1509]: Network configuration changed, trying to establish connection. Sep 13 03:04:24.670502 systemd[1]: Reached target time-set.target. Sep 13 03:04:24.678514 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.679201 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 03:04:24.687013 systemd[1]: Starting modprobe@drm.service... Sep 13 03:04:24.693864 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 03:04:24.700866 systemd[1]: Starting modprobe@loop.service... Sep 13 03:04:24.707382 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.707449 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 03:04:24.708051 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 13 03:04:24.716352 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 03:04:24.717005 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 03:04:24.717069 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 03:04:24.726480 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 03:04:24.726541 systemd[1]: Finished modprobe@drm.service. Sep 13 03:04:24.734659 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 03:04:24.734719 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 03:04:24.743578 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 03:04:24.743644 systemd[1]: Finished modprobe@loop.service. Sep 13 03:04:24.752674 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 03:04:24.752738 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 03:04:24.752781 systemd[1]: Reached target sysinit.target. Sep 13 03:04:24.761486 systemd[1]: Started motdgen.path. Sep 13 03:04:24.768437 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 13 03:04:24.778558 systemd[1]: Started logrotate.timer. Sep 13 03:04:24.785499 systemd[1]: Started mdadm.timer. Sep 13 03:04:24.792482 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 13 03:04:24.800484 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 13 03:04:24.800571 systemd[1]: Reached target paths.target. Sep 13 03:04:24.807494 systemd[1]: Reached target timers.target. Sep 13 03:04:24.815032 systemd[1]: Listening on dbus.socket. Sep 13 03:04:24.823927 systemd[1]: Starting docker.socket... Sep 13 03:04:24.831699 systemd[1]: Listening on sshd.socket. Sep 13 03:04:24.838406 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 03:04:24.838431 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.838445 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Sep 13 03:04:24.838756 systemd[1]: Finished ensure-sysext.service. Sep 13 03:04:24.847437 systemd[1]: Listening on docker.socket. Sep 13 03:04:24.854906 systemd[1]: Reached target sockets.target. Sep 13 03:04:24.863414 systemd[1]: Reached target basic.target. Sep 13 03:04:24.870387 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.870401 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 03:04:24.870857 systemd[1]: Starting containerd.service... Sep 13 03:04:24.877779 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Sep 13 03:04:24.886857 systemd[1]: Starting coreos-metadata.service... Sep 13 03:04:24.893943 systemd[1]: Starting dbus.service... Sep 13 03:04:24.899846 systemd[1]: Starting enable-oem-cloudinit.service... Sep 13 03:04:24.904251 jq[1531]: false Sep 13 03:04:24.906969 systemd[1]: Starting extend-filesystems.service... Sep 13 03:04:24.907881 coreos-metadata[1524]: Sep 13 03:04:24.907 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Sep 13 03:04:24.910628 dbus-daemon[1530]: [system] SELinux support is enabled Sep 13 03:04:24.913387 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 13 03:04:24.913994 systemd[1]: Starting motdgen.service... Sep 13 03:04:24.915334 extend-filesystems[1532]: Found loop1 Sep 13 03:04:24.949432 kernel: EXT4-fs (sdb9): resizing filesystem from 553472 to 116605649 blocks Sep 13 03:04:24.922159 systemd[1]: Starting prepare-helm.service... Sep 13 03:04:24.949521 coreos-metadata[1527]: Sep 13 03:04:24.917 INFO Fetching https://metadata.packet.net/metadata: Attempt #1 Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sda Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb1 Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb2 Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb3 Sep 13 03:04:24.949629 extend-filesystems[1532]: Found usr Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb4 Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb6 Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb7 Sep 13 03:04:24.949629 extend-filesystems[1532]: Found sdb9 Sep 13 03:04:24.949629 extend-filesystems[1532]: Checking size of /dev/sdb9 Sep 13 03:04:24.949629 extend-filesystems[1532]: Resized partition /dev/sdb9 Sep 13 03:04:25.113421 kernel: mlx5_core 0000:01:00.0: lag map port 1:1 port 2:2 shared_fdb:0 Sep 13 03:04:24.958068 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 13 03:04:25.101154 dbus-daemon[1530]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 13 03:04:25.113695 extend-filesystems[1548]: resize2fs 1.46.5 (30-Dec-2021) Sep 13 03:04:24.964983 systemd[1]: Starting sshd-keygen.service... Sep 13 03:04:24.988828 systemd[1]: Starting systemd-logind.service... Sep 13 03:04:25.001318 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 03:04:25.002060 systemd[1]: Starting tcsd.service... Sep 13 03:04:25.130816 update_engine[1568]: I0913 03:04:25.056010 1568 main.cc:92] Flatcar Update Engine starting Sep 13 03:04:25.130816 update_engine[1568]: I0913 03:04:25.059522 1568 update_check_scheduler.cc:74] Next update check in 2m36s Sep 13 03:04:25.008756 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 13 03:04:25.131010 jq[1570]: true Sep 13 03:04:25.009136 systemd[1]: Starting update-engine.service... Sep 13 03:04:25.012178 systemd-logind[1566]: Watching system buttons on /dev/input/event3 (Power Button) Sep 13 03:04:25.131273 tar[1572]: linux-amd64/LICENSE Sep 13 03:04:25.131273 tar[1572]: linux-amd64/helm Sep 13 03:04:25.012188 systemd-logind[1566]: Watching system buttons on /dev/input/event2 (Sleep Button) Sep 13 03:04:25.131439 jq[1574]: true Sep 13 03:04:25.012198 systemd-logind[1566]: Watching system buttons on /dev/input/event0 (HID 0557:2419) Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.109663860Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.117884355Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.119430211Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.120109052Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.1 Sep 13 03:04:25.131525 env[1575]: 92-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.120123180Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.121625226Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter Sep 13 03:04:25.131525 env[1575]: : skip plugin" type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.121637261Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.121645017Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.121650551Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.121697118Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131525 env[1575]: time="2025-09-13T03:04:25.121821224Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 13 03:04:25.012331 systemd-logind[1566]: New seat seat0. Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.121889783Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.121898821Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.123668485Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.123681548Z" level=info msg="metadata content store policy set" policy=shared Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130209156Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130223363Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130230878Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130245956Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130253480Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130260935Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130282621Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130296298Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.131918 env[1575]: time="2025-09-13T03:04:25.130303972Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.026941 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.130311501Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.130320144Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.130328176Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.130374013Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.130420310Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131102004Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131123639Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131132637Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131161426Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131169134Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131175654Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131181598Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131188095Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132178 env[1575]: time="2025-09-13T03:04:25.131194486Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.041736 systemd[1]: Started dbus.service. Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131200576Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131206927Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131214511Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131293408Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131302883Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131309220Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131318324Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131327876Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131334465Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131344156Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 13 03:04:25.132453 env[1575]: time="2025-09-13T03:04:25.131364257Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 13 03:04:25.132613 bash[1602]: Updated "/home/core/.ssh/authorized_keys" Sep 13 03:04:25.057437 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 13 03:04:25.057554 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131477151Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131510445Z" level=info msg="Connect containerd service" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131532422Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131812358Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131902424Z" level=info msg="Start subscribing containerd event" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131940186Z" level=info msg="Start recovering state" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131962114Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131981549Z" level=info msg="Start event monitor" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131990544Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.131993384Z" level=info msg="Start snapshots syncer" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.132005252Z" level=info msg="Start cni network conf syncer for default" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.132009613Z" level=info msg="Start streaming server" Sep 13 03:04:25.132711 env[1575]: time="2025-09-13T03:04:25.132018580Z" level=info msg="containerd successfully booted in 0.022743s" Sep 13 03:04:25.057733 systemd[1]: motdgen.service: Deactivated successfully. Sep 13 03:04:25.057817 systemd[1]: Finished motdgen.service. Sep 13 03:04:25.077229 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 13 03:04:25.077420 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 13 03:04:25.104602 systemd[1]: tcsd.service: Skipped due to 'exec-condition'. Sep 13 03:04:25.104696 systemd[1]: Condition check resulted in tcsd.service being skipped. Sep 13 03:04:25.108453 systemd[1]: Started systemd-logind.service. Sep 13 03:04:25.126462 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 13 03:04:25.140565 systemd[1]: Started containerd.service. Sep 13 03:04:25.154076 systemd[1]: Started update-engine.service. Sep 13 03:04:25.167718 kernel: sdhci-pci 0000:00:14.5: SDHCI controller found [8086:a375] (rev 10) Sep 13 03:04:25.177990 systemd[1]: Started locksmithd.service. Sep 13 03:04:25.178551 systemd-timesyncd[1509]: Network configuration changed, trying to establish connection. Sep 13 03:04:25.178658 systemd-timesyncd[1509]: Network configuration changed, trying to establish connection. Sep 13 03:04:25.184385 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 13 03:04:25.184486 systemd[1]: Reached target system-config.target. Sep 13 03:04:25.192394 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 13 03:04:25.192466 systemd[1]: Reached target user-config.target. Sep 13 03:04:25.202027 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 13 03:04:25.212457 systemd[1]: Reached target network-online.target. Sep 13 03:04:25.222669 systemd[1]: Starting kubelet.service... Sep 13 03:04:25.234223 locksmithd[1616]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 13 03:04:25.389317 tar[1572]: linux-amd64/README.md Sep 13 03:04:25.391983 systemd[1]: Finished prepare-helm.service. Sep 13 03:04:25.521273 kernel: EXT4-fs (sdb9): resized filesystem to 116605649 Sep 13 03:04:25.552088 extend-filesystems[1548]: Filesystem at /dev/sdb9 is mounted on /; on-line resizing required Sep 13 03:04:25.552088 extend-filesystems[1548]: old_desc_blocks = 1, new_desc_blocks = 56 Sep 13 03:04:25.552088 extend-filesystems[1548]: The filesystem on /dev/sdb9 is now 116605649 (4k) blocks long. Sep 13 03:04:25.589367 extend-filesystems[1532]: Resized filesystem in /dev/sdb9 Sep 13 03:04:25.552499 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 13 03:04:25.552588 systemd[1]: Finished extend-filesystems.service. Sep 13 03:04:25.643227 sshd_keygen[1565]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 13 03:04:25.655166 systemd[1]: Finished sshd-keygen.service. Sep 13 03:04:25.664251 systemd[1]: Starting issuegen.service... Sep 13 03:04:25.672737 systemd[1]: issuegen.service: Deactivated successfully. Sep 13 03:04:25.672816 systemd[1]: Finished issuegen.service. Sep 13 03:04:25.680126 systemd[1]: Starting systemd-user-sessions.service... Sep 13 03:04:25.688574 systemd[1]: Finished systemd-user-sessions.service. Sep 13 03:04:25.699864 systemd[1]: Started getty@tty1.service. Sep 13 03:04:25.709679 systemd[1]: Started serial-getty@ttyS1.service. Sep 13 03:04:25.719013 systemd[1]: Reached target getty.target. Sep 13 03:04:26.104057 systemd[1]: Started kubelet.service. Sep 13 03:04:26.600740 kubelet[1643]: E0913 03:04:26.600660 1643 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 03:04:26.601849 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 03:04:26.601919 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 03:04:30.800977 login[1640]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Sep 13 03:04:30.802275 login[1639]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 13 03:04:30.828181 systemd[1]: Created slice user-500.slice. Sep 13 03:04:30.829399 systemd[1]: Starting user-runtime-dir@500.service... Sep 13 03:04:30.830360 systemd-logind[1566]: New session 2 of user core. Sep 13 03:04:30.852207 systemd[1]: Finished user-runtime-dir@500.service. Sep 13 03:04:30.852947 systemd[1]: Starting user@500.service... Sep 13 03:04:30.854855 (systemd)[1657]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:30.931308 systemd[1657]: Queued start job for default target default.target. Sep 13 03:04:30.931546 systemd[1657]: Reached target paths.target. Sep 13 03:04:30.931559 systemd[1657]: Reached target sockets.target. Sep 13 03:04:30.931567 systemd[1657]: Reached target timers.target. Sep 13 03:04:30.931575 systemd[1657]: Reached target basic.target. Sep 13 03:04:30.931594 systemd[1657]: Reached target default.target. Sep 13 03:04:30.931609 systemd[1657]: Startup finished in 73ms. Sep 13 03:04:30.931659 systemd[1]: Started user@500.service. Sep 13 03:04:30.932203 systemd[1]: Started session-2.scope. Sep 13 03:04:31.066796 coreos-metadata[1524]: Sep 13 03:04:31.066 INFO Failed to fetch: error sending request for url (https://metadata.packet.net/metadata): error trying to connect: dns error: failed to lookup address information: Name or service not known Sep 13 03:04:31.067619 coreos-metadata[1527]: Sep 13 03:04:31.066 INFO Failed to fetch: error sending request for url (https://metadata.packet.net/metadata): error trying to connect: dns error: failed to lookup address information: Name or service not known Sep 13 03:04:31.200311 kernel: mlx5_core 0000:01:00.0: modify lag map port 1:2 port 2:2 Sep 13 03:04:31.200481 kernel: mlx5_core 0000:01:00.0: modify lag map port 1:1 port 2:2 Sep 13 03:04:31.401169 systemd[1]: Created slice system-sshd.slice. Sep 13 03:04:31.401838 systemd[1]: Started sshd@0-86.109.11.213:22-139.178.89.65:48066.service. Sep 13 03:04:31.449689 sshd[1672]: Accepted publickey for core from 139.178.89.65 port 48066 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:31.450983 sshd[1672]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:31.455402 systemd-logind[1566]: New session 3 of user core. Sep 13 03:04:31.456499 systemd[1]: Started session-3.scope. Sep 13 03:04:31.513706 systemd[1]: Started sshd@1-86.109.11.213:22-139.178.89.65:34092.service. Sep 13 03:04:31.550983 sshd[1677]: Accepted publickey for core from 139.178.89.65 port 34092 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:31.551719 sshd[1677]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:31.553860 systemd-logind[1566]: New session 4 of user core. Sep 13 03:04:31.554385 systemd[1]: Started session-4.scope. Sep 13 03:04:31.605185 sshd[1677]: pam_unix(sshd:session): session closed for user core Sep 13 03:04:31.607657 systemd[1]: sshd@1-86.109.11.213:22-139.178.89.65:34092.service: Deactivated successfully. Sep 13 03:04:31.608237 systemd[1]: session-4.scope: Deactivated successfully. Sep 13 03:04:31.608815 systemd-logind[1566]: Session 4 logged out. Waiting for processes to exit. Sep 13 03:04:31.609784 systemd[1]: Started sshd@2-86.109.11.213:22-139.178.89.65:34104.service. Sep 13 03:04:31.610521 systemd-logind[1566]: Removed session 4. Sep 13 03:04:31.657448 sshd[1683]: Accepted publickey for core from 139.178.89.65 port 34104 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:31.660752 sshd[1683]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:31.671145 systemd-logind[1566]: New session 5 of user core. Sep 13 03:04:31.673530 systemd[1]: Started session-5.scope. Sep 13 03:04:31.751984 sshd[1683]: pam_unix(sshd:session): session closed for user core Sep 13 03:04:31.757648 systemd[1]: sshd@2-86.109.11.213:22-139.178.89.65:34104.service: Deactivated successfully. Sep 13 03:04:31.759403 systemd[1]: session-5.scope: Deactivated successfully. Sep 13 03:04:31.761087 systemd-logind[1566]: Session 5 logged out. Waiting for processes to exit. Sep 13 03:04:31.763371 systemd-logind[1566]: Removed session 5. Sep 13 03:04:31.807159 login[1640]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 13 03:04:31.817628 systemd-logind[1566]: New session 1 of user core. Sep 13 03:04:31.820105 systemd[1]: Started session-1.scope. Sep 13 03:04:32.067112 coreos-metadata[1527]: Sep 13 03:04:32.066 INFO Fetching https://metadata.packet.net/metadata: Attempt #2 Sep 13 03:04:32.067409 coreos-metadata[1524]: Sep 13 03:04:32.066 INFO Fetching https://metadata.packet.net/metadata: Attempt #2 Sep 13 03:04:33.217747 coreos-metadata[1527]: Sep 13 03:04:33.217 INFO Fetch successful Sep 13 03:04:33.299870 systemd[1]: Finished coreos-metadata.service. Sep 13 03:04:33.300663 systemd[1]: Started packet-phone-home.service. Sep 13 03:04:33.306477 curl[1698]: % Total % Received % Xferd Average Speed Time Time Time Current Sep 13 03:04:33.306618 curl[1698]: Dload Upload Total Spent Left Speed Sep 13 03:04:33.713564 coreos-metadata[1524]: Sep 13 03:04:33.713 INFO Fetch successful Sep 13 03:04:33.797656 unknown[1524]: wrote ssh authorized keys file for user: core Sep 13 03:04:33.802679 curl[1698]: \u000d 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0\u000d 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 Sep 13 03:04:33.803211 systemd[1]: packet-phone-home.service: Deactivated successfully. Sep 13 03:04:33.811621 update-ssh-keys[1699]: Updated "/home/core/.ssh/authorized_keys" Sep 13 03:04:33.811850 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Sep 13 03:04:33.812122 systemd[1]: Reached target multi-user.target. Sep 13 03:04:33.812837 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 13 03:04:33.817072 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 13 03:04:33.817145 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 13 03:04:33.817259 systemd[1]: Startup finished in 1.875s (kernel) + 27.510s (initrd) + 16.467s (userspace) = 45.852s. Sep 13 03:04:36.709138 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 13 03:04:36.709706 systemd[1]: Stopped kubelet.service. Sep 13 03:04:36.712135 systemd[1]: Starting kubelet.service... Sep 13 03:04:36.939510 systemd[1]: Started kubelet.service. Sep 13 03:04:36.966556 kubelet[1705]: E0913 03:04:36.966421 1705 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 03:04:36.968494 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 03:04:36.968566 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 03:04:41.764085 systemd[1]: Started sshd@3-86.109.11.213:22-139.178.89.65:33480.service. Sep 13 03:04:41.802321 sshd[1721]: Accepted publickey for core from 139.178.89.65 port 33480 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:41.803033 sshd[1721]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:41.805254 systemd-logind[1566]: New session 6 of user core. Sep 13 03:04:41.805768 systemd[1]: Started session-6.scope. Sep 13 03:04:41.856435 sshd[1721]: pam_unix(sshd:session): session closed for user core Sep 13 03:04:41.858028 systemd[1]: sshd@3-86.109.11.213:22-139.178.89.65:33480.service: Deactivated successfully. Sep 13 03:04:41.858385 systemd[1]: session-6.scope: Deactivated successfully. Sep 13 03:04:41.858699 systemd-logind[1566]: Session 6 logged out. Waiting for processes to exit. Sep 13 03:04:41.859213 systemd[1]: Started sshd@4-86.109.11.213:22-139.178.89.65:33490.service. Sep 13 03:04:41.859696 systemd-logind[1566]: Removed session 6. Sep 13 03:04:41.897150 sshd[1727]: Accepted publickey for core from 139.178.89.65 port 33490 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:41.897872 sshd[1727]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:41.900207 systemd-logind[1566]: New session 7 of user core. Sep 13 03:04:41.900712 systemd[1]: Started session-7.scope. Sep 13 03:04:41.947998 sshd[1727]: pam_unix(sshd:session): session closed for user core Sep 13 03:04:41.951061 systemd[1]: sshd@4-86.109.11.213:22-139.178.89.65:33490.service: Deactivated successfully. Sep 13 03:04:41.951808 systemd[1]: session-7.scope: Deactivated successfully. Sep 13 03:04:41.952545 systemd-logind[1566]: Session 7 logged out. Waiting for processes to exit. Sep 13 03:04:41.953859 systemd[1]: Started sshd@5-86.109.11.213:22-139.178.89.65:33500.service. Sep 13 03:04:41.955016 systemd-logind[1566]: Removed session 7. Sep 13 03:04:42.006688 sshd[1734]: Accepted publickey for core from 139.178.89.65 port 33500 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:42.007373 sshd[1734]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:42.009565 systemd-logind[1566]: New session 8 of user core. Sep 13 03:04:42.009977 systemd[1]: Started session-8.scope. Sep 13 03:04:42.061189 sshd[1734]: pam_unix(sshd:session): session closed for user core Sep 13 03:04:42.064106 systemd[1]: sshd@5-86.109.11.213:22-139.178.89.65:33500.service: Deactivated successfully. Sep 13 03:04:42.064785 systemd[1]: session-8.scope: Deactivated successfully. Sep 13 03:04:42.065392 systemd-logind[1566]: Session 8 logged out. Waiting for processes to exit. Sep 13 03:04:42.066560 systemd[1]: Started sshd@6-86.109.11.213:22-139.178.89.65:33508.service. Sep 13 03:04:42.067653 systemd-logind[1566]: Removed session 8. Sep 13 03:04:42.142189 sshd[1740]: Accepted publickey for core from 139.178.89.65 port 33508 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:42.143292 sshd[1740]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:42.146926 systemd-logind[1566]: New session 9 of user core. Sep 13 03:04:42.147666 systemd[1]: Started session-9.scope. Sep 13 03:04:42.227202 sudo[1743]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 13 03:04:42.227944 sudo[1743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 03:04:42.251705 dbus-daemon[1530]: \xd0]\x9e\xcc\u001fV: received setenforce notice (enforcing=-1457308304) Sep 13 03:04:42.255870 sudo[1743]: pam_unix(sudo:session): session closed for user root Sep 13 03:04:42.257365 sshd[1740]: pam_unix(sshd:session): session closed for user core Sep 13 03:04:42.258953 systemd[1]: sshd@6-86.109.11.213:22-139.178.89.65:33508.service: Deactivated successfully. Sep 13 03:04:42.259277 systemd[1]: session-9.scope: Deactivated successfully. Sep 13 03:04:42.259615 systemd-logind[1566]: Session 9 logged out. Waiting for processes to exit. Sep 13 03:04:42.260170 systemd[1]: Started sshd@7-86.109.11.213:22-139.178.89.65:33512.service. Sep 13 03:04:42.260693 systemd-logind[1566]: Removed session 9. Sep 13 03:04:42.298749 sshd[1747]: Accepted publickey for core from 139.178.89.65 port 33512 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:42.299729 sshd[1747]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:42.303006 systemd-logind[1566]: New session 10 of user core. Sep 13 03:04:42.303684 systemd[1]: Started session-10.scope. Sep 13 03:04:42.366051 sudo[1751]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 13 03:04:42.367092 sudo[1751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 03:04:42.374578 sudo[1751]: pam_unix(sudo:session): session closed for user root Sep 13 03:04:42.387841 sudo[1750]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 13 03:04:42.388542 sudo[1750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 03:04:42.401610 systemd[1]: Stopping audit-rules.service... Sep 13 03:04:42.400000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 03:04:42.402514 auditctl[1754]: No rules Sep 13 03:04:42.402663 systemd[1]: audit-rules.service: Deactivated successfully. Sep 13 03:04:42.402743 systemd[1]: Stopped audit-rules.service. Sep 13 03:04:42.403523 systemd[1]: Starting audit-rules.service... Sep 13 03:04:42.407819 kernel: kauditd_printk_skb: 27 callbacks suppressed Sep 13 03:04:42.407857 kernel: audit: type=1305 audit(1757732682.400:198): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 03:04:42.413137 augenrules[1771]: No rules Sep 13 03:04:42.413419 systemd[1]: Finished audit-rules.service. Sep 13 03:04:42.413913 sudo[1750]: pam_unix(sudo:session): session closed for user root Sep 13 03:04:42.414909 sshd[1747]: pam_unix(sshd:session): session closed for user core Sep 13 03:04:42.416372 systemd[1]: sshd@7-86.109.11.213:22-139.178.89.65:33512.service: Deactivated successfully. Sep 13 03:04:42.416659 systemd[1]: session-10.scope: Deactivated successfully. Sep 13 03:04:42.416949 systemd-logind[1566]: Session 10 logged out. Waiting for processes to exit. Sep 13 03:04:42.417492 systemd[1]: Started sshd@8-86.109.11.213:22-139.178.89.65:33514.service. Sep 13 03:04:42.417904 systemd-logind[1566]: Removed session 10. Sep 13 03:04:42.400000 audit[1754]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd47d093c0 a2=420 a3=0 items=0 ppid=1 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.454523 kernel: audit: type=1300 audit(1757732682.400:198): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd47d093c0 a2=420 a3=0 items=0 ppid=1 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.454555 kernel: audit: type=1327 audit(1757732682.400:198): proctitle=2F7362696E2F617564697463746C002D44 Sep 13 03:04:42.400000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 13 03:04:42.464045 kernel: audit: type=1131 audit(1757732682.401:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.486566 sshd[1777]: Accepted publickey for core from 139.178.89.65 port 33514 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:04:42.488604 sshd[1777]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:04:42.490894 systemd-logind[1566]: New session 11 of user core. Sep 13 03:04:42.491338 systemd[1]: Started session-11.scope. Sep 13 03:04:42.509033 kernel: audit: type=1130 audit(1757732682.412:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.509058 kernel: audit: type=1106 audit(1757732682.412:201): pid=1750 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.412000 audit[1750]: USER_END pid=1750 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.535123 kernel: audit: type=1104 audit(1757732682.412:202): pid=1750 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.412000 audit[1750]: CRED_DISP pid=1750 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.538394 sudo[1780]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 13 03:04:42.538520 sudo[1780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 03:04:42.558787 kernel: audit: type=1106 audit(1757732682.414:203): pid=1747 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.414000 audit[1747]: USER_END pid=1747 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.568501 systemd[1]: Starting docker.service... Sep 13 03:04:42.590916 kernel: audit: type=1104 audit(1757732682.414:204): pid=1747 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.414000 audit[1747]: CRED_DISP pid=1747 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.601092 env[1794]: time="2025-09-13T03:04:42.601067158Z" level=info msg="Starting up" Sep 13 03:04:42.601751 env[1794]: time="2025-09-13T03:04:42.601740270Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 03:04:42.601751 env[1794]: time="2025-09-13T03:04:42.601749517Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 03:04:42.601801 env[1794]: time="2025-09-13T03:04:42.601762401Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 03:04:42.601801 env[1794]: time="2025-09-13T03:04:42.601768491Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 03:04:42.602525 env[1794]: time="2025-09-13T03:04:42.602516099Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 03:04:42.602525 env[1794]: time="2025-09-13T03:04:42.602523561Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 03:04:42.602575 env[1794]: time="2025-09-13T03:04:42.602534134Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 03:04:42.602575 env[1794]: time="2025-09-13T03:04:42.602540547Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 03:04:42.616831 kernel: audit: type=1131 audit(1757732682.415:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-86.109.11.213:22-139.178.89.65:33512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-86.109.11.213:22-139.178.89.65:33512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-86.109.11.213:22-139.178.89.65:33514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.485000 audit[1777]: USER_ACCT pid=1777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.487000 audit[1777]: CRED_ACQ pid=1777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.487000 audit[1777]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea8176440 a2=3 a3=0 items=0 ppid=1 pid=1777 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.487000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:04:42.492000 audit[1777]: USER_START pid=1777 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.492000 audit[1779]: CRED_ACQ pid=1779 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:04:42.537000 audit[1780]: USER_ACCT pid=1780 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.537000 audit[1780]: CRED_REFR pid=1780 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.538000 audit[1780]: USER_START pid=1780 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:04:42.666528 env[1794]: time="2025-09-13T03:04:42.666487434Z" level=info msg="Loading containers: start." Sep 13 03:04:42.724000 audit[1837]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.724000 audit[1837]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffbedf9420 a2=0 a3=7fffbedf940c items=0 ppid=1794 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.724000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 13 03:04:42.726000 audit[1839]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1839 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.726000 audit[1839]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffde764d890 a2=0 a3=7ffde764d87c items=0 ppid=1794 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.726000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 13 03:04:42.728000 audit[1841]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1841 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.728000 audit[1841]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffed359b770 a2=0 a3=7ffed359b75c items=0 ppid=1794 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.728000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 03:04:42.729000 audit[1843]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.729000 audit[1843]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe47d9df60 a2=0 a3=7ffe47d9df4c items=0 ppid=1794 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.729000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 03:04:42.732000 audit[1845]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1845 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.732000 audit[1845]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff55f05760 a2=0 a3=7fff55f0574c items=0 ppid=1794 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.732000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 13 03:04:42.786000 audit[1850]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1850 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.786000 audit[1850]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffddd25f810 a2=0 a3=7ffddd25f7fc items=0 ppid=1794 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.786000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 13 03:04:42.796000 audit[1852]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1852 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.796000 audit[1852]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc79d1f60 a2=0 a3=7ffcc79d1f4c items=0 ppid=1794 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.796000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 13 03:04:42.801000 audit[1854]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1854 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.801000 audit[1854]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff4f9bafb0 a2=0 a3=7fff4f9baf9c items=0 ppid=1794 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.801000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 13 03:04:42.806000 audit[1856]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1856 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.806000 audit[1856]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff33c468a0 a2=0 a3=7fff33c4688c items=0 ppid=1794 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.806000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 03:04:42.821000 audit[1860]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1860 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.821000 audit[1860]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe42ad9de0 a2=0 a3=7ffe42ad9dcc items=0 ppid=1794 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.821000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 03:04:42.838000 audit[1861]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1861 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.838000 audit[1861]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdb846c090 a2=0 a3=7ffdb846c07c items=0 ppid=1794 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.838000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 03:04:42.873337 kernel: Initializing XFRM netlink socket Sep 13 03:04:42.945570 env[1794]: time="2025-09-13T03:04:42.945516686Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 13 03:04:42.946622 systemd-timesyncd[1509]: Network configuration changed, trying to establish connection. Sep 13 03:04:42.961000 audit[1869]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1869 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.961000 audit[1869]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff678660a0 a2=0 a3=7fff6786608c items=0 ppid=1794 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.961000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 13 03:04:42.978000 audit[1872]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1872 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.978000 audit[1872]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe04738ea0 a2=0 a3=7ffe04738e8c items=0 ppid=1794 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 13 03:04:42.980000 audit[1875]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.980000 audit[1875]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd9ffca9b0 a2=0 a3=7ffd9ffca99c items=0 ppid=1794 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 13 03:04:42.982000 audit[1877]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1877 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.982000 audit[1877]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffee4f171f0 a2=0 a3=7ffee4f171dc items=0 ppid=1794 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.982000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 13 03:04:42.983000 audit[1879]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1879 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.983000 audit[1879]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffee1e03830 a2=0 a3=7ffee1e0381c items=0 ppid=1794 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.983000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 13 03:04:42.985000 audit[1881]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.985000 audit[1881]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcf239ffa0 a2=0 a3=7ffcf239ff8c items=0 ppid=1794 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.985000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 13 03:04:42.986000 audit[1883]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1883 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.986000 audit[1883]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffea313f350 a2=0 a3=7ffea313f33c items=0 ppid=1794 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.986000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 13 03:04:42.993000 audit[1886]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1886 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.993000 audit[1886]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffcc86bf6e0 a2=0 a3=7ffcc86bf6cc items=0 ppid=1794 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.993000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 13 03:04:42.995000 audit[1888]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1888 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.995000 audit[1888]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffda4ec9e70 a2=0 a3=7ffda4ec9e5c items=0 ppid=1794 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.995000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 03:04:42.996000 audit[1890]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1890 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.996000 audit[1890]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffee5732c90 a2=0 a3=7ffee5732c7c items=0 ppid=1794 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.996000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 03:04:42.998000 audit[1892]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1892 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:42.998000 audit[1892]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff16ed7f50 a2=0 a3=7fff16ed7f3c items=0 ppid=1794 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:42.998000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 13 03:04:43.000172 systemd-networkd[1307]: docker0: Link UP Sep 13 03:04:43.004000 audit[1896]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1896 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:43.004000 audit[1896]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffad1f28d0 a2=0 a3=7fffad1f28bc items=0 ppid=1794 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:43.004000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 03:04:43.023000 audit[1897]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:43.023000 audit[1897]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe24db2270 a2=0 a3=7ffe24db225c items=0 ppid=1794 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:43.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 03:04:43.025601 env[1794]: time="2025-09-13T03:04:43.025528733Z" level=info msg="Loading containers: done." Sep 13 03:04:43.046628 env[1794]: time="2025-09-13T03:04:43.046539878Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 13 03:04:43.047140 env[1794]: time="2025-09-13T03:04:43.047069458Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 13 03:04:43.047463 env[1794]: time="2025-09-13T03:04:43.047402459Z" level=info msg="Daemon has completed initialization" Sep 13 03:04:43.052464 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck4192326254-merged.mount: Deactivated successfully. Sep 13 03:04:43.073148 systemd[1]: Started docker.service. Sep 13 03:04:43.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:43.089113 env[1794]: time="2025-09-13T03:04:43.088976226Z" level=info msg="API listen on /run/docker.sock" Sep 13 03:04:43.368057 systemd-timesyncd[1509]: Contacted time server [2604:4500:6:7c9::186]:123 (2.flatcar.pool.ntp.org). Sep 13 03:04:43.368092 systemd-timesyncd[1509]: Initial clock synchronization to Sat 2025-09-13 03:04:43.371621 UTC. Sep 13 03:04:44.059572 env[1575]: time="2025-09-13T03:04:44.059524940Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Sep 13 03:04:44.777875 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2277991998.mount: Deactivated successfully. Sep 13 03:04:46.053633 env[1575]: time="2025-09-13T03:04:46.053579044Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:46.054244 env[1575]: time="2025-09-13T03:04:46.054210018Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:46.055376 env[1575]: time="2025-09-13T03:04:46.055332545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:46.056762 env[1575]: time="2025-09-13T03:04:46.056711195Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:46.057711 env[1575]: time="2025-09-13T03:04:46.057658474Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62\"" Sep 13 03:04:46.058129 env[1575]: time="2025-09-13T03:04:46.058069533Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Sep 13 03:04:47.207719 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 13 03:04:47.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:47.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:47.207853 systemd[1]: Stopped kubelet.service. Sep 13 03:04:47.208734 systemd[1]: Starting kubelet.service... Sep 13 03:04:47.420925 systemd[1]: Started kubelet.service. Sep 13 03:04:47.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:47.426620 kernel: kauditd_printk_skb: 86 callbacks suppressed Sep 13 03:04:47.426667 kernel: audit: type=1130 audit(1757732687.419:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:47.460678 kubelet[1950]: E0913 03:04:47.460554 1950 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 03:04:47.461741 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 03:04:47.461812 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 03:04:47.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 03:04:47.501338 kernel: audit: type=1131 audit(1757732687.460:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 03:04:47.551456 env[1575]: time="2025-09-13T03:04:47.551407897Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:47.551950 env[1575]: time="2025-09-13T03:04:47.551939528Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:47.553156 env[1575]: time="2025-09-13T03:04:47.553145052Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:47.554020 env[1575]: time="2025-09-13T03:04:47.553985636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:47.554848 env[1575]: time="2025-09-13T03:04:47.554832838Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668\"" Sep 13 03:04:47.555108 env[1575]: time="2025-09-13T03:04:47.555097214Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Sep 13 03:04:48.782772 env[1575]: time="2025-09-13T03:04:48.782658170Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:48.784444 env[1575]: time="2025-09-13T03:04:48.784375958Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:48.787296 env[1575]: time="2025-09-13T03:04:48.787216013Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:48.790032 env[1575]: time="2025-09-13T03:04:48.789963272Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:48.791399 env[1575]: time="2025-09-13T03:04:48.791325717Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf\"" Sep 13 03:04:48.791977 env[1575]: time="2025-09-13T03:04:48.791880741Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Sep 13 03:04:49.788986 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3670007444.mount: Deactivated successfully. Sep 13 03:04:50.211287 env[1575]: time="2025-09-13T03:04:50.211238727Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:50.211903 env[1575]: time="2025-09-13T03:04:50.211870609Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:50.212455 env[1575]: time="2025-09-13T03:04:50.212424637Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:50.213084 env[1575]: time="2025-09-13T03:04:50.213051980Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:50.213412 env[1575]: time="2025-09-13T03:04:50.213375424Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3\"" Sep 13 03:04:50.213883 env[1575]: time="2025-09-13T03:04:50.213842078Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Sep 13 03:04:50.719701 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3797715772.mount: Deactivated successfully. Sep 13 03:04:51.500520 env[1575]: time="2025-09-13T03:04:51.500494351Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:51.501327 env[1575]: time="2025-09-13T03:04:51.501280801Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:51.502406 env[1575]: time="2025-09-13T03:04:51.502376446Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:51.503457 env[1575]: time="2025-09-13T03:04:51.503446306Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:51.504401 env[1575]: time="2025-09-13T03:04:51.504364718Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Sep 13 03:04:51.504799 env[1575]: time="2025-09-13T03:04:51.504785835Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 13 03:04:52.026425 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3003556985.mount: Deactivated successfully. Sep 13 03:04:52.027199 env[1575]: time="2025-09-13T03:04:52.027181514Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:52.027857 env[1575]: time="2025-09-13T03:04:52.027843567Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:52.028568 env[1575]: time="2025-09-13T03:04:52.028528150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:52.030169 env[1575]: time="2025-09-13T03:04:52.030149628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:52.030641 env[1575]: time="2025-09-13T03:04:52.030607786Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Sep 13 03:04:52.031017 env[1575]: time="2025-09-13T03:04:52.030988461Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Sep 13 03:04:52.545788 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3279847588.mount: Deactivated successfully. Sep 13 03:04:54.182004 env[1575]: time="2025-09-13T03:04:54.181948220Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:54.183301 env[1575]: time="2025-09-13T03:04:54.183275172Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:54.185746 env[1575]: time="2025-09-13T03:04:54.185718531Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:54.188097 env[1575]: time="2025-09-13T03:04:54.188063485Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:54.189367 env[1575]: time="2025-09-13T03:04:54.189305800Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Sep 13 03:04:56.926124 systemd[1]: Stopped kubelet.service. Sep 13 03:04:56.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:56.927517 systemd[1]: Starting kubelet.service... Sep 13 03:04:56.942059 systemd[1]: Reloading. Sep 13 03:04:56.980004 /usr/lib/systemd/system-generators/torcx-generator[2037]: time="2025-09-13T03:04:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 03:04:56.980027 /usr/lib/systemd/system-generators/torcx-generator[2037]: time="2025-09-13T03:04:56Z" level=info msg="torcx already run" Sep 13 03:04:56.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:57.040302 kernel: audit: type=1130 audit(1757732696.924:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:57.040366 kernel: audit: type=1131 audit(1757732696.924:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:57.060763 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 03:04:57.060770 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 03:04:57.071885 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234256 kernel: audit: type=1400 audit(1757732697.117:246): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234322 kernel: audit: type=1400 audit(1757732697.117:247): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234352 kernel: audit: type=1400 audit(1757732697.117:248): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.356729 kernel: audit: type=1400 audit(1757732697.117:249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.356842 kernel: audit: type=1400 audit(1757732697.117:250): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.420266 kernel: audit: type=1400 audit(1757732697.117:251): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.548321 kernel: audit: type=1400 audit(1757732697.117:252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.548373 kernel: audit: type=1400 audit(1757732697.117:253): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.232000 audit: BPF prog-id=46 op=LOAD Sep 13 03:04:57.232000 audit: BPF prog-id=40 op=UNLOAD Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit: BPF prog-id=47 op=LOAD Sep 13 03:04:57.293000 audit: BPF prog-id=44 op=UNLOAD Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit: BPF prog-id=48 op=LOAD Sep 13 03:04:57.355000 audit: BPF prog-id=30 op=UNLOAD Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit: BPF prog-id=49 op=LOAD Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit: BPF prog-id=50 op=LOAD Sep 13 03:04:57.547000 audit: BPF prog-id=31 op=UNLOAD Sep 13 03:04:57.547000 audit: BPF prog-id=32 op=UNLOAD Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.611000 audit: BPF prog-id=51 op=LOAD Sep 13 03:04:57.611000 audit: BPF prog-id=39 op=UNLOAD Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit: BPF prog-id=52 op=LOAD Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.612000 audit: BPF prog-id=53 op=LOAD Sep 13 03:04:57.612000 audit: BPF prog-id=33 op=UNLOAD Sep 13 03:04:57.612000 audit: BPF prog-id=34 op=UNLOAD Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit: BPF prog-id=54 op=LOAD Sep 13 03:04:57.613000 audit: BPF prog-id=41 op=UNLOAD Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit: BPF prog-id=55 op=LOAD Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.613000 audit: BPF prog-id=56 op=LOAD Sep 13 03:04:57.613000 audit: BPF prog-id=42 op=UNLOAD Sep 13 03:04:57.613000 audit: BPF prog-id=43 op=UNLOAD Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit: BPF prog-id=57 op=LOAD Sep 13 03:04:57.614000 audit: BPF prog-id=35 op=UNLOAD Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit: BPF prog-id=58 op=LOAD Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.614000 audit: BPF prog-id=59 op=LOAD Sep 13 03:04:57.614000 audit: BPF prog-id=36 op=UNLOAD Sep 13 03:04:57.614000 audit: BPF prog-id=37 op=UNLOAD Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:57.615000 audit: BPF prog-id=60 op=LOAD Sep 13 03:04:57.615000 audit: BPF prog-id=38 op=UNLOAD Sep 13 03:04:57.620936 systemd[1]: Started kubelet.service. Sep 13 03:04:57.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:57.622925 systemd[1]: Stopping kubelet.service... Sep 13 03:04:57.623169 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 03:04:57.623279 systemd[1]: Stopped kubelet.service. Sep 13 03:04:57.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:57.624030 systemd[1]: Starting kubelet.service... Sep 13 03:04:57.873611 systemd[1]: Started kubelet.service. Sep 13 03:04:57.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:04:57.940754 kubelet[2109]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 03:04:57.940754 kubelet[2109]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 03:04:57.940754 kubelet[2109]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 03:04:57.941087 kubelet[2109]: I0913 03:04:57.940790 2109 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 03:04:58.086248 kubelet[2109]: I0913 03:04:58.086235 2109 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 13 03:04:58.086248 kubelet[2109]: I0913 03:04:58.086245 2109 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 03:04:58.086434 kubelet[2109]: I0913 03:04:58.086426 2109 server.go:956] "Client rotation is on, will bootstrap in background" Sep 13 03:04:58.110072 kubelet[2109]: I0913 03:04:58.110059 2109 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 03:04:58.112894 kubelet[2109]: E0913 03:04:58.112847 2109 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://86.109.11.213:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Sep 13 03:04:58.116741 kubelet[2109]: E0913 03:04:58.116699 2109 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 03:04:58.116741 kubelet[2109]: I0913 03:04:58.116716 2109 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 03:04:58.135988 kubelet[2109]: I0913 03:04:58.135925 2109 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 03:04:58.136118 kubelet[2109]: I0913 03:04:58.136067 2109 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 03:04:58.136244 kubelet[2109]: I0913 03:04:58.136088 2109 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-ba666c4ddc","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 03:04:58.136337 kubelet[2109]: I0913 03:04:58.136250 2109 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 03:04:58.136337 kubelet[2109]: I0913 03:04:58.136260 2109 container_manager_linux.go:303] "Creating device plugin manager" Sep 13 03:04:58.136392 kubelet[2109]: I0913 03:04:58.136375 2109 state_mem.go:36] "Initialized new in-memory state store" Sep 13 03:04:58.140511 kubelet[2109]: I0913 03:04:58.140447 2109 kubelet.go:480] "Attempting to sync node with API server" Sep 13 03:04:58.140511 kubelet[2109]: I0913 03:04:58.140459 2109 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 03:04:58.140511 kubelet[2109]: I0913 03:04:58.140475 2109 kubelet.go:386] "Adding apiserver pod source" Sep 13 03:04:58.140511 kubelet[2109]: I0913 03:04:58.140487 2109 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 03:04:58.156226 kubelet[2109]: I0913 03:04:58.156210 2109 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 03:04:58.156984 kubelet[2109]: I0913 03:04:58.156942 2109 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 13 03:04:58.158003 kubelet[2109]: W0913 03:04:58.157960 2109 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 13 03:04:58.160378 kubelet[2109]: I0913 03:04:58.160332 2109 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 03:04:58.160378 kubelet[2109]: I0913 03:04:58.160372 2109 server.go:1289] "Started kubelet" Sep 13 03:04:58.165996 kubelet[2109]: I0913 03:04:58.160469 2109 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 03:04:58.166101 kubelet[2109]: I0913 03:04:58.166036 2109 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 03:04:58.166426 kubelet[2109]: I0913 03:04:58.166399 2109 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 03:04:58.166582 kubelet[2109]: E0913 03:04:58.166544 2109 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://86.109.11.213:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 13 03:04:58.166685 kubelet[2109]: E0913 03:04:58.166657 2109 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://86.109.11.213:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-ba666c4ddc&limit=500&resourceVersion=0\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Sep 13 03:04:58.167000 audit[2109]: AVC avc: denied { mac_admin } for pid=2109 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:58.167000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 03:04:58.167000 audit[2109]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0002fcae0 a1=c0010d2fa8 a2=c0002fcab0 a3=25 items=0 ppid=1 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.167000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 03:04:58.167000 audit[2109]: AVC avc: denied { mac_admin } for pid=2109 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:58.167000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 03:04:58.167000 audit[2109]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001386180 a1=c0010d2fc0 a2=c0002fcb70 a3=25 items=0 ppid=1 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.167000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 03:04:58.169849 kubelet[2109]: E0913 03:04:58.169081 2109 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 03:04:58.169849 kubelet[2109]: I0913 03:04:58.169088 2109 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 03:04:58.169849 kubelet[2109]: I0913 03:04:58.169154 2109 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 03:04:58.169849 kubelet[2109]: I0913 03:04:58.169253 2109 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 03:04:58.169849 kubelet[2109]: I0913 03:04:58.169270 2109 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 03:04:58.169849 kubelet[2109]: I0913 03:04:58.169403 2109 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 03:04:58.169849 kubelet[2109]: I0913 03:04:58.169437 2109 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 03:04:58.169849 kubelet[2109]: E0913 03:04:58.169452 2109 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-ba666c4ddc\" not found" Sep 13 03:04:58.169849 kubelet[2109]: I0913 03:04:58.169529 2109 reconciler.go:26] "Reconciler: start to sync state" Sep 13 03:04:58.179007 kubelet[2109]: I0913 03:04:58.178971 2109 factory.go:223] Registration of the systemd container factory successfully Sep 13 03:04:58.179046 kubelet[2109]: I0913 03:04:58.179011 2109 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 03:04:58.179046 kubelet[2109]: E0913 03:04:58.179031 2109 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://86.109.11.213:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-ba666c4ddc?timeout=10s\": dial tcp 86.109.11.213:6443: connect: connection refused" interval="200ms" Sep 13 03:04:58.179110 kubelet[2109]: I0913 03:04:58.179101 2109 server.go:317] "Adding debug handlers to kubelet server" Sep 13 03:04:58.179228 kubelet[2109]: E0913 03:04:58.179215 2109 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://86.109.11.213:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 13 03:04:58.179511 kubelet[2109]: I0913 03:04:58.179466 2109 factory.go:223] Registration of the containerd container factory successfully Sep 13 03:04:58.180029 kubelet[2109]: E0913 03:04:58.179192 2109 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://86.109.11.213:6443/api/v1/namespaces/default/events\": dial tcp 86.109.11.213:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-ba666c4ddc.1864b8937befbcc7 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-ba666c4ddc,UID:ci-3510.3.8-n-ba666c4ddc,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-ba666c4ddc,},FirstTimestamp:2025-09-13 03:04:58.160348359 +0000 UTC m=+0.279245216,LastTimestamp:2025-09-13 03:04:58.160348359 +0000 UTC m=+0.279245216,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-ba666c4ddc,}" Sep 13 03:04:58.179000 audit[2138]: NETFILTER_CFG table=mangle:26 family=10 entries=2 op=nft_register_chain pid=2138 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:04:58.179000 audit[2138]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcfc63a780 a2=0 a3=7ffcfc63a76c items=0 ppid=2109 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 03:04:58.180596 kubelet[2109]: I0913 03:04:58.180520 2109 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 13 03:04:58.179000 audit[2140]: NETFILTER_CFG table=mangle:27 family=10 entries=1 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:04:58.179000 audit[2140]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd60c36030 a2=0 a3=7ffd60c3601c items=0 ppid=2109 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 03:04:58.179000 audit[2139]: NETFILTER_CFG table=mangle:28 family=2 entries=2 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.179000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffce8efea90 a2=0 a3=7ffce8efea7c items=0 ppid=2109 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.179000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 03:04:58.180000 audit[2141]: NETFILTER_CFG table=nat:29 family=10 entries=2 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:04:58.180000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff2c9b76b0 a2=0 a3=7fff2c9b769c items=0 ppid=2109 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 03:04:58.180000 audit[2142]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.180000 audit[2142]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc2e53050 a2=0 a3=7ffcc2e5303c items=0 ppid=2109 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.180000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 03:04:58.180000 audit[2143]: NETFILTER_CFG table=filter:31 family=10 entries=2 op=nft_register_chain pid=2143 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:04:58.180000 audit[2143]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd3dba9d10 a2=0 a3=7ffd3dba9cfc items=0 ppid=2109 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 03:04:58.181000 audit[2145]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.181000 audit[2145]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffbaa593f0 a2=0 a3=7fffbaa593dc items=0 ppid=2109 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.181000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 03:04:58.182000 audit[2147]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.182000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd68ecec90 a2=0 a3=7ffd68ecec7c items=0 ppid=2109 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.182000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 03:04:58.186000 audit[2150]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.186000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcc025e010 a2=0 a3=7ffcc025dffc items=0 ppid=2109 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.186000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 13 03:04:58.187878 kubelet[2109]: I0913 03:04:58.187845 2109 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 13 03:04:58.187878 kubelet[2109]: I0913 03:04:58.187856 2109 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 13 03:04:58.187878 kubelet[2109]: I0913 03:04:58.187866 2109 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 03:04:58.187878 kubelet[2109]: I0913 03:04:58.187870 2109 kubelet.go:2436] "Starting kubelet main sync loop" Sep 13 03:04:58.187961 kubelet[2109]: E0913 03:04:58.187889 2109 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 03:04:58.188173 kubelet[2109]: E0913 03:04:58.188155 2109 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://86.109.11.213:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 13 03:04:58.187000 audit[2151]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.187000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd5400f740 a2=0 a3=7ffd5400f72c items=0 ppid=2109 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.187000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 03:04:58.187000 audit[2153]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.187000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc97c2c9a0 a2=0 a3=7ffc97c2c98c items=0 ppid=2109 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.187000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 03:04:58.188000 audit[2154]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:04:58.188000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd09553b50 a2=0 a3=7ffd09553b3c items=0 ppid=2109 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 03:04:58.270027 kubelet[2109]: E0913 03:04:58.269926 2109 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-ba666c4ddc\" not found" Sep 13 03:04:58.288769 kubelet[2109]: E0913 03:04:58.288646 2109 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 13 03:04:58.320866 kubelet[2109]: I0913 03:04:58.320776 2109 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 03:04:58.320866 kubelet[2109]: I0913 03:04:58.320820 2109 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 03:04:58.320866 kubelet[2109]: I0913 03:04:58.320866 2109 state_mem.go:36] "Initialized new in-memory state store" Sep 13 03:04:58.323014 kubelet[2109]: I0913 03:04:58.322949 2109 policy_none.go:49] "None policy: Start" Sep 13 03:04:58.323014 kubelet[2109]: I0913 03:04:58.322984 2109 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 03:04:58.323014 kubelet[2109]: I0913 03:04:58.323011 2109 state_mem.go:35] "Initializing new in-memory state store" Sep 13 03:04:58.332258 systemd[1]: Created slice kubepods.slice. Sep 13 03:04:58.343343 systemd[1]: Created slice kubepods-burstable.slice. Sep 13 03:04:58.351964 systemd[1]: Created slice kubepods-besteffort.slice. Sep 13 03:04:58.370188 kubelet[2109]: E0913 03:04:58.370098 2109 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-ba666c4ddc\" not found" Sep 13 03:04:58.378079 kubelet[2109]: E0913 03:04:58.377996 2109 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 13 03:04:58.376000 audit[2109]: AVC avc: denied { mac_admin } for pid=2109 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:58.376000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 03:04:58.376000 audit[2109]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e2a240 a1=c000e2e3a8 a2=c000e2a210 a3=25 items=0 ppid=1 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:58.376000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 03:04:58.378779 kubelet[2109]: E0913 03:04:58.378158 2109 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 13 03:04:58.378779 kubelet[2109]: I0913 03:04:58.378456 2109 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 03:04:58.378779 kubelet[2109]: I0913 03:04:58.378487 2109 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 03:04:58.379150 kubelet[2109]: I0913 03:04:58.378869 2109 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 03:04:58.379897 kubelet[2109]: E0913 03:04:58.379817 2109 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://86.109.11.213:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-ba666c4ddc?timeout=10s\": dial tcp 86.109.11.213:6443: connect: connection refused" interval="400ms" Sep 13 03:04:58.380313 kubelet[2109]: E0913 03:04:58.380254 2109 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 03:04:58.380471 kubelet[2109]: E0913 03:04:58.380351 2109 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-ba666c4ddc\" not found" Sep 13 03:04:58.482681 kubelet[2109]: I0913 03:04:58.482627 2109 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.483375 kubelet[2109]: E0913 03:04:58.483314 2109 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://86.109.11.213:6443/api/v1/nodes\": dial tcp 86.109.11.213:6443: connect: connection refused" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.508803 systemd[1]: Created slice kubepods-burstable-poda9624a958f7a8c9466552b493ece8b5e.slice. Sep 13 03:04:58.538498 kubelet[2109]: E0913 03:04:58.538403 2109 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-ba666c4ddc\" not found" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.545350 systemd[1]: Created slice kubepods-burstable-pod0d5d228216a67dd460c7814add893ba7.slice. Sep 13 03:04:58.564162 kubelet[2109]: E0913 03:04:58.564113 2109 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-ba666c4ddc\" not found" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.570759 systemd[1]: Created slice kubepods-burstable-pod5a9b9f8a87aa413b97ee28b77e504dca.slice. Sep 13 03:04:58.571977 kubelet[2109]: I0913 03:04:58.571878 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0d5d228216a67dd460c7814add893ba7-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" (UID: \"0d5d228216a67dd460c7814add893ba7\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.571977 kubelet[2109]: I0913 03:04:58.571963 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.572310 kubelet[2109]: I0913 03:04:58.572019 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.572310 kubelet[2109]: I0913 03:04:58.572065 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0d5d228216a67dd460c7814add893ba7-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" (UID: \"0d5d228216a67dd460c7814add893ba7\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.572310 kubelet[2109]: I0913 03:04:58.572125 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0d5d228216a67dd460c7814add893ba7-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" (UID: \"0d5d228216a67dd460c7814add893ba7\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.572310 kubelet[2109]: I0913 03:04:58.572172 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.572310 kubelet[2109]: I0913 03:04:58.572214 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.572759 kubelet[2109]: I0913 03:04:58.572276 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.572759 kubelet[2109]: I0913 03:04:58.572325 2109 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a9624a958f7a8c9466552b493ece8b5e-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-ba666c4ddc\" (UID: \"a9624a958f7a8c9466552b493ece8b5e\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.574566 kubelet[2109]: E0913 03:04:58.574482 2109 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-ba666c4ddc\" not found" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.687693 kubelet[2109]: I0913 03:04:58.687630 2109 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.688289 kubelet[2109]: E0913 03:04:58.688221 2109 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://86.109.11.213:6443/api/v1/nodes\": dial tcp 86.109.11.213:6443: connect: connection refused" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:58.781554 kubelet[2109]: E0913 03:04:58.781335 2109 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://86.109.11.213:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-ba666c4ddc?timeout=10s\": dial tcp 86.109.11.213:6443: connect: connection refused" interval="800ms" Sep 13 03:04:58.841374 env[1575]: time="2025-09-13T03:04:58.841240458Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-ba666c4ddc,Uid:a9624a958f7a8c9466552b493ece8b5e,Namespace:kube-system,Attempt:0,}" Sep 13 03:04:58.866529 env[1575]: time="2025-09-13T03:04:58.866446630Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-ba666c4ddc,Uid:0d5d228216a67dd460c7814add893ba7,Namespace:kube-system,Attempt:0,}" Sep 13 03:04:58.876200 env[1575]: time="2025-09-13T03:04:58.876129622Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-ba666c4ddc,Uid:5a9b9f8a87aa413b97ee28b77e504dca,Namespace:kube-system,Attempt:0,}" Sep 13 03:04:59.092509 kubelet[2109]: I0913 03:04:59.092357 2109 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:59.093224 kubelet[2109]: E0913 03:04:59.093009 2109 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://86.109.11.213:6443/api/v1/nodes\": dial tcp 86.109.11.213:6443: connect: connection refused" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:04:59.170185 kubelet[2109]: E0913 03:04:59.170068 2109 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://86.109.11.213:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Sep 13 03:04:59.250366 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3890738756.mount: Deactivated successfully. Sep 13 03:04:59.251558 env[1575]: time="2025-09-13T03:04:59.251506702Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.252999 env[1575]: time="2025-09-13T03:04:59.252984919Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.253507 env[1575]: time="2025-09-13T03:04:59.253489619Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.254267 env[1575]: time="2025-09-13T03:04:59.254248980Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.254529 kubelet[2109]: E0913 03:04:59.254500 2109 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://86.109.11.213:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Sep 13 03:04:59.255566 env[1575]: time="2025-09-13T03:04:59.255553679Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.257490 env[1575]: time="2025-09-13T03:04:59.257457800Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.257917 env[1575]: time="2025-09-13T03:04:59.257902353Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.259048 env[1575]: time="2025-09-13T03:04:59.259035016Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.259897 env[1575]: time="2025-09-13T03:04:59.259883314Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.260336 env[1575]: time="2025-09-13T03:04:59.260324446Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.260716 env[1575]: time="2025-09-13T03:04:59.260706126Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.261141 env[1575]: time="2025-09-13T03:04:59.261087730Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:04:59.264451 env[1575]: time="2025-09-13T03:04:59.264415664Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:04:59.264451 env[1575]: time="2025-09-13T03:04:59.264438870Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:04:59.264451 env[1575]: time="2025-09-13T03:04:59.264447802Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:04:59.264603 env[1575]: time="2025-09-13T03:04:59.264537806Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/78312c456ba09bb04c8a7f2eccc7586445b54af4ced51fb32d2a2136456413c2 pid=2163 runtime=io.containerd.runc.v2 Sep 13 03:04:59.266175 env[1575]: time="2025-09-13T03:04:59.266138634Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:04:59.266175 env[1575]: time="2025-09-13T03:04:59.266161761Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:04:59.266175 env[1575]: time="2025-09-13T03:04:59.266169267Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:04:59.266330 env[1575]: time="2025-09-13T03:04:59.266232598Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/643bf7205c4c532c68d4f3c07d6a8136b36150dc149e6a429d8fc0f31e8549f1 pid=2180 runtime=io.containerd.runc.v2 Sep 13 03:04:59.267505 env[1575]: time="2025-09-13T03:04:59.267473521Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:04:59.267505 env[1575]: time="2025-09-13T03:04:59.267494906Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:04:59.267590 env[1575]: time="2025-09-13T03:04:59.267503025Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:04:59.267590 env[1575]: time="2025-09-13T03:04:59.267570082Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c111b629669ac7b258634c3244d76f2fa1418b45e0f4ddb28f86d77f8e756f5a pid=2195 runtime=io.containerd.runc.v2 Sep 13 03:04:59.271361 systemd[1]: Started cri-containerd-78312c456ba09bb04c8a7f2eccc7586445b54af4ced51fb32d2a2136456413c2.scope. Sep 13 03:04:59.273185 systemd[1]: Started cri-containerd-643bf7205c4c532c68d4f3c07d6a8136b36150dc149e6a429d8fc0f31e8549f1.scope. Sep 13 03:04:59.274815 systemd[1]: Started cri-containerd-c111b629669ac7b258634c3244d76f2fa1418b45e0f4ddb28f86d77f8e756f5a.scope. Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.276000 audit: BPF prog-id=61 op=LOAD Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2163 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333132633435366261303962623034633861376632656363633735 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2163 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333132633435366261303962623034633861376632656363633735 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit: BPF prog-id=62 op=LOAD Sep 13 03:04:59.277000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000986a0 items=0 ppid=2163 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333132633435366261303962623034633861376632656363633735 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit: BPF prog-id=63 op=LOAD Sep 13 03:04:59.277000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000986e8 items=0 ppid=2163 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333132633435366261303962623034633861376632656363633735 Sep 13 03:04:59.277000 audit: BPF prog-id=63 op=UNLOAD Sep 13 03:04:59.277000 audit: BPF prog-id=62 op=UNLOAD Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { perfmon } for pid=2182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit[2182]: AVC avc: denied { bpf } for pid=2182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.277000 audit: BPF prog-id=64 op=LOAD Sep 13 03:04:59.277000 audit[2182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000098af8 items=0 ppid=2163 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333132633435366261303962623034633861376632656363633735 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.278000 audit: BPF prog-id=65 op=LOAD Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2180 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634336266373230356334633533326336386434663363303764366138 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2180 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634336266373230356334633533326336386434663363303764366138 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit: BPF prog-id=66 op=LOAD Sep 13 03:04:59.279000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003f0900 items=0 ppid=2180 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634336266373230356334633533326336386434663363303764366138 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit: BPF prog-id=67 op=LOAD Sep 13 03:04:59.279000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003f0948 items=0 ppid=2180 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634336266373230356334633533326336386434663363303764366138 Sep 13 03:04:59.279000 audit: BPF prog-id=67 op=UNLOAD Sep 13 03:04:59.279000 audit: BPF prog-id=66 op=UNLOAD Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit: BPF prog-id=68 op=LOAD Sep 13 03:04:59.279000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003f0d58 items=0 ppid=2180 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634336266373230356334633533326336386434663363303764366138 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit: BPF prog-id=69 op=LOAD Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2195 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313162363239363639616337623235383633346333323434643736 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2195 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313162363239363639616337623235383633346333323434643736 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit: BPF prog-id=70 op=LOAD Sep 13 03:04:59.279000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000261ce0 items=0 ppid=2195 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313162363239363639616337623235383633346333323434643736 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.279000 audit: BPF prog-id=71 op=LOAD Sep 13 03:04:59.279000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000261d28 items=0 ppid=2195 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313162363239363639616337623235383633346333323434643736 Sep 13 03:04:59.279000 audit: BPF prog-id=71 op=UNLOAD Sep 13 03:04:59.279000 audit: BPF prog-id=70 op=UNLOAD Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { perfmon } for pid=2219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit[2219]: AVC avc: denied { bpf } for pid=2219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.280000 audit: BPF prog-id=72 op=LOAD Sep 13 03:04:59.280000 audit[2219]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003e2138 items=0 ppid=2195 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313162363239363639616337623235383633346333323434643736 Sep 13 03:04:59.296070 env[1575]: time="2025-09-13T03:04:59.296044859Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-ba666c4ddc,Uid:a9624a958f7a8c9466552b493ece8b5e,Namespace:kube-system,Attempt:0,} returns sandbox id \"78312c456ba09bb04c8a7f2eccc7586445b54af4ced51fb32d2a2136456413c2\"" Sep 13 03:04:59.297801 env[1575]: time="2025-09-13T03:04:59.297776079Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-ba666c4ddc,Uid:5a9b9f8a87aa413b97ee28b77e504dca,Namespace:kube-system,Attempt:0,} returns sandbox id \"643bf7205c4c532c68d4f3c07d6a8136b36150dc149e6a429d8fc0f31e8549f1\"" Sep 13 03:04:59.297875 env[1575]: time="2025-09-13T03:04:59.297808104Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-ba666c4ddc,Uid:0d5d228216a67dd460c7814add893ba7,Namespace:kube-system,Attempt:0,} returns sandbox id \"c111b629669ac7b258634c3244d76f2fa1418b45e0f4ddb28f86d77f8e756f5a\"" Sep 13 03:04:59.298345 env[1575]: time="2025-09-13T03:04:59.298327628Z" level=info msg="CreateContainer within sandbox \"78312c456ba09bb04c8a7f2eccc7586445b54af4ced51fb32d2a2136456413c2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 13 03:04:59.299195 env[1575]: time="2025-09-13T03:04:59.299181967Z" level=info msg="CreateContainer within sandbox \"643bf7205c4c532c68d4f3c07d6a8136b36150dc149e6a429d8fc0f31e8549f1\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 13 03:04:59.299693 env[1575]: time="2025-09-13T03:04:59.299677008Z" level=info msg="CreateContainer within sandbox \"c111b629669ac7b258634c3244d76f2fa1418b45e0f4ddb28f86d77f8e756f5a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 13 03:04:59.305793 env[1575]: time="2025-09-13T03:04:59.305775127Z" level=info msg="CreateContainer within sandbox \"78312c456ba09bb04c8a7f2eccc7586445b54af4ced51fb32d2a2136456413c2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"070a7b9cd98d5af2426217b109af910aa7f825fac3828758fb0e2dae4256a307\"" Sep 13 03:04:59.306061 env[1575]: time="2025-09-13T03:04:59.306044861Z" level=info msg="StartContainer for \"070a7b9cd98d5af2426217b109af910aa7f825fac3828758fb0e2dae4256a307\"" Sep 13 03:04:59.306844 env[1575]: time="2025-09-13T03:04:59.306829212Z" level=info msg="CreateContainer within sandbox \"643bf7205c4c532c68d4f3c07d6a8136b36150dc149e6a429d8fc0f31e8549f1\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"5c102472aa38f16235ce50a7069f3329ea724a041d36350316680fe635a1732d\"" Sep 13 03:04:59.307018 env[1575]: time="2025-09-13T03:04:59.307001958Z" level=info msg="StartContainer for \"5c102472aa38f16235ce50a7069f3329ea724a041d36350316680fe635a1732d\"" Sep 13 03:04:59.307780 env[1575]: time="2025-09-13T03:04:59.307747109Z" level=info msg="CreateContainer within sandbox \"c111b629669ac7b258634c3244d76f2fa1418b45e0f4ddb28f86d77f8e756f5a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d4ec2242fb676dd85b7285600fa47efa8843b158e27eebd99917d739d1333751\"" Sep 13 03:04:59.308212 env[1575]: time="2025-09-13T03:04:59.308187236Z" level=info msg="StartContainer for \"d4ec2242fb676dd85b7285600fa47efa8843b158e27eebd99917d739d1333751\"" Sep 13 03:04:59.313993 systemd[1]: Started cri-containerd-070a7b9cd98d5af2426217b109af910aa7f825fac3828758fb0e2dae4256a307.scope. Sep 13 03:04:59.315710 systemd[1]: Started cri-containerd-5c102472aa38f16235ce50a7069f3329ea724a041d36350316680fe635a1732d.scope. Sep 13 03:04:59.317148 systemd[1]: Started cri-containerd-d4ec2242fb676dd85b7285600fa47efa8843b158e27eebd99917d739d1333751.scope. Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.319000 audit: BPF prog-id=73 op=LOAD Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2163 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037306137623963643938643561663234323632313762313039616639 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2163 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037306137623963643938643561663234323632313762313039616639 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit: BPF prog-id=74 op=LOAD Sep 13 03:04:59.320000 audit[2294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000298f90 items=0 ppid=2163 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037306137623963643938643561663234323632313762313039616639 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit: BPF prog-id=75 op=LOAD Sep 13 03:04:59.320000 audit[2294]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000298fd8 items=0 ppid=2163 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037306137623963643938643561663234323632313762313039616639 Sep 13 03:04:59.320000 audit: BPF prog-id=75 op=UNLOAD Sep 13 03:04:59.320000 audit: BPF prog-id=74 op=UNLOAD Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { perfmon } for pid=2294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit[2294]: AVC avc: denied { bpf } for pid=2294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.320000 audit: BPF prog-id=76 op=LOAD Sep 13 03:04:59.320000 audit[2294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002993e8 items=0 ppid=2163 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037306137623963643938643561663234323632313762313039616639 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit: BPF prog-id=77 op=LOAD Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2195 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434656332323432666236373664643835623732383536303066613437 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2195 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434656332323432666236373664643835623732383536303066613437 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit: BPF prog-id=78 op=LOAD Sep 13 03:04:59.323000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000f3dc0 items=0 ppid=2195 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434656332323432666236373664643835623732383536303066613437 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit: BPF prog-id=79 op=LOAD Sep 13 03:04:59.323000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000f3e08 items=0 ppid=2195 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434656332323432666236373664643835623732383536303066613437 Sep 13 03:04:59.323000 audit: BPF prog-id=79 op=UNLOAD Sep 13 03:04:59.323000 audit: BPF prog-id=78 op=UNLOAD Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { perfmon } for pid=2310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit[2310]: AVC avc: denied { bpf } for pid=2310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.323000 audit: BPF prog-id=80 op=LOAD Sep 13 03:04:59.323000 audit[2310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ec218 items=0 ppid=2195 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434656332323432666236373664643835623732383536303066613437 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit: BPF prog-id=81 op=LOAD Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2180 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313032343732616133386631363233356365353061373036396633 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2180 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313032343732616133386631363233356365353061373036396633 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit: BPF prog-id=82 op=LOAD Sep 13 03:04:59.324000 audit[2307]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000d9d10 items=0 ppid=2180 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313032343732616133386631363233356365353061373036396633 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit: BPF prog-id=83 op=LOAD Sep 13 03:04:59.324000 audit[2307]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000d9d58 items=0 ppid=2180 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313032343732616133386631363233356365353061373036396633 Sep 13 03:04:59.324000 audit: BPF prog-id=83 op=UNLOAD Sep 13 03:04:59.324000 audit: BPF prog-id=82 op=UNLOAD Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { perfmon } for pid=2307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit[2307]: AVC avc: denied { bpf } for pid=2307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:04:59.324000 audit: BPF prog-id=84 op=LOAD Sep 13 03:04:59.324000 audit[2307]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c6168 items=0 ppid=2180 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:04:59.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313032343732616133386631363233356365353061373036396633 Sep 13 03:04:59.338490 env[1575]: time="2025-09-13T03:04:59.338466536Z" level=info msg="StartContainer for \"070a7b9cd98d5af2426217b109af910aa7f825fac3828758fb0e2dae4256a307\" returns successfully" Sep 13 03:04:59.348187 env[1575]: time="2025-09-13T03:04:59.348121918Z" level=info msg="StartContainer for \"5c102472aa38f16235ce50a7069f3329ea724a041d36350316680fe635a1732d\" returns successfully" Sep 13 03:04:59.348808 env[1575]: time="2025-09-13T03:04:59.348795494Z" level=info msg="StartContainer for \"d4ec2242fb676dd85b7285600fa47efa8843b158e27eebd99917d739d1333751\" returns successfully" Sep 13 03:04:59.370054 kubelet[2109]: E0913 03:04:59.370028 2109 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://86.109.11.213:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 86.109.11.213:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Sep 13 03:04:59.816000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:04:59.816000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:04:59.816000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000c32000 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:04:59.816000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0005805a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:04:59.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:04:59.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:04:59.894329 kubelet[2109]: I0913 03:04:59.894312 2109 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.064000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:00.064000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:00.064000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c00448c020 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:05:00.064000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00428a5a0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:05:00.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:05:00.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:05:00.065000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:00.065000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0040c61e0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:05:00.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:05:00.065000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:00.065000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0040c6210 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:05:00.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:05:00.065000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:00.065000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c006804100 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:05:00.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:05:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=62 a1=c003902570 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:05:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:05:00.076761 kubelet[2109]: E0913 03:05:00.076743 2109 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-ba666c4ddc\" not found" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.143016 kubelet[2109]: I0913 03:05:00.142973 2109 apiserver.go:52] "Watching apiserver" Sep 13 03:05:00.170018 kubelet[2109]: I0913 03:05:00.170004 2109 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 13 03:05:00.177084 kubelet[2109]: I0913 03:05:00.177061 2109 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.177383 kubelet[2109]: E0913 03:05:00.177089 2109 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-ba666c4ddc\": node \"ci-3510.3.8-n-ba666c4ddc\" not found" Sep 13 03:05:00.191981 kubelet[2109]: I0913 03:05:00.191967 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.192460 kubelet[2109]: I0913 03:05:00.192453 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.193023 kubelet[2109]: I0913 03:05:00.193015 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.195402 kubelet[2109]: E0913 03:05:00.195391 2109 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.195445 kubelet[2109]: E0913 03:05:00.195408 2109 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-ba666c4ddc\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.195445 kubelet[2109]: E0913 03:05:00.195428 2109 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.270085 kubelet[2109]: I0913 03:05:00.270038 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.270935 kubelet[2109]: E0913 03:05:00.270894 2109 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-ba666c4ddc\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.270935 kubelet[2109]: I0913 03:05:00.270906 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.271653 kubelet[2109]: E0913 03:05:00.271615 2109 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.271653 kubelet[2109]: I0913 03:05:00.271625 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:00.272376 kubelet[2109]: E0913 03:05:00.272338 2109 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:01.195799 kubelet[2109]: I0913 03:05:01.195704 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:01.196576 kubelet[2109]: I0913 03:05:01.195890 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:01.202710 kubelet[2109]: I0913 03:05:01.202652 2109 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 13 03:05:01.203255 kubelet[2109]: I0913 03:05:01.203199 2109 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 13 03:05:02.489157 kubelet[2109]: I0913 03:05:02.489063 2109 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:02.496459 kubelet[2109]: I0913 03:05:02.496403 2109 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 13 03:05:02.875486 systemd[1]: Reloading. Sep 13 03:05:02.913261 /usr/lib/systemd/system-generators/torcx-generator[2453]: time="2025-09-13T03:05:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 03:05:02.913285 /usr/lib/systemd/system-generators/torcx-generator[2453]: time="2025-09-13T03:05:02Z" level=info msg="torcx already run" Sep 13 03:05:02.975110 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 03:05:02.975121 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 03:05:02.989608 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.070048 kernel: kauditd_printk_skb: 581 callbacks suppressed Sep 13 03:05:03.070087 kernel: audit: type=1400 audit(1757732703.043:552): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198456 kernel: audit: type=1400 audit(1757732703.043:553): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198531 kernel: audit: type=1400 audit(1757732703.043:554): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.262855 kernel: audit: type=1400 audit(1757732703.043:555): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327286 kernel: audit: type=1400 audit(1757732703.043:556): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.390714 kernel: audit: type=1400 audit(1757732703.043:557): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.517653 kernel: audit: type=1400 audit(1757732703.043:558): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.517730 kernel: audit: type=1400 audit(1757732703.043:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.644130 kernel: audit: type=1400 audit(1757732703.043:560): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.644168 kernel: audit: type=1400 audit(1757732703.133:561): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.133000 audit: BPF prog-id=85 op=LOAD Sep 13 03:05:03.133000 audit: BPF prog-id=46 op=UNLOAD Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit: BPF prog-id=86 op=LOAD Sep 13 03:05:03.198000 audit: BPF prog-id=47 op=UNLOAD Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.326000 audit: BPF prog-id=87 op=LOAD Sep 13 03:05:03.327000 audit: BPF prog-id=69 op=UNLOAD Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.453000 audit: BPF prog-id=88 op=LOAD Sep 13 03:05:03.453000 audit: BPF prog-id=48 op=UNLOAD Sep 13 03:05:03.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.475000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sdb9" ino=521014 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 03:05:03.475000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0005dd100 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:05:03.475000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit: BPF prog-id=89 op=LOAD Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit: BPF prog-id=90 op=LOAD Sep 13 03:05:03.707000 audit: BPF prog-id=49 op=UNLOAD Sep 13 03:05:03.707000 audit: BPF prog-id=50 op=UNLOAD Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.707000 audit: BPF prog-id=91 op=LOAD Sep 13 03:05:03.707000 audit: BPF prog-id=77 op=UNLOAD Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.708000 audit: BPF prog-id=92 op=LOAD Sep 13 03:05:03.708000 audit: BPF prog-id=51 op=UNLOAD Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit: BPF prog-id=93 op=LOAD Sep 13 03:05:03.709000 audit: BPF prog-id=65 op=UNLOAD Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit: BPF prog-id=94 op=LOAD Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.709000 audit: BPF prog-id=95 op=LOAD Sep 13 03:05:03.709000 audit: BPF prog-id=52 op=UNLOAD Sep 13 03:05:03.709000 audit: BPF prog-id=53 op=UNLOAD Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit: BPF prog-id=96 op=LOAD Sep 13 03:05:03.710000 audit: BPF prog-id=73 op=UNLOAD Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit: BPF prog-id=97 op=LOAD Sep 13 03:05:03.710000 audit: BPF prog-id=54 op=UNLOAD Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit: BPF prog-id=98 op=LOAD Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.710000 audit: BPF prog-id=99 op=LOAD Sep 13 03:05:03.710000 audit: BPF prog-id=55 op=UNLOAD Sep 13 03:05:03.710000 audit: BPF prog-id=56 op=UNLOAD Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit: BPF prog-id=100 op=LOAD Sep 13 03:05:03.711000 audit: BPF prog-id=81 op=UNLOAD Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.711000 audit: BPF prog-id=101 op=LOAD Sep 13 03:05:03.711000 audit: BPF prog-id=61 op=UNLOAD Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit: BPF prog-id=102 op=LOAD Sep 13 03:05:03.712000 audit: BPF prog-id=57 op=UNLOAD Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit: BPF prog-id=103 op=LOAD Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit: BPF prog-id=104 op=LOAD Sep 13 03:05:03.712000 audit: BPF prog-id=58 op=UNLOAD Sep 13 03:05:03.712000 audit: BPF prog-id=59 op=UNLOAD Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:03.712000 audit: BPF prog-id=105 op=LOAD Sep 13 03:05:03.712000 audit: BPF prog-id=60 op=UNLOAD Sep 13 03:05:03.718458 systemd[1]: Stopping kubelet.service... Sep 13 03:05:03.746684 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 03:05:03.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:05:03.746792 systemd[1]: Stopped kubelet.service. Sep 13 03:05:03.747705 systemd[1]: Starting kubelet.service... Sep 13 03:05:03.942000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:03.942000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001214040 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:05:03.942000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:05:03.943000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:03.943000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001214080 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:05:03.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:05:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0000b0a40 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:05:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:05:03.945000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:03.945000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00041bc40 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:05:03.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:05:03.979608 systemd[1]: Started kubelet.service. Sep 13 03:05:03.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:05:03.999991 kubelet[2517]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 03:05:03.999991 kubelet[2517]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 03:05:03.999991 kubelet[2517]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 03:05:04.000221 kubelet[2517]: I0913 03:05:04.000009 2517 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 03:05:04.003422 kubelet[2517]: I0913 03:05:04.003409 2517 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Sep 13 03:05:04.003422 kubelet[2517]: I0913 03:05:04.003420 2517 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 03:05:04.003531 kubelet[2517]: I0913 03:05:04.003524 2517 server.go:956] "Client rotation is on, will bootstrap in background" Sep 13 03:05:04.004152 kubelet[2517]: I0913 03:05:04.004144 2517 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Sep 13 03:05:04.005961 kubelet[2517]: I0913 03:05:04.005946 2517 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 03:05:04.007473 kubelet[2517]: E0913 03:05:04.007436 2517 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 03:05:04.007473 kubelet[2517]: I0913 03:05:04.007450 2517 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 03:05:04.042077 kubelet[2517]: I0913 03:05:04.042021 2517 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 03:05:04.042722 kubelet[2517]: I0913 03:05:04.042668 2517 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 03:05:04.043104 kubelet[2517]: I0913 03:05:04.042731 2517 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-ba666c4ddc","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 03:05:04.043416 kubelet[2517]: I0913 03:05:04.043131 2517 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 03:05:04.043416 kubelet[2517]: I0913 03:05:04.043163 2517 container_manager_linux.go:303] "Creating device plugin manager" Sep 13 03:05:04.043416 kubelet[2517]: I0913 03:05:04.043317 2517 state_mem.go:36] "Initialized new in-memory state store" Sep 13 03:05:04.043779 kubelet[2517]: I0913 03:05:04.043752 2517 kubelet.go:480] "Attempting to sync node with API server" Sep 13 03:05:04.043901 kubelet[2517]: I0913 03:05:04.043789 2517 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 03:05:04.043901 kubelet[2517]: I0913 03:05:04.043841 2517 kubelet.go:386] "Adding apiserver pod source" Sep 13 03:05:04.043901 kubelet[2517]: I0913 03:05:04.043878 2517 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 03:05:04.046145 kubelet[2517]: I0913 03:05:04.046076 2517 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 03:05:04.048198 kubelet[2517]: I0913 03:05:04.048152 2517 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Sep 13 03:05:04.052907 kubelet[2517]: I0913 03:05:04.052845 2517 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 03:05:04.053096 kubelet[2517]: I0913 03:05:04.052932 2517 server.go:1289] "Started kubelet" Sep 13 03:05:04.053096 kubelet[2517]: I0913 03:05:04.053039 2517 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 03:05:04.053370 kubelet[2517]: I0913 03:05:04.053056 2517 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 03:05:04.053656 kubelet[2517]: I0913 03:05:04.053613 2517 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 03:05:04.054000 audit[2517]: AVC avc: denied { mac_admin } for pid=2517 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:04.054000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 03:05:04.054000 audit[2517]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e8d0e0 a1=c000f08798 a2=c000e8d0b0 a3=25 items=0 ppid=1 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:04.054000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 03:05:04.054000 audit[2517]: AVC avc: denied { mac_admin } for pid=2517 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:04.054000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 03:05:04.054000 audit[2517]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000462880 a1=c000f087b0 a2=c000e8d170 a3=25 items=0 ppid=1 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:04.054000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 03:05:04.056722 kubelet[2517]: I0913 03:05:04.055729 2517 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 03:05:04.056722 kubelet[2517]: I0913 03:05:04.055806 2517 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 03:05:04.056722 kubelet[2517]: I0913 03:05:04.055852 2517 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 03:05:04.056722 kubelet[2517]: I0913 03:05:04.055914 2517 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 03:05:04.056722 kubelet[2517]: E0913 03:05:04.055940 2517 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-ba666c4ddc\" not found" Sep 13 03:05:04.056722 kubelet[2517]: I0913 03:05:04.056062 2517 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 03:05:04.056722 kubelet[2517]: I0913 03:05:04.056079 2517 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 03:05:04.056722 kubelet[2517]: I0913 03:05:04.056326 2517 reconciler.go:26] "Reconciler: start to sync state" Sep 13 03:05:04.057407 kubelet[2517]: I0913 03:05:04.056847 2517 server.go:317] "Adding debug handlers to kubelet server" Sep 13 03:05:04.057983 kubelet[2517]: E0913 03:05:04.057942 2517 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 03:05:04.057983 kubelet[2517]: I0913 03:05:04.057956 2517 factory.go:223] Registration of the systemd container factory successfully Sep 13 03:05:04.058241 kubelet[2517]: I0913 03:05:04.058128 2517 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 03:05:04.060074 kubelet[2517]: I0913 03:05:04.060040 2517 factory.go:223] Registration of the containerd container factory successfully Sep 13 03:05:04.072010 kubelet[2517]: I0913 03:05:04.071981 2517 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Sep 13 03:05:04.072819 kubelet[2517]: I0913 03:05:04.072785 2517 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Sep 13 03:05:04.072819 kubelet[2517]: I0913 03:05:04.072801 2517 status_manager.go:230] "Starting to sync pod status with apiserver" Sep 13 03:05:04.072819 kubelet[2517]: I0913 03:05:04.072817 2517 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 03:05:04.072819 kubelet[2517]: I0913 03:05:04.072823 2517 kubelet.go:2436] "Starting kubelet main sync loop" Sep 13 03:05:04.072982 kubelet[2517]: E0913 03:05:04.072861 2517 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 03:05:04.082296 kubelet[2517]: I0913 03:05:04.082279 2517 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 03:05:04.082296 kubelet[2517]: I0913 03:05:04.082291 2517 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 03:05:04.082407 kubelet[2517]: I0913 03:05:04.082304 2517 state_mem.go:36] "Initialized new in-memory state store" Sep 13 03:05:04.082583 kubelet[2517]: I0913 03:05:04.082571 2517 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 13 03:05:04.082648 kubelet[2517]: I0913 03:05:04.082585 2517 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 13 03:05:04.082700 kubelet[2517]: I0913 03:05:04.082650 2517 policy_none.go:49] "None policy: Start" Sep 13 03:05:04.082700 kubelet[2517]: I0913 03:05:04.082664 2517 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 03:05:04.082700 kubelet[2517]: I0913 03:05:04.082677 2517 state_mem.go:35] "Initializing new in-memory state store" Sep 13 03:05:04.082888 kubelet[2517]: I0913 03:05:04.082833 2517 state_mem.go:75] "Updated machine memory state" Sep 13 03:05:04.085249 kubelet[2517]: E0913 03:05:04.085237 2517 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Sep 13 03:05:04.083000 audit[2517]: AVC avc: denied { mac_admin } for pid=2517 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:04.083000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 03:05:04.083000 audit[2517]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000aca1e0 a1=c000891fe0 a2=c000aca1b0 a3=25 items=0 ppid=1 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:04.083000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 03:05:04.085491 kubelet[2517]: E0913 03:05:04.085278 2517 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Sep 13 03:05:04.085491 kubelet[2517]: I0913 03:05:04.085377 2517 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 03:05:04.085491 kubelet[2517]: I0913 03:05:04.085387 2517 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 03:05:04.085580 kubelet[2517]: I0913 03:05:04.085510 2517 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 03:05:04.085856 kubelet[2517]: E0913 03:05:04.085842 2517 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 03:05:04.174042 kubelet[2517]: I0913 03:05:04.173988 2517 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.174042 kubelet[2517]: I0913 03:05:04.174031 2517 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.174175 kubelet[2517]: I0913 03:05:04.174078 2517 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.178337 kubelet[2517]: I0913 03:05:04.178292 2517 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 13 03:05:04.178337 kubelet[2517]: E0913 03:05:04.178323 2517 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.178659 kubelet[2517]: I0913 03:05:04.178606 2517 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 13 03:05:04.178659 kubelet[2517]: E0913 03:05:04.178628 2517 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.178718 kubelet[2517]: I0913 03:05:04.178665 2517 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 13 03:05:04.178718 kubelet[2517]: E0913 03:05:04.178689 2517 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-ba666c4ddc\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.186862 kubelet[2517]: I0913 03:05:04.186826 2517 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.191855 kubelet[2517]: I0913 03:05:04.191831 2517 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.191909 kubelet[2517]: I0913 03:05:04.191865 2517 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258037 kubelet[2517]: I0913 03:05:04.257993 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0d5d228216a67dd460c7814add893ba7-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" (UID: \"0d5d228216a67dd460c7814add893ba7\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258222 kubelet[2517]: I0913 03:05:04.258052 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258222 kubelet[2517]: I0913 03:05:04.258097 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258222 kubelet[2517]: I0913 03:05:04.258139 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258222 kubelet[2517]: I0913 03:05:04.258182 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258517 kubelet[2517]: I0913 03:05:04.258243 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0d5d228216a67dd460c7814add893ba7-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" (UID: \"0d5d228216a67dd460c7814add893ba7\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258517 kubelet[2517]: I0913 03:05:04.258300 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0d5d228216a67dd460c7814add893ba7-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-ba666c4ddc\" (UID: \"0d5d228216a67dd460c7814add893ba7\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258517 kubelet[2517]: I0913 03:05:04.258335 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5a9b9f8a87aa413b97ee28b77e504dca-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-ba666c4ddc\" (UID: \"5a9b9f8a87aa413b97ee28b77e504dca\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:04.258517 kubelet[2517]: I0913 03:05:04.258364 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a9624a958f7a8c9466552b493ece8b5e-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-ba666c4ddc\" (UID: \"a9624a958f7a8c9466552b493ece8b5e\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:05.045064 kubelet[2517]: I0913 03:05:05.044982 2517 apiserver.go:52] "Watching apiserver" Sep 13 03:05:05.056492 kubelet[2517]: I0913 03:05:05.056404 2517 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 13 03:05:05.079685 kubelet[2517]: I0913 03:05:05.079642 2517 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:05.086980 kubelet[2517]: I0913 03:05:05.086832 2517 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Sep 13 03:05:05.086980 kubelet[2517]: E0913 03:05:05.086992 2517 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-ba666c4ddc\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:05.120002 kubelet[2517]: I0913 03:05:05.119949 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-ba666c4ddc" podStartSLOduration=4.119915024 podStartE2EDuration="4.119915024s" podCreationTimestamp="2025-09-13 03:05:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 03:05:05.119829707 +0000 UTC m=+1.136943166" watchObservedRunningTime="2025-09-13 03:05:05.119915024 +0000 UTC m=+1.137028476" Sep 13 03:05:05.134357 kubelet[2517]: I0913 03:05:05.134308 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-ba666c4ddc" podStartSLOduration=4.134285522 podStartE2EDuration="4.134285522s" podCreationTimestamp="2025-09-13 03:05:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 03:05:05.127212816 +0000 UTC m=+1.144326278" watchObservedRunningTime="2025-09-13 03:05:05.134285522 +0000 UTC m=+1.151398977" Sep 13 03:05:05.134502 kubelet[2517]: I0913 03:05:05.134430 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-ba666c4ddc" podStartSLOduration=3.134421497 podStartE2EDuration="3.134421497s" podCreationTimestamp="2025-09-13 03:05:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 03:05:05.134373434 +0000 UTC m=+1.151486894" watchObservedRunningTime="2025-09-13 03:05:05.134421497 +0000 UTC m=+1.151534948" Sep 13 03:05:08.268897 kubelet[2517]: I0913 03:05:08.268817 2517 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 13 03:05:08.269852 env[1575]: time="2025-09-13T03:05:08.269620842Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 13 03:05:08.270594 kubelet[2517]: I0913 03:05:08.270021 2517 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 13 03:05:09.240567 systemd[1]: Created slice kubepods-besteffort-pode38569ca_10f7_4c98_bbe4_8101bae82328.slice. Sep 13 03:05:09.393365 kubelet[2517]: I0913 03:05:09.393213 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/e38569ca-10f7-4c98-bbe4-8101bae82328-kube-proxy\") pod \"kube-proxy-krtww\" (UID: \"e38569ca-10f7-4c98-bbe4-8101bae82328\") " pod="kube-system/kube-proxy-krtww" Sep 13 03:05:09.393365 kubelet[2517]: I0913 03:05:09.393352 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e38569ca-10f7-4c98-bbe4-8101bae82328-xtables-lock\") pod \"kube-proxy-krtww\" (UID: \"e38569ca-10f7-4c98-bbe4-8101bae82328\") " pod="kube-system/kube-proxy-krtww" Sep 13 03:05:09.394460 kubelet[2517]: I0913 03:05:09.393421 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e38569ca-10f7-4c98-bbe4-8101bae82328-lib-modules\") pod \"kube-proxy-krtww\" (UID: \"e38569ca-10f7-4c98-bbe4-8101bae82328\") " pod="kube-system/kube-proxy-krtww" Sep 13 03:05:09.394460 kubelet[2517]: I0913 03:05:09.393478 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h9hb9\" (UniqueName: \"kubernetes.io/projected/e38569ca-10f7-4c98-bbe4-8101bae82328-kube-api-access-h9hb9\") pod \"kube-proxy-krtww\" (UID: \"e38569ca-10f7-4c98-bbe4-8101bae82328\") " pod="kube-system/kube-proxy-krtww" Sep 13 03:05:09.493109 systemd[1]: Created slice kubepods-besteffort-pod17d7bf65_99a6_4a23_950d_a33f8a7d91b4.slice. Sep 13 03:05:09.494202 kubelet[2517]: I0913 03:05:09.494155 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/17d7bf65-99a6-4a23-950d-a33f8a7d91b4-var-lib-calico\") pod \"tigera-operator-755d956888-zcdpn\" (UID: \"17d7bf65-99a6-4a23-950d-a33f8a7d91b4\") " pod="tigera-operator/tigera-operator-755d956888-zcdpn" Sep 13 03:05:09.494357 kubelet[2517]: I0913 03:05:09.494307 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tv6s9\" (UniqueName: \"kubernetes.io/projected/17d7bf65-99a6-4a23-950d-a33f8a7d91b4-kube-api-access-tv6s9\") pod \"tigera-operator-755d956888-zcdpn\" (UID: \"17d7bf65-99a6-4a23-950d-a33f8a7d91b4\") " pod="tigera-operator/tigera-operator-755d956888-zcdpn" Sep 13 03:05:09.499440 kubelet[2517]: I0913 03:05:09.499391 2517 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 13 03:05:09.566212 env[1575]: time="2025-09-13T03:05:09.566067568Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-krtww,Uid:e38569ca-10f7-4c98-bbe4-8101bae82328,Namespace:kube-system,Attempt:0,}" Sep 13 03:05:09.589800 env[1575]: time="2025-09-13T03:05:09.589614046Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:09.589800 env[1575]: time="2025-09-13T03:05:09.589710275Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:09.589800 env[1575]: time="2025-09-13T03:05:09.589748141Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:09.590351 env[1575]: time="2025-09-13T03:05:09.590169083Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b648d756edd63d4d26c1dfbaf3db49e834e305a1e387fed1cd0618914fd5d13d pid=2610 runtime=io.containerd.runc.v2 Sep 13 03:05:09.631137 systemd[1]: Started cri-containerd-b648d756edd63d4d26c1dfbaf3db49e834e305a1e387fed1cd0618914fd5d13d.scope. Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.667285 kernel: kauditd_printk_skb: 263 callbacks suppressed Sep 13 03:05:09.667334 kernel: audit: type=1400 audit(1757732709.639:806): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.794986 kernel: audit: type=1400 audit(1757732709.639:807): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.795022 kernel: audit: type=1400 audit(1757732709.639:808): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.796342 env[1575]: time="2025-09-13T03:05:09.796288497Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-zcdpn,Uid:17d7bf65-99a6-4a23-950d-a33f8a7d91b4,Namespace:tigera-operator,Attempt:0,}" Sep 13 03:05:09.802356 env[1575]: time="2025-09-13T03:05:09.802315268Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:09.802356 env[1575]: time="2025-09-13T03:05:09.802335381Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:09.802356 env[1575]: time="2025-09-13T03:05:09.802345722Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:09.802517 env[1575]: time="2025-09-13T03:05:09.802460670Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e3b3be7695524789a1795994c4ecbfbb60febe25e1a1e2c8ea17369c8413f006 pid=2644 runtime=io.containerd.runc.v2 Sep 13 03:05:09.807447 systemd[1]: Started cri-containerd-e3b3be7695524789a1795994c4ecbfbb60febe25e1a1e2c8ea17369c8413f006.scope. Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.922840 kernel: audit: type=1400 audit(1757732709.639:809): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.922912 kernel: audit: type=1400 audit(1757732709.639:810): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.965316 update_engine[1568]: I0913 03:05:09.965296 1568 update_attempter.cc:509] Updating boot flags... Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.050770 kernel: audit: type=1400 audit(1757732709.639:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.050839 kernel: audit: type=1400 audit(1757732709.639:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.178902 kernel: audit: type=1400 audit(1757732709.639:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.178955 kernel: audit: type=1400 audit(1757732709.639:814): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.242601 kernel: audit: type=1400 audit(1757732709.729:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.729000 audit: BPF prog-id=106 op=LOAD Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2610 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:09.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343864373536656464363364346432366331646662616633646234 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2610 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:09.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343864373536656464363364346432366331646662616633646234 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.730000 audit: BPF prog-id=107 op=LOAD Sep 13 03:05:09.730000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000212fa0 items=0 ppid=2610 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:09.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343864373536656464363364346432366331646662616633646234 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.857000 audit: BPF prog-id=108 op=LOAD Sep 13 03:05:09.857000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000213298 items=0 ppid=2610 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:09.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343864373536656464363364346432366331646662616633646234 Sep 13 03:05:09.985000 audit: BPF prog-id=108 op=UNLOAD Sep 13 03:05:09.985000 audit: BPF prog-id=107 op=UNLOAD Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { perfmon } for pid=2619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit[2619]: AVC avc: denied { bpf } for pid=2619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:09.985000 audit: BPF prog-id=109 op=LOAD Sep 13 03:05:10.113000 audit: BPF prog-id=110 op=LOAD Sep 13 03:05:09.985000 audit[2619]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002136a8 items=0 ppid=2610 pid=2619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:09.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236343864373536656464363364346432366331646662616633646234 Sep 13 03:05:10.113000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.113000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2644 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533623362653736393535323437383961313739353939346334656362 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2644 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533623362653736393535323437383961313739353939346334656362 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit: BPF prog-id=111 op=LOAD Sep 13 03:05:10.305000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002c45c0 items=0 ppid=2644 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533623362653736393535323437383961313739353939346334656362 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit: BPF prog-id=112 op=LOAD Sep 13 03:05:10.305000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002c4608 items=0 ppid=2644 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533623362653736393535323437383961313739353939346334656362 Sep 13 03:05:10.305000 audit: BPF prog-id=112 op=UNLOAD Sep 13 03:05:10.305000 audit: BPF prog-id=111 op=UNLOAD Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.305000 audit: BPF prog-id=113 op=LOAD Sep 13 03:05:10.305000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002c4a18 items=0 ppid=2644 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533623362653736393535323437383961313739353939346334656362 Sep 13 03:05:10.311250 env[1575]: time="2025-09-13T03:05:10.311227473Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-krtww,Uid:e38569ca-10f7-4c98-bbe4-8101bae82328,Namespace:kube-system,Attempt:0,} returns sandbox id \"b648d756edd63d4d26c1dfbaf3db49e834e305a1e387fed1cd0618914fd5d13d\"" Sep 13 03:05:10.313074 env[1575]: time="2025-09-13T03:05:10.313058592Z" level=info msg="CreateContainer within sandbox \"b648d756edd63d4d26c1dfbaf3db49e834e305a1e387fed1cd0618914fd5d13d\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 13 03:05:10.318347 env[1575]: time="2025-09-13T03:05:10.318299662Z" level=info msg="CreateContainer within sandbox \"b648d756edd63d4d26c1dfbaf3db49e834e305a1e387fed1cd0618914fd5d13d\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f827665ffd766a8212a7b2cc8fac7218261d148189bd5ef6e0499d2c2b04f46f\"" Sep 13 03:05:10.318555 env[1575]: time="2025-09-13T03:05:10.318541696Z" level=info msg="StartContainer for \"f827665ffd766a8212a7b2cc8fac7218261d148189bd5ef6e0499d2c2b04f46f\"" Sep 13 03:05:10.322810 env[1575]: time="2025-09-13T03:05:10.322777039Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-zcdpn,Uid:17d7bf65-99a6-4a23-950d-a33f8a7d91b4,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"e3b3be7695524789a1795994c4ecbfbb60febe25e1a1e2c8ea17369c8413f006\"" Sep 13 03:05:10.323509 env[1575]: time="2025-09-13T03:05:10.323498186Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 13 03:05:10.326767 systemd[1]: Started cri-containerd-f827665ffd766a8212a7b2cc8fac7218261d148189bd5ef6e0499d2c2b04f46f.scope. Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=7f0b5029a7a8 items=0 ppid=2610 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638323736363566666437363661383231326137623263633866616337 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit: BPF prog-id=114 op=LOAD Sep 13 03:05:10.333000 audit[2711]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001999d8 a2=78 a3=c000288d48 items=0 ppid=2610 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638323736363566666437363661383231326137623263633866616337 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit: BPF prog-id=115 op=LOAD Sep 13 03:05:10.333000 audit[2711]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000199770 a2=78 a3=c000288d98 items=0 ppid=2610 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638323736363566666437363661383231326137623263633866616337 Sep 13 03:05:10.333000 audit: BPF prog-id=115 op=UNLOAD Sep 13 03:05:10.333000 audit: BPF prog-id=114 op=UNLOAD Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { perfmon } for pid=2711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit[2711]: AVC avc: denied { bpf } for pid=2711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:10.333000 audit: BPF prog-id=116 op=LOAD Sep 13 03:05:10.333000 audit[2711]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000199c30 a2=78 a3=c000288e28 items=0 ppid=2610 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638323736363566666437363661383231326137623263633866616337 Sep 13 03:05:10.340463 env[1575]: time="2025-09-13T03:05:10.340425653Z" level=info msg="StartContainer for \"f827665ffd766a8212a7b2cc8fac7218261d148189bd5ef6e0499d2c2b04f46f\" returns successfully" Sep 13 03:05:10.511000 audit[2784]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.511000 audit[2784]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb115e530 a2=0 a3=7fffb115e51c items=0 ppid=2721 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.511000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 03:05:10.512000 audit[2785]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.512000 audit[2785]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda3bff130 a2=0 a3=7ffda3bff11c items=0 ppid=2721 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.512000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 03:05:10.515000 audit[2787]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.515000 audit[2787]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffddd1b04b0 a2=0 a3=7ffddd1b049c items=0 ppid=2721 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 03:05:10.515000 audit[2788]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.515000 audit[2788]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff55eeb200 a2=0 a3=7fff55eeb1ec items=0 ppid=2721 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.515000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 03:05:10.520000 audit[2791]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.520000 audit[2791]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe3e5c2a80 a2=0 a3=7ffe3e5c2a6c items=0 ppid=2721 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.520000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 03:05:10.521000 audit[2790]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2790 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.521000 audit[2790]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8c639670 a2=0 a3=7fff8c63965c items=0 ppid=2721 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 03:05:10.618000 audit[2792]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.618000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffffaf16270 a2=0 a3=7ffffaf1625c items=0 ppid=2721 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.618000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 03:05:10.625000 audit[2794]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.625000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc6dab1500 a2=0 a3=7ffc6dab14ec items=0 ppid=2721 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.625000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 13 03:05:10.634000 audit[2797]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.634000 audit[2797]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcc097d470 a2=0 a3=7ffcc097d45c items=0 ppid=2721 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.634000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 13 03:05:10.637000 audit[2798]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2798 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.637000 audit[2798]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc90548120 a2=0 a3=7ffc9054810c items=0 ppid=2721 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 03:05:10.643000 audit[2800]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2800 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.643000 audit[2800]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff96866270 a2=0 a3=7fff9686625c items=0 ppid=2721 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.643000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 03:05:10.646000 audit[2801]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2801 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.646000 audit[2801]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffad512fd0 a2=0 a3=7fffad512fbc items=0 ppid=2721 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 03:05:10.653000 audit[2803]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.653000 audit[2803]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe3287a670 a2=0 a3=7ffe3287a65c items=0 ppid=2721 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 03:05:10.662000 audit[2806]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.662000 audit[2806]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff47abcf40 a2=0 a3=7fff47abcf2c items=0 ppid=2721 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.662000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 13 03:05:10.665000 audit[2807]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.665000 audit[2807]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcdaf60bb0 a2=0 a3=7ffcdaf60b9c items=0 ppid=2721 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.665000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 03:05:10.672000 audit[2809]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2809 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.672000 audit[2809]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff835562d0 a2=0 a3=7fff835562bc items=0 ppid=2721 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 03:05:10.674000 audit[2810]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2810 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.674000 audit[2810]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe652991f0 a2=0 a3=7ffe652991dc items=0 ppid=2721 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.674000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 03:05:10.681000 audit[2812]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.681000 audit[2812]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc52993bb0 a2=0 a3=7ffc52993b9c items=0 ppid=2721 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 03:05:10.690000 audit[2815]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.690000 audit[2815]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd34abd280 a2=0 a3=7ffd34abd26c items=0 ppid=2721 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.690000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 03:05:10.699000 audit[2818]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.699000 audit[2818]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffee73a57b0 a2=0 a3=7ffee73a579c items=0 ppid=2721 pid=2818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.699000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 03:05:10.702000 audit[2819]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2819 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.702000 audit[2819]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc79d71790 a2=0 a3=7ffc79d7177c items=0 ppid=2721 pid=2819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.702000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 03:05:10.708000 audit[2821]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2821 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.708000 audit[2821]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff6562de60 a2=0 a3=7fff6562de4c items=0 ppid=2721 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.708000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 03:05:10.717000 audit[2824]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.717000 audit[2824]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc3b6c860 a2=0 a3=7fffc3b6c84c items=0 ppid=2721 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.717000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 03:05:10.720000 audit[2825]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.720000 audit[2825]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc732a7b0 a2=0 a3=7fffc732a79c items=0 ppid=2721 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.720000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 03:05:10.726000 audit[2827]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2827 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 03:05:10.726000 audit[2827]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc86133160 a2=0 a3=7ffc8613314c items=0 ppid=2721 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 03:05:10.787000 audit[2833]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2833 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:10.787000 audit[2833]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc70c38210 a2=0 a3=7ffc70c381fc items=0 ppid=2721 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.787000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:10.812000 audit[2833]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2833 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:10.812000 audit[2833]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffc70c38210 a2=0 a3=7ffc70c381fc items=0 ppid=2721 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.812000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:10.814000 audit[2838]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2838 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.814000 audit[2838]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffee6cc7fd0 a2=0 a3=7ffee6cc7fbc items=0 ppid=2721 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.814000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 03:05:10.816000 audit[2840]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2840 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.816000 audit[2840]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff06649ef0 a2=0 a3=7fff06649edc items=0 ppid=2721 pid=2840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.816000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 13 03:05:10.821000 audit[2843]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2843 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.821000 audit[2843]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe1225bbb0 a2=0 a3=7ffe1225bb9c items=0 ppid=2721 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 13 03:05:10.822000 audit[2844]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2844 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.822000 audit[2844]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffce1402c20 a2=0 a3=7ffce1402c0c items=0 ppid=2721 pid=2844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.822000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 03:05:10.825000 audit[2846]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.825000 audit[2846]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd03fc8180 a2=0 a3=7ffd03fc816c items=0 ppid=2721 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.825000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 03:05:10.826000 audit[2847]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2847 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.826000 audit[2847]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff83f5fa0 a2=0 a3=7ffff83f5f8c items=0 ppid=2721 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 03:05:10.830000 audit[2849]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2849 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.830000 audit[2849]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffebfdc5260 a2=0 a3=7ffebfdc524c items=0 ppid=2721 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.830000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 13 03:05:10.834000 audit[2852]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2852 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.834000 audit[2852]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe5aa3f0c0 a2=0 a3=7ffe5aa3f0ac items=0 ppid=2721 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.834000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 03:05:10.836000 audit[2853]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2853 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.836000 audit[2853]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf548fd80 a2=0 a3=7ffcf548fd6c items=0 ppid=2721 pid=2853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.836000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 03:05:10.840000 audit[2855]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2855 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.840000 audit[2855]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc47f1fbf0 a2=0 a3=7ffc47f1fbdc items=0 ppid=2721 pid=2855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 03:05:10.842000 audit[2856]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2856 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.842000 audit[2856]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeca279c20 a2=0 a3=7ffeca279c0c items=0 ppid=2721 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 03:05:10.848000 audit[2858]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2858 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.848000 audit[2858]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe6f6486b0 a2=0 a3=7ffe6f64869c items=0 ppid=2721 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.848000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 03:05:10.857000 audit[2861]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2861 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.857000 audit[2861]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc29fb7bc0 a2=0 a3=7ffc29fb7bac items=0 ppid=2721 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 03:05:10.867000 audit[2864]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2864 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.867000 audit[2864]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffce1af88b0 a2=0 a3=7ffce1af889c items=0 ppid=2721 pid=2864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.867000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 13 03:05:10.870000 audit[2865]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2865 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.870000 audit[2865]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffea14f40a0 a2=0 a3=7ffea14f408c items=0 ppid=2721 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.870000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 03:05:10.876000 audit[2867]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2867 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.876000 audit[2867]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe4eb79550 a2=0 a3=7ffe4eb7953c items=0 ppid=2721 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.876000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 03:05:10.884000 audit[2870]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2870 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.884000 audit[2870]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffb564b790 a2=0 a3=7fffb564b77c items=0 ppid=2721 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 03:05:10.887000 audit[2871]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2871 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.887000 audit[2871]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd6010820 a2=0 a3=7ffcd601080c items=0 ppid=2721 pid=2871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 03:05:10.893000 audit[2873]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2873 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.893000 audit[2873]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe52f22ab0 a2=0 a3=7ffe52f22a9c items=0 ppid=2721 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 03:05:10.896000 audit[2874]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2874 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.896000 audit[2874]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff7718060 a2=0 a3=7ffff771804c items=0 ppid=2721 pid=2874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.896000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 03:05:10.902000 audit[2876]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2876 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.902000 audit[2876]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffced98b8e0 a2=0 a3=7ffced98b8cc items=0 ppid=2721 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.902000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 03:05:10.911000 audit[2879]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2879 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 03:05:10.911000 audit[2879]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc1267a2b0 a2=0 a3=7ffc1267a29c items=0 ppid=2721 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 03:05:10.918000 audit[2881]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2881 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 03:05:10.918000 audit[2881]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fff62ea65f0 a2=0 a3=7fff62ea65dc items=0 ppid=2721 pid=2881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.918000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:10.920000 audit[2881]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2881 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 03:05:10.920000 audit[2881]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fff62ea65f0 a2=0 a3=7fff62ea65dc items=0 ppid=2721 pid=2881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:10.920000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:11.952467 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3568963966.mount: Deactivated successfully. Sep 13 03:05:12.485598 env[1575]: time="2025-09-13T03:05:12.485543821Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:12.486170 env[1575]: time="2025-09-13T03:05:12.486128381Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:12.486824 env[1575]: time="2025-09-13T03:05:12.486783780Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:12.487475 env[1575]: time="2025-09-13T03:05:12.487435706Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:12.487776 env[1575]: time="2025-09-13T03:05:12.487732697Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:1911afdd8478c6ca3036ff85614050d5d19acc0f0c3f6a5a7b3e34b38dd309c9\"" Sep 13 03:05:12.489382 env[1575]: time="2025-09-13T03:05:12.489369094Z" level=info msg="CreateContainer within sandbox \"e3b3be7695524789a1795994c4ecbfbb60febe25e1a1e2c8ea17369c8413f006\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 13 03:05:12.493720 env[1575]: time="2025-09-13T03:05:12.493676207Z" level=info msg="CreateContainer within sandbox \"e3b3be7695524789a1795994c4ecbfbb60febe25e1a1e2c8ea17369c8413f006\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"98a9882d939e446df6f816cada3c742fd1a78ee630a454a40e716307f9e50113\"" Sep 13 03:05:12.494050 env[1575]: time="2025-09-13T03:05:12.494015774Z" level=info msg="StartContainer for \"98a9882d939e446df6f816cada3c742fd1a78ee630a454a40e716307f9e50113\"" Sep 13 03:05:12.516880 systemd[1]: Started cri-containerd-98a9882d939e446df6f816cada3c742fd1a78ee630a454a40e716307f9e50113.scope. Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit: BPF prog-id=117 op=LOAD Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2644 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:12.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938613938383264393339653434366466366638313663616461336337 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2644 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:12.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938613938383264393339653434366466366638313663616461336337 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit: BPF prog-id=118 op=LOAD Sep 13 03:05:12.521000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002b4d20 items=0 ppid=2644 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:12.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938613938383264393339653434366466366638313663616461336337 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit: BPF prog-id=119 op=LOAD Sep 13 03:05:12.521000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002b4d68 items=0 ppid=2644 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:12.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938613938383264393339653434366466366638313663616461336337 Sep 13 03:05:12.521000 audit: BPF prog-id=119 op=UNLOAD Sep 13 03:05:12.521000 audit: BPF prog-id=118 op=UNLOAD Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:12.521000 audit: BPF prog-id=120 op=LOAD Sep 13 03:05:12.521000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002b5178 items=0 ppid=2644 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:12.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938613938383264393339653434366466366638313663616461336337 Sep 13 03:05:12.528111 env[1575]: time="2025-09-13T03:05:12.528090074Z" level=info msg="StartContainer for \"98a9882d939e446df6f816cada3c742fd1a78ee630a454a40e716307f9e50113\" returns successfully" Sep 13 03:05:13.105870 kubelet[2517]: I0913 03:05:13.105815 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-krtww" podStartSLOduration=4.105801263 podStartE2EDuration="4.105801263s" podCreationTimestamp="2025-09-13 03:05:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 03:05:11.113995574 +0000 UTC m=+7.131109105" watchObservedRunningTime="2025-09-13 03:05:13.105801263 +0000 UTC m=+9.122914704" Sep 13 03:05:13.106158 kubelet[2517]: I0913 03:05:13.105908 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-zcdpn" podStartSLOduration=1.940991265 podStartE2EDuration="4.105904343s" podCreationTimestamp="2025-09-13 03:05:09 +0000 UTC" firstStartedPulling="2025-09-13 03:05:10.323334708 +0000 UTC m=+6.340448148" lastFinishedPulling="2025-09-13 03:05:12.488247789 +0000 UTC m=+8.505361226" observedRunningTime="2025-09-13 03:05:13.105866236 +0000 UTC m=+9.122979679" watchObservedRunningTime="2025-09-13 03:05:13.105904343 +0000 UTC m=+9.123017787" Sep 13 03:05:17.303805 sudo[1780]: pam_unix(sudo:session): session closed for user root Sep 13 03:05:17.302000 audit[1780]: USER_END pid=1780 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:05:17.304755 sshd[1777]: pam_unix(sshd:session): session closed for user core Sep 13 03:05:17.306289 systemd[1]: sshd@8-86.109.11.213:22-139.178.89.65:33514.service: Deactivated successfully. Sep 13 03:05:17.307016 systemd[1]: session-11.scope: Deactivated successfully. Sep 13 03:05:17.307178 systemd[1]: session-11.scope: Consumed 4.291s CPU time. Sep 13 03:05:17.307757 systemd-logind[1566]: Session 11 logged out. Waiting for processes to exit. Sep 13 03:05:17.308790 systemd-logind[1566]: Removed session 11. Sep 13 03:05:17.330864 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 13 03:05:17.330947 kernel: audit: type=1106 audit(1757732717.302:917): pid=1780 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:05:17.302000 audit[1780]: CRED_DISP pid=1780 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:05:17.508198 kernel: audit: type=1104 audit(1757732717.302:918): pid=1780 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 03:05:17.508368 kernel: audit: type=1106 audit(1757732717.304:919): pid=1777 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:05:17.304000 audit[1777]: USER_END pid=1777 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:05:17.304000 audit[1777]: CRED_DISP pid=1777 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:05:17.784022 kernel: audit: type=1104 audit(1757732717.304:920): pid=1777 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:05:17.784090 kernel: audit: type=1131 audit(1757732717.305:921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-86.109.11.213:22-139.178.89.65:33514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:05:17.784105 kernel: audit: type=1325 audit(1757732717.595:922): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:17.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-86.109.11.213:22-139.178.89.65:33514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:05:17.595000 audit[3053]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:17.595000 audit[3053]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff99fe9500 a2=0 a3=7fff99fe94ec items=0 ppid=2721 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:17.941885 kernel: audit: type=1300 audit(1757732717.595:922): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff99fe9500 a2=0 a3=7fff99fe94ec items=0 ppid=2721 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:17.942054 kernel: audit: type=1327 audit(1757732717.595:922): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:17.595000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:17.843000 audit[3053]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:18.059896 kernel: audit: type=1325 audit(1757732717.843:923): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:18.060013 kernel: audit: type=1300 audit(1757732717.843:923): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff99fe9500 a2=0 a3=0 items=0 ppid=2721 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:17.843000 audit[3053]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff99fe9500 a2=0 a3=0 items=0 ppid=2721 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:17.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:17.948000 audit[3055]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3055 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:17.948000 audit[3055]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd713907b0 a2=0 a3=7ffd7139079c items=0 ppid=2721 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:17.948000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:18.170000 audit[3055]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3055 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:18.170000 audit[3055]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd713907b0 a2=0 a3=0 items=0 ppid=2721 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:18.170000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:19.226000 audit[3058]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:19.226000 audit[3058]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd360f6270 a2=0 a3=7ffd360f625c items=0 ppid=2721 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:19.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:19.242000 audit[3058]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:19.242000 audit[3058]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd360f6270 a2=0 a3=0 items=0 ppid=2721 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:19.242000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:19.547629 systemd[1]: Created slice kubepods-besteffort-podf7e6013d_3be4_487b_bfbd_c847acf3322c.slice. Sep 13 03:05:19.662788 kubelet[2517]: I0913 03:05:19.662705 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9bsfz\" (UniqueName: \"kubernetes.io/projected/f7e6013d-3be4-487b-bfbd-c847acf3322c-kube-api-access-9bsfz\") pod \"calico-typha-dc5f6d5c6-2rlgr\" (UID: \"f7e6013d-3be4-487b-bfbd-c847acf3322c\") " pod="calico-system/calico-typha-dc5f6d5c6-2rlgr" Sep 13 03:05:19.663539 kubelet[2517]: I0913 03:05:19.662813 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/f7e6013d-3be4-487b-bfbd-c847acf3322c-typha-certs\") pod \"calico-typha-dc5f6d5c6-2rlgr\" (UID: \"f7e6013d-3be4-487b-bfbd-c847acf3322c\") " pod="calico-system/calico-typha-dc5f6d5c6-2rlgr" Sep 13 03:05:19.663539 kubelet[2517]: I0913 03:05:19.662891 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f7e6013d-3be4-487b-bfbd-c847acf3322c-tigera-ca-bundle\") pod \"calico-typha-dc5f6d5c6-2rlgr\" (UID: \"f7e6013d-3be4-487b-bfbd-c847acf3322c\") " pod="calico-system/calico-typha-dc5f6d5c6-2rlgr" Sep 13 03:05:19.851423 env[1575]: time="2025-09-13T03:05:19.851140540Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-dc5f6d5c6-2rlgr,Uid:f7e6013d-3be4-487b-bfbd-c847acf3322c,Namespace:calico-system,Attempt:0,}" Sep 13 03:05:19.864520 kubelet[2517]: I0913 03:05:19.864445 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-lib-modules\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.864911 kubelet[2517]: I0913 03:05:19.864529 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-policysync\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.864911 kubelet[2517]: I0913 03:05:19.864642 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-var-lib-calico\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.864911 kubelet[2517]: I0913 03:05:19.864737 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-cni-bin-dir\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.864911 kubelet[2517]: I0913 03:05:19.864808 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bdc5de19-c3e1-46be-8435-dbf92978446f-tigera-ca-bundle\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.864911 kubelet[2517]: I0913 03:05:19.864861 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/bdc5de19-c3e1-46be-8435-dbf92978446f-node-certs\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.865796 kubelet[2517]: I0913 03:05:19.864917 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-xtables-lock\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.865796 kubelet[2517]: I0913 03:05:19.865011 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rpvqh\" (UniqueName: \"kubernetes.io/projected/bdc5de19-c3e1-46be-8435-dbf92978446f-kube-api-access-rpvqh\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.865796 kubelet[2517]: I0913 03:05:19.865081 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-cni-log-dir\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.865796 kubelet[2517]: I0913 03:05:19.865132 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-cni-net-dir\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.865796 kubelet[2517]: I0913 03:05:19.865236 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-flexvol-driver-host\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.866646 kubelet[2517]: I0913 03:05:19.865383 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/bdc5de19-c3e1-46be-8435-dbf92978446f-var-run-calico\") pod \"calico-node-c8zpj\" (UID: \"bdc5de19-c3e1-46be-8435-dbf92978446f\") " pod="calico-system/calico-node-c8zpj" Sep 13 03:05:19.879175 env[1575]: time="2025-09-13T03:05:19.879028744Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:19.879175 env[1575]: time="2025-09-13T03:05:19.879131560Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:19.879175 env[1575]: time="2025-09-13T03:05:19.879161737Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:19.879593 env[1575]: time="2025-09-13T03:05:19.879420363Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/05a823d3a2d0e575ff2799fd03d30aa8f8265c1c288d8189c05f9d2387c88d39 pid=3068 runtime=io.containerd.runc.v2 Sep 13 03:05:19.881147 systemd[1]: Created slice kubepods-besteffort-podbdc5de19_c3e1_46be_8435_dbf92978446f.slice. Sep 13 03:05:19.896258 systemd[1]: Started cri-containerd-05a823d3a2d0e575ff2799fd03d30aa8f8265c1c288d8189c05f9d2387c88d39.scope. Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit: BPF prog-id=121 op=LOAD Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3068 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:19.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613832336433613264306535373566663237393966643033643330 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3068 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:19.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613832336433613264306535373566663237393966643033643330 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit: BPF prog-id=122 op=LOAD Sep 13 03:05:19.903000 audit[3078]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d9ce0 items=0 ppid=3068 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:19.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613832336433613264306535373566663237393966643033643330 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit: BPF prog-id=123 op=LOAD Sep 13 03:05:19.903000 audit[3078]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d9d28 items=0 ppid=3068 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:19.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613832336433613264306535373566663237393966643033643330 Sep 13 03:05:19.903000 audit: BPF prog-id=123 op=UNLOAD Sep 13 03:05:19.903000 audit: BPF prog-id=122 op=UNLOAD Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { perfmon } for pid=3078 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit[3078]: AVC avc: denied { bpf } for pid=3078 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:19.903000 audit: BPF prog-id=124 op=LOAD Sep 13 03:05:19.903000 audit[3078]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003da138 items=0 ppid=3068 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:19.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035613832336433613264306535373566663237393966643033643330 Sep 13 03:05:19.926047 env[1575]: time="2025-09-13T03:05:19.926015615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-dc5f6d5c6-2rlgr,Uid:f7e6013d-3be4-487b-bfbd-c847acf3322c,Namespace:calico-system,Attempt:0,} returns sandbox id \"05a823d3a2d0e575ff2799fd03d30aa8f8265c1c288d8189c05f9d2387c88d39\"" Sep 13 03:05:19.926779 env[1575]: time="2025-09-13T03:05:19.926764626Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 13 03:05:19.969776 kubelet[2517]: E0913 03:05:19.969723 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:19.969776 kubelet[2517]: W0913 03:05:19.969765 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:19.970202 kubelet[2517]: E0913 03:05:19.969810 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:19.974322 kubelet[2517]: E0913 03:05:19.974249 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:19.974322 kubelet[2517]: W0913 03:05:19.974311 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:19.974610 kubelet[2517]: E0913 03:05:19.974351 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:19.986568 kubelet[2517]: E0913 03:05:19.986518 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:19.986568 kubelet[2517]: W0913 03:05:19.986562 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:19.986977 kubelet[2517]: E0913 03:05:19.986610 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.110136 kubelet[2517]: E0913 03:05:20.109888 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-b476g" podUID="84539b9b-f46c-497d-8000-3665fcd3c774" Sep 13 03:05:20.165992 kubelet[2517]: E0913 03:05:20.165901 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.165992 kubelet[2517]: W0913 03:05:20.165947 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.165992 kubelet[2517]: E0913 03:05:20.165985 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.166581 kubelet[2517]: E0913 03:05:20.166545 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.166703 kubelet[2517]: W0913 03:05:20.166580 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.166703 kubelet[2517]: E0913 03:05:20.166612 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.167130 kubelet[2517]: E0913 03:05:20.167062 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.167130 kubelet[2517]: W0913 03:05:20.167092 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.167130 kubelet[2517]: E0913 03:05:20.167131 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.167786 kubelet[2517]: E0913 03:05:20.167715 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.167786 kubelet[2517]: W0913 03:05:20.167749 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.167786 kubelet[2517]: E0913 03:05:20.167779 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.168256 kubelet[2517]: E0913 03:05:20.168228 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.168256 kubelet[2517]: W0913 03:05:20.168259 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.168518 kubelet[2517]: E0913 03:05:20.168308 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.168801 kubelet[2517]: E0913 03:05:20.168722 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.168801 kubelet[2517]: W0913 03:05:20.168750 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.168801 kubelet[2517]: E0913 03:05:20.168774 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.169243 kubelet[2517]: E0913 03:05:20.169218 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.169243 kubelet[2517]: W0913 03:05:20.169240 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.169466 kubelet[2517]: E0913 03:05:20.169276 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.169681 kubelet[2517]: E0913 03:05:20.169629 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.169681 kubelet[2517]: W0913 03:05:20.169649 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.169681 kubelet[2517]: E0913 03:05:20.169671 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.170075 kubelet[2517]: E0913 03:05:20.170031 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.170075 kubelet[2517]: W0913 03:05:20.170051 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.170075 kubelet[2517]: E0913 03:05:20.170073 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.170581 kubelet[2517]: E0913 03:05:20.170533 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.170581 kubelet[2517]: W0913 03:05:20.170557 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.170581 kubelet[2517]: E0913 03:05:20.170579 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.170985 kubelet[2517]: E0913 03:05:20.170939 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.170985 kubelet[2517]: W0913 03:05:20.170962 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.170985 kubelet[2517]: E0913 03:05:20.170983 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.171435 kubelet[2517]: E0913 03:05:20.171409 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.171588 kubelet[2517]: W0913 03:05:20.171434 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.171588 kubelet[2517]: E0913 03:05:20.171469 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.171945 kubelet[2517]: E0913 03:05:20.171919 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.171945 kubelet[2517]: W0913 03:05:20.171944 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.172148 kubelet[2517]: E0913 03:05:20.171970 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.172334 kubelet[2517]: E0913 03:05:20.172309 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.172465 kubelet[2517]: W0913 03:05:20.172335 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.172465 kubelet[2517]: E0913 03:05:20.172356 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.172721 kubelet[2517]: E0913 03:05:20.172698 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.172721 kubelet[2517]: W0913 03:05:20.172719 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.172916 kubelet[2517]: E0913 03:05:20.172741 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.173080 kubelet[2517]: E0913 03:05:20.173057 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.173203 kubelet[2517]: W0913 03:05:20.173078 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.173203 kubelet[2517]: E0913 03:05:20.173100 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.173955 kubelet[2517]: E0913 03:05:20.173483 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.173955 kubelet[2517]: W0913 03:05:20.173503 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.173955 kubelet[2517]: E0913 03:05:20.173524 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.173955 kubelet[2517]: E0913 03:05:20.173887 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.173955 kubelet[2517]: W0913 03:05:20.173907 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.173955 kubelet[2517]: E0913 03:05:20.173931 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.174514 kubelet[2517]: E0913 03:05:20.174254 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.174514 kubelet[2517]: W0913 03:05:20.174289 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.174514 kubelet[2517]: E0913 03:05:20.174311 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.174778 kubelet[2517]: E0913 03:05:20.174636 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.174778 kubelet[2517]: W0913 03:05:20.174655 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.174778 kubelet[2517]: E0913 03:05:20.174675 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.178614 kubelet[2517]: E0913 03:05:20.178546 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.178874 kubelet[2517]: W0913 03:05:20.178723 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.179675 kubelet[2517]: E0913 03:05:20.178885 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.179857 kubelet[2517]: I0913 03:05:20.179724 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/84539b9b-f46c-497d-8000-3665fcd3c774-varrun\") pod \"csi-node-driver-b476g\" (UID: \"84539b9b-f46c-497d-8000-3665fcd3c774\") " pod="calico-system/csi-node-driver-b476g" Sep 13 03:05:20.180325 kubelet[2517]: E0913 03:05:20.180279 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.180325 kubelet[2517]: W0913 03:05:20.180323 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.180592 kubelet[2517]: E0913 03:05:20.180358 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.180858 kubelet[2517]: E0913 03:05:20.180800 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.180858 kubelet[2517]: W0913 03:05:20.180835 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.181115 kubelet[2517]: E0913 03:05:20.180865 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.181463 kubelet[2517]: E0913 03:05:20.181413 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.181463 kubelet[2517]: W0913 03:05:20.181441 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.181697 kubelet[2517]: E0913 03:05:20.181468 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.181697 kubelet[2517]: I0913 03:05:20.181525 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fk4qr\" (UniqueName: \"kubernetes.io/projected/84539b9b-f46c-497d-8000-3665fcd3c774-kube-api-access-fk4qr\") pod \"csi-node-driver-b476g\" (UID: \"84539b9b-f46c-497d-8000-3665fcd3c774\") " pod="calico-system/csi-node-driver-b476g" Sep 13 03:05:20.182058 kubelet[2517]: E0913 03:05:20.182020 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.182194 kubelet[2517]: W0913 03:05:20.182057 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.182194 kubelet[2517]: E0913 03:05:20.182092 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.182489 kubelet[2517]: I0913 03:05:20.182179 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/84539b9b-f46c-497d-8000-3665fcd3c774-kubelet-dir\") pod \"csi-node-driver-b476g\" (UID: \"84539b9b-f46c-497d-8000-3665fcd3c774\") " pod="calico-system/csi-node-driver-b476g" Sep 13 03:05:20.182869 kubelet[2517]: E0913 03:05:20.182826 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.182869 kubelet[2517]: W0913 03:05:20.182866 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.183076 kubelet[2517]: E0913 03:05:20.182900 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.183364 kubelet[2517]: E0913 03:05:20.183326 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.183364 kubelet[2517]: W0913 03:05:20.183351 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.183729 kubelet[2517]: E0913 03:05:20.183376 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.183918 kubelet[2517]: E0913 03:05:20.183900 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.184102 kubelet[2517]: W0913 03:05:20.183925 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.184102 kubelet[2517]: E0913 03:05:20.183952 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.184482 kubelet[2517]: E0913 03:05:20.184438 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.184482 kubelet[2517]: W0913 03:05:20.184473 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.184837 kubelet[2517]: E0913 03:05:20.184512 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.185014 kubelet[2517]: E0913 03:05:20.184972 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.185014 kubelet[2517]: W0913 03:05:20.184996 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.185511 kubelet[2517]: E0913 03:05:20.185024 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.185511 kubelet[2517]: I0913 03:05:20.185088 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/84539b9b-f46c-497d-8000-3665fcd3c774-socket-dir\") pod \"csi-node-driver-b476g\" (UID: \"84539b9b-f46c-497d-8000-3665fcd3c774\") " pod="calico-system/csi-node-driver-b476g" Sep 13 03:05:20.185818 kubelet[2517]: E0913 03:05:20.185654 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.185818 kubelet[2517]: W0913 03:05:20.185693 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.185818 kubelet[2517]: E0913 03:05:20.185728 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.185818 kubelet[2517]: I0913 03:05:20.185797 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/84539b9b-f46c-497d-8000-3665fcd3c774-registration-dir\") pod \"csi-node-driver-b476g\" (UID: \"84539b9b-f46c-497d-8000-3665fcd3c774\") " pod="calico-system/csi-node-driver-b476g" Sep 13 03:05:20.186397 kubelet[2517]: E0913 03:05:20.186355 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.186569 kubelet[2517]: W0913 03:05:20.186399 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.186569 kubelet[2517]: E0913 03:05:20.186434 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.187002 kubelet[2517]: E0913 03:05:20.186941 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.187002 kubelet[2517]: W0913 03:05:20.186985 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.187341 kubelet[2517]: E0913 03:05:20.187031 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.187725 kubelet[2517]: E0913 03:05:20.187669 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.187725 kubelet[2517]: W0913 03:05:20.187708 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.188076 kubelet[2517]: E0913 03:05:20.187749 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.188290 kubelet[2517]: E0913 03:05:20.188237 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.188402 kubelet[2517]: W0913 03:05:20.188294 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.188402 kubelet[2517]: E0913 03:05:20.188338 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.192355 env[1575]: time="2025-09-13T03:05:20.192191093Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-c8zpj,Uid:bdc5de19-c3e1-46be-8435-dbf92978446f,Namespace:calico-system,Attempt:0,}" Sep 13 03:05:20.211033 env[1575]: time="2025-09-13T03:05:20.210935185Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:20.211033 env[1575]: time="2025-09-13T03:05:20.210995844Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:20.211033 env[1575]: time="2025-09-13T03:05:20.211015586Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:20.211453 env[1575]: time="2025-09-13T03:05:20.211186592Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40 pid=3148 runtime=io.containerd.runc.v2 Sep 13 03:05:20.222778 systemd[1]: Started cri-containerd-4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40.scope. Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.230000 audit: BPF prog-id=125 op=LOAD Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3148 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:20.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462333331373462313465613362323835663061656634393430346535 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3148 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:20.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462333331373462313465613362323835663061656634393430346535 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit: BPF prog-id=126 op=LOAD Sep 13 03:05:20.231000 audit[3157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d5ce0 items=0 ppid=3148 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:20.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462333331373462313465613362323835663061656634393430346535 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit: BPF prog-id=127 op=LOAD Sep 13 03:05:20.231000 audit[3157]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d5d28 items=0 ppid=3148 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:20.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462333331373462313465613362323835663061656634393430346535 Sep 13 03:05:20.231000 audit: BPF prog-id=127 op=UNLOAD Sep 13 03:05:20.231000 audit: BPF prog-id=126 op=UNLOAD Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { perfmon } for pid=3157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit[3157]: AVC avc: denied { bpf } for pid=3157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:20.231000 audit: BPF prog-id=128 op=LOAD Sep 13 03:05:20.231000 audit[3157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003be138 items=0 ppid=3148 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:20.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462333331373462313465613362323835663061656634393430346535 Sep 13 03:05:20.238638 env[1575]: time="2025-09-13T03:05:20.238578096Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-c8zpj,Uid:bdc5de19-c3e1-46be-8435-dbf92978446f,Namespace:calico-system,Attempt:0,} returns sandbox id \"4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40\"" Sep 13 03:05:20.257000 audit[3182]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:20.257000 audit[3182]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe6749cd10 a2=0 a3=7ffe6749ccfc items=0 ppid=2721 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:20.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:20.274000 audit[3182]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:20.274000 audit[3182]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe6749cd10 a2=0 a3=0 items=0 ppid=2721 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:20.274000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:20.287695 kubelet[2517]: E0913 03:05:20.287641 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.287695 kubelet[2517]: W0913 03:05:20.287686 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.288078 kubelet[2517]: E0913 03:05:20.287725 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.288382 kubelet[2517]: E0913 03:05:20.288294 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.288382 kubelet[2517]: W0913 03:05:20.288329 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.288382 kubelet[2517]: E0913 03:05:20.288359 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.289126 kubelet[2517]: E0913 03:05:20.289046 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.289126 kubelet[2517]: W0913 03:05:20.289080 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.289126 kubelet[2517]: E0913 03:05:20.289110 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.289782 kubelet[2517]: E0913 03:05:20.289700 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.289782 kubelet[2517]: W0913 03:05:20.289746 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.289782 kubelet[2517]: E0913 03:05:20.289782 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.290228 kubelet[2517]: E0913 03:05:20.290190 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.290228 kubelet[2517]: W0913 03:05:20.290214 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.290600 kubelet[2517]: E0913 03:05:20.290240 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.290799 kubelet[2517]: E0913 03:05:20.290747 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.290799 kubelet[2517]: W0913 03:05:20.290783 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.291039 kubelet[2517]: E0913 03:05:20.290824 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.291336 kubelet[2517]: E0913 03:05:20.291292 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.291336 kubelet[2517]: W0913 03:05:20.291322 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.291683 kubelet[2517]: E0913 03:05:20.291348 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.291829 kubelet[2517]: E0913 03:05:20.291797 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.291829 kubelet[2517]: W0913 03:05:20.291822 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.292086 kubelet[2517]: E0913 03:05:20.291847 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.292256 kubelet[2517]: E0913 03:05:20.292232 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.292437 kubelet[2517]: W0913 03:05:20.292253 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.292437 kubelet[2517]: E0913 03:05:20.292305 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.292651 kubelet[2517]: E0913 03:05:20.292629 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.292651 kubelet[2517]: W0913 03:05:20.292650 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.292896 kubelet[2517]: E0913 03:05:20.292671 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.293005 kubelet[2517]: E0913 03:05:20.292984 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.293005 kubelet[2517]: W0913 03:05:20.293004 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.293220 kubelet[2517]: E0913 03:05:20.293024 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.293504 kubelet[2517]: E0913 03:05:20.293432 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.293504 kubelet[2517]: W0913 03:05:20.293455 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.293504 kubelet[2517]: E0913 03:05:20.293476 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.293921 kubelet[2517]: E0913 03:05:20.293827 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.293921 kubelet[2517]: W0913 03:05:20.293851 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.293921 kubelet[2517]: E0913 03:05:20.293874 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.294438 kubelet[2517]: E0913 03:05:20.294404 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.294438 kubelet[2517]: W0913 03:05:20.294430 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.294809 kubelet[2517]: E0913 03:05:20.294459 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.294947 kubelet[2517]: E0913 03:05:20.294909 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.294947 kubelet[2517]: W0913 03:05:20.294932 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.295136 kubelet[2517]: E0913 03:05:20.294966 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.295474 kubelet[2517]: E0913 03:05:20.295443 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.295474 kubelet[2517]: W0913 03:05:20.295472 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.295713 kubelet[2517]: E0913 03:05:20.295497 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.295981 kubelet[2517]: E0913 03:05:20.295955 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.295981 kubelet[2517]: W0913 03:05:20.295980 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.296175 kubelet[2517]: E0913 03:05:20.296004 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.296470 kubelet[2517]: E0913 03:05:20.296419 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.296470 kubelet[2517]: W0913 03:05:20.296442 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.296470 kubelet[2517]: E0913 03:05:20.296466 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.297012 kubelet[2517]: E0913 03:05:20.296956 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.297012 kubelet[2517]: W0913 03:05:20.296982 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.297012 kubelet[2517]: E0913 03:05:20.297006 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.297482 kubelet[2517]: E0913 03:05:20.297435 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.297482 kubelet[2517]: W0913 03:05:20.297468 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.297828 kubelet[2517]: E0913 03:05:20.297504 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.297983 kubelet[2517]: E0913 03:05:20.297927 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.297983 kubelet[2517]: W0913 03:05:20.297953 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.298188 kubelet[2517]: E0913 03:05:20.297984 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.298544 kubelet[2517]: E0913 03:05:20.298497 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.298544 kubelet[2517]: W0913 03:05:20.298521 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.298544 kubelet[2517]: E0913 03:05:20.298545 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.298982 kubelet[2517]: E0913 03:05:20.298932 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.298982 kubelet[2517]: W0913 03:05:20.298954 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.298982 kubelet[2517]: E0913 03:05:20.298974 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.299465 kubelet[2517]: E0913 03:05:20.299419 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.299465 kubelet[2517]: W0913 03:05:20.299443 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.299465 kubelet[2517]: E0913 03:05:20.299466 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.299973 kubelet[2517]: E0913 03:05:20.299939 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.299973 kubelet[2517]: W0913 03:05:20.299962 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.300338 kubelet[2517]: E0913 03:05:20.299989 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:20.317038 kubelet[2517]: E0913 03:05:20.316945 2517 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 03:05:20.317038 kubelet[2517]: W0913 03:05:20.316986 2517 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 03:05:20.317038 kubelet[2517]: E0913 03:05:20.317022 2517 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 03:05:21.530395 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount854074764.mount: Deactivated successfully. Sep 13 03:05:22.073053 kubelet[2517]: E0913 03:05:22.073001 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-b476g" podUID="84539b9b-f46c-497d-8000-3665fcd3c774" Sep 13 03:05:22.442182 env[1575]: time="2025-09-13T03:05:22.442099970Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:22.442758 env[1575]: time="2025-09-13T03:05:22.442716232Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:22.443307 env[1575]: time="2025-09-13T03:05:22.443271284Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:22.443963 env[1575]: time="2025-09-13T03:05:22.443922534Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:22.444222 env[1575]: time="2025-09-13T03:05:22.444207443Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:1d7bb7b0cce2924d35c7c26f6b6600409ea7c9535074c3d2e517ffbb3a0e0b36\"" Sep 13 03:05:22.444982 env[1575]: time="2025-09-13T03:05:22.444970252Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 13 03:05:22.449204 env[1575]: time="2025-09-13T03:05:22.449185319Z" level=info msg="CreateContainer within sandbox \"05a823d3a2d0e575ff2799fd03d30aa8f8265c1c288d8189c05f9d2387c88d39\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 13 03:05:22.453680 env[1575]: time="2025-09-13T03:05:22.453660967Z" level=info msg="CreateContainer within sandbox \"05a823d3a2d0e575ff2799fd03d30aa8f8265c1c288d8189c05f9d2387c88d39\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"b40f29dd664ff5402454084b1bcb4cfa2051b361ff96d8247d7195aa6d468e4c\"" Sep 13 03:05:22.453973 env[1575]: time="2025-09-13T03:05:22.453939111Z" level=info msg="StartContainer for \"b40f29dd664ff5402454084b1bcb4cfa2051b361ff96d8247d7195aa6d468e4c\"" Sep 13 03:05:22.462312 systemd[1]: Started cri-containerd-b40f29dd664ff5402454084b1bcb4cfa2051b361ff96d8247d7195aa6d468e4c.scope. Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.496970 kernel: kauditd_printk_skb: 133 callbacks suppressed Sep 13 03:05:22.497025 kernel: audit: type=1400 audit(1757732722.467:966): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.625049 kernel: audit: type=1400 audit(1757732722.467:967): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.689163 kernel: audit: type=1400 audit(1757732722.467:968): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.689201 kernel: audit: type=1400 audit(1757732722.467:969): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.753522 kernel: audit: type=1400 audit(1757732722.467:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.817877 kernel: audit: type=1400 audit(1757732722.467:971): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.946541 kernel: audit: type=1400 audit(1757732722.467:972): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.946588 kernel: audit: type=1400 audit(1757732722.467:973): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:23.011028 kernel: audit: type=1400 audit(1757732722.467:974): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:23.074990 kernel: audit: type=1400 audit(1757732722.559:975): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.559000 audit: BPF prog-id=129 op=LOAD Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3068 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:22.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234306632396464363634666635343032343534303834623162636234 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3068 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:22.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234306632396464363634666635343032343534303834623162636234 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.560000 audit: BPF prog-id=130 op=LOAD Sep 13 03:05:22.560000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000267b80 items=0 ppid=3068 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:22.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234306632396464363634666635343032343534303834623162636234 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.623000 audit: BPF prog-id=131 op=LOAD Sep 13 03:05:22.623000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000267bc8 items=0 ppid=3068 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:22.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234306632396464363634666635343032343534303834623162636234 Sep 13 03:05:22.752000 audit: BPF prog-id=131 op=UNLOAD Sep 13 03:05:22.752000 audit: BPF prog-id=130 op=UNLOAD Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { perfmon } for pid=3219 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit[3219]: AVC avc: denied { bpf } for pid=3219 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:22.752000 audit: BPF prog-id=132 op=LOAD Sep 13 03:05:22.752000 audit[3219]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000267fd8 items=0 ppid=3068 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:22.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234306632396464363634666635343032343534303834623162636234 Sep 13 03:05:23.155218 env[1575]: time="2025-09-13T03:05:23.155196187Z" level=info msg="StartContainer for \"b40f29dd664ff5402454084b1bcb4cfa2051b361ff96d8247d7195aa6d468e4c\" returns successfully" Sep 13 03:05:24.073461 kubelet[2517]: E0913 03:05:24.073409 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-b476g" podUID="84539b9b-f46c-497d-8000-3665fcd3c774" Sep 13 03:05:24.085228 env[1575]: time="2025-09-13T03:05:24.085178781Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:24.085923 env[1575]: time="2025-09-13T03:05:24.085876392Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:24.086497 env[1575]: time="2025-09-13T03:05:24.086460092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:24.087118 env[1575]: time="2025-09-13T03:05:24.087076151Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:24.087404 env[1575]: time="2025-09-13T03:05:24.087362008Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:4f2b088ed6fdfc6a97ac0650a4ba8171107d6656ce265c592e4c8423fd10e5c4\"" Sep 13 03:05:24.089475 env[1575]: time="2025-09-13T03:05:24.089453227Z" level=info msg="CreateContainer within sandbox \"4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 13 03:05:24.094299 env[1575]: time="2025-09-13T03:05:24.094237210Z" level=info msg="CreateContainer within sandbox \"4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f\"" Sep 13 03:05:24.094444 env[1575]: time="2025-09-13T03:05:24.094426967Z" level=info msg="StartContainer for \"2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f\"" Sep 13 03:05:24.105393 systemd[1]: Started cri-containerd-2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f.scope. Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f600e31c0a8 items=0 ppid=3148 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:24.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265626531366163356262396230333937663234396534366664333833 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit: BPF prog-id=133 op=LOAD Sep 13 03:05:24.111000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0001f9198 items=0 ppid=3148 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:24.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265626531366163356262396230333937663234396534366664333833 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit: BPF prog-id=134 op=LOAD Sep 13 03:05:24.111000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0001f91e8 items=0 ppid=3148 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:24.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265626531366163356262396230333937663234396534366664333833 Sep 13 03:05:24.111000 audit: BPF prog-id=134 op=UNLOAD Sep 13 03:05:24.111000 audit: BPF prog-id=133 op=UNLOAD Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:24.111000 audit: BPF prog-id=135 op=LOAD Sep 13 03:05:24.111000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0001f9278 items=0 ppid=3148 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:24.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265626531366163356262396230333937663234396534366664333833 Sep 13 03:05:24.116981 env[1575]: time="2025-09-13T03:05:24.116955935Z" level=info msg="StartContainer for \"2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f\" returns successfully" Sep 13 03:05:24.122143 systemd[1]: cri-containerd-2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f.scope: Deactivated successfully. Sep 13 03:05:24.130081 kubelet[2517]: I0913 03:05:24.130043 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-dc5f6d5c6-2rlgr" podStartSLOduration=2.611719507 podStartE2EDuration="5.130031364s" podCreationTimestamp="2025-09-13 03:05:19 +0000 UTC" firstStartedPulling="2025-09-13 03:05:19.926603687 +0000 UTC m=+15.943717125" lastFinishedPulling="2025-09-13 03:05:22.444915544 +0000 UTC m=+18.462028982" observedRunningTime="2025-09-13 03:05:24.129861012 +0000 UTC m=+20.146974453" watchObservedRunningTime="2025-09-13 03:05:24.130031364 +0000 UTC m=+20.147144804" Sep 13 03:05:24.131000 audit: BPF prog-id=135 op=UNLOAD Sep 13 03:05:24.453064 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f-rootfs.mount: Deactivated successfully. Sep 13 03:05:24.566382 env[1575]: time="2025-09-13T03:05:24.566237730Z" level=info msg="shim disconnected" id=2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f Sep 13 03:05:24.566731 env[1575]: time="2025-09-13T03:05:24.566380976Z" level=warning msg="cleaning up after shim disconnected" id=2ebe16ac5bb9b0397f249e46fd3835940fcc7e5d92083e092dee14e2d9b03d3f namespace=k8s.io Sep 13 03:05:24.566731 env[1575]: time="2025-09-13T03:05:24.566416964Z" level=info msg="cleaning up dead shim" Sep 13 03:05:24.583467 env[1575]: time="2025-09-13T03:05:24.583388350Z" level=warning msg="cleanup warnings time=\"2025-09-13T03:05:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3316 runtime=io.containerd.runc.v2\n" Sep 13 03:05:25.129141 kubelet[2517]: I0913 03:05:25.129064 2517 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 03:05:25.131620 env[1575]: time="2025-09-13T03:05:25.131506022Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 13 03:05:26.074164 kubelet[2517]: E0913 03:05:26.074025 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-b476g" podUID="84539b9b-f46c-497d-8000-3665fcd3c774" Sep 13 03:05:28.074112 kubelet[2517]: E0913 03:05:28.074044 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-b476g" podUID="84539b9b-f46c-497d-8000-3665fcd3c774" Sep 13 03:05:28.812048 env[1575]: time="2025-09-13T03:05:28.812022419Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:28.812555 env[1575]: time="2025-09-13T03:05:28.812542074Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:28.813156 env[1575]: time="2025-09-13T03:05:28.813143959Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:28.813790 env[1575]: time="2025-09-13T03:05:28.813779788Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:28.814413 env[1575]: time="2025-09-13T03:05:28.814401049Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:034822460c2f667e1f4a7679c843cc35ce1bf2c25dec86f04e07fb403df7e458\"" Sep 13 03:05:28.816230 env[1575]: time="2025-09-13T03:05:28.816217920Z" level=info msg="CreateContainer within sandbox \"4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 13 03:05:28.821480 env[1575]: time="2025-09-13T03:05:28.821462547Z" level=info msg="CreateContainer within sandbox \"4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b\"" Sep 13 03:05:28.821792 env[1575]: time="2025-09-13T03:05:28.821781055Z" level=info msg="StartContainer for \"f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b\"" Sep 13 03:05:28.832767 systemd[1]: Started cri-containerd-f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b.scope. Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.866949 kernel: kauditd_printk_skb: 91 callbacks suppressed Sep 13 03:05:28.867099 kernel: audit: type=1400 audit(1757732728.839:991): avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fe304d4f198 items=0 ppid=3148 pid=3335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:28.932272 kernel: audit: type=1300 audit(1757732728.839:991): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fe304d4f198 items=0 ppid=3148 pid=3335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:28.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635643732643033366263636538633937306661376331343466653734 Sep 13 03:05:29.123323 kernel: audit: type=1327 audit(1757732728.839:991): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635643732643033366263636538633937306661376331343466653734 Sep 13 03:05:29.123364 kernel: audit: type=1400 audit(1757732728.839:992): avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.192289 env[1575]: time="2025-09-13T03:05:29.192252939Z" level=info msg="StartContainer for \"f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b\" returns successfully" Sep 13 03:05:29.250612 kernel: audit: type=1400 audit(1757732728.839:992): avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.250699 kernel: audit: type=1400 audit(1757732728.839:992): avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.378313 kernel: audit: type=1400 audit(1757732728.839:992): avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.378368 kernel: audit: type=1400 audit(1757732728.839:992): avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.506528 kernel: audit: type=1400 audit(1757732728.839:992): avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.506609 kernel: audit: type=1400 audit(1757732728.839:992): avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.839000 audit: BPF prog-id=136 op=LOAD Sep 13 03:05:28.839000 audit[3335]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002c7f98 items=0 ppid=3148 pid=3335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:28.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635643732643033366263636538633937306661376331343466653734 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:28.931000 audit: BPF prog-id=137 op=LOAD Sep 13 03:05:28.931000 audit[3335]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002c7fe8 items=0 ppid=3148 pid=3335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:28.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635643732643033366263636538633937306661376331343466653734 Sep 13 03:05:29.029000 audit: BPF prog-id=137 op=UNLOAD Sep 13 03:05:29.029000 audit: BPF prog-id=136 op=UNLOAD Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { perfmon } for pid=3335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit[3335]: AVC avc: denied { bpf } for pid=3335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:29.029000 audit: BPF prog-id=138 op=LOAD Sep 13 03:05:29.029000 audit[3335]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003b8078 items=0 ppid=3148 pid=3335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:29.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635643732643033366263636538633937306661376331343466653734 Sep 13 03:05:29.946036 env[1575]: time="2025-09-13T03:05:29.945888142Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 03:05:29.950279 systemd[1]: cri-containerd-f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b.scope: Deactivated successfully. Sep 13 03:05:29.970000 audit: BPF prog-id=138 op=UNLOAD Sep 13 03:05:29.995793 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b-rootfs.mount: Deactivated successfully. Sep 13 03:05:30.052635 kubelet[2517]: I0913 03:05:30.052576 2517 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 13 03:05:30.089756 systemd[1]: Created slice kubepods-besteffort-pod84539b9b_f46c_497d_8000_3665fcd3c774.slice. Sep 13 03:05:30.100087 env[1575]: time="2025-09-13T03:05:30.099993874Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-b476g,Uid:84539b9b-f46c-497d-8000-3665fcd3c774,Namespace:calico-system,Attempt:0,}" Sep 13 03:05:30.172380 systemd[1]: Created slice kubepods-burstable-pod53dcf495_08a8_4cac_abf1_7ac4993f1d7d.slice. Sep 13 03:05:30.213104 systemd[1]: Created slice kubepods-burstable-podfe014c83_bfbb_406d_8207_f066f50c73f7.slice. Sep 13 03:05:30.276457 kubelet[2517]: I0913 03:05:30.276384 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/fe014c83-bfbb-406d-8207-f066f50c73f7-config-volume\") pod \"coredns-674b8bbfcf-bdv2h\" (UID: \"fe014c83-bfbb-406d-8207-f066f50c73f7\") " pod="kube-system/coredns-674b8bbfcf-bdv2h" Sep 13 03:05:30.310480 kubelet[2517]: I0913 03:05:30.276490 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/53dcf495-08a8-4cac-abf1-7ac4993f1d7d-config-volume\") pod \"coredns-674b8bbfcf-kp2ms\" (UID: \"53dcf495-08a8-4cac-abf1-7ac4993f1d7d\") " pod="kube-system/coredns-674b8bbfcf-kp2ms" Sep 13 03:05:30.310480 kubelet[2517]: I0913 03:05:30.276603 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7j4tc\" (UniqueName: \"kubernetes.io/projected/53dcf495-08a8-4cac-abf1-7ac4993f1d7d-kube-api-access-7j4tc\") pod \"coredns-674b8bbfcf-kp2ms\" (UID: \"53dcf495-08a8-4cac-abf1-7ac4993f1d7d\") " pod="kube-system/coredns-674b8bbfcf-kp2ms" Sep 13 03:05:30.310480 kubelet[2517]: I0913 03:05:30.276700 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-85gh6\" (UniqueName: \"kubernetes.io/projected/fe014c83-bfbb-406d-8207-f066f50c73f7-kube-api-access-85gh6\") pod \"coredns-674b8bbfcf-bdv2h\" (UID: \"fe014c83-bfbb-406d-8207-f066f50c73f7\") " pod="kube-system/coredns-674b8bbfcf-bdv2h" Sep 13 03:05:30.323049 systemd[1]: Created slice kubepods-besteffort-pod385b07dd_f30f_4c30_9b84_d07458eebcd2.slice. Sep 13 03:05:30.377195 kubelet[2517]: I0913 03:05:30.377093 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/385b07dd-f30f-4c30-9b84-d07458eebcd2-tigera-ca-bundle\") pod \"calico-kube-controllers-5f76d8bf97-mcssk\" (UID: \"385b07dd-f30f-4c30-9b84-d07458eebcd2\") " pod="calico-system/calico-kube-controllers-5f76d8bf97-mcssk" Sep 13 03:05:30.377581 env[1575]: time="2025-09-13T03:05:30.377332304Z" level=info msg="shim disconnected" id=f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b Sep 13 03:05:30.377581 env[1575]: time="2025-09-13T03:05:30.377474461Z" level=warning msg="cleaning up after shim disconnected" id=f5d72d036bcce8c970fa7c144fe7486b0f5902bfc644b829176c2cd1039c576b namespace=k8s.io Sep 13 03:05:30.377581 env[1575]: time="2025-09-13T03:05:30.377524376Z" level=info msg="cleaning up dead shim" Sep 13 03:05:30.378205 kubelet[2517]: I0913 03:05:30.377588 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-82sl5\" (UniqueName: \"kubernetes.io/projected/385b07dd-f30f-4c30-9b84-d07458eebcd2-kube-api-access-82sl5\") pod \"calico-kube-controllers-5f76d8bf97-mcssk\" (UID: \"385b07dd-f30f-4c30-9b84-d07458eebcd2\") " pod="calico-system/calico-kube-controllers-5f76d8bf97-mcssk" Sep 13 03:05:30.397881 env[1575]: time="2025-09-13T03:05:30.397790076Z" level=warning msg="cleanup warnings time=\"2025-09-13T03:05:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3389 runtime=io.containerd.runc.v2\n" Sep 13 03:05:30.423776 systemd[1]: Created slice kubepods-besteffort-pod440e0220_08e0_41ce_8c9f_c4b5129f05d5.slice. Sep 13 03:05:30.427245 systemd[1]: Created slice kubepods-besteffort-pod9008353e_2c90_41f7_baad_336c80f2f4a8.slice. Sep 13 03:05:30.430567 systemd[1]: Created slice kubepods-besteffort-podbcea16e9_21a3_4755_b83a_ac7b4f597078.slice. Sep 13 03:05:30.433253 systemd[1]: Created slice kubepods-besteffort-pod3b74d61d_621f_4d7d_9b6b_243626e50cca.slice. Sep 13 03:05:30.439533 env[1575]: time="2025-09-13T03:05:30.439493855Z" level=error msg="Failed to destroy network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.439739 env[1575]: time="2025-09-13T03:05:30.439717894Z" level=error msg="encountered an error cleaning up failed sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.439792 env[1575]: time="2025-09-13T03:05:30.439757770Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-b476g,Uid:84539b9b-f46c-497d-8000-3665fcd3c774,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.439938 kubelet[2517]: E0913 03:05:30.439889 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.439938 kubelet[2517]: E0913 03:05:30.439930 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-b476g" Sep 13 03:05:30.440000 kubelet[2517]: E0913 03:05:30.439944 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-b476g" Sep 13 03:05:30.440000 kubelet[2517]: E0913 03:05:30.439976 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-b476g_calico-system(84539b9b-f46c-497d-8000-3665fcd3c774)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-b476g_calico-system(84539b9b-f46c-497d-8000-3665fcd3c774)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-b476g" podUID="84539b9b-f46c-497d-8000-3665fcd3c774" Sep 13 03:05:30.441010 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5-shm.mount: Deactivated successfully. Sep 13 03:05:30.479328 kubelet[2517]: I0913 03:05:30.479113 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-plqg8\" (UniqueName: \"kubernetes.io/projected/9008353e-2c90-41f7-baad-336c80f2f4a8-kube-api-access-plqg8\") pod \"goldmane-54d579b49d-2896r\" (UID: \"9008353e-2c90-41f7-baad-336c80f2f4a8\") " pod="calico-system/goldmane-54d579b49d-2896r" Sep 13 03:05:30.479328 kubelet[2517]: I0913 03:05:30.479227 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k2cd9\" (UniqueName: \"kubernetes.io/projected/3b74d61d-621f-4d7d-9b6b-243626e50cca-kube-api-access-k2cd9\") pod \"whisker-749d6d88b7-7h9k2\" (UID: \"3b74d61d-621f-4d7d-9b6b-243626e50cca\") " pod="calico-system/whisker-749d6d88b7-7h9k2" Sep 13 03:05:30.479787 kubelet[2517]: I0913 03:05:30.479548 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/440e0220-08e0-41ce-8c9f-c4b5129f05d5-calico-apiserver-certs\") pod \"calico-apiserver-6ffc95647b-4d92j\" (UID: \"440e0220-08e0-41ce-8c9f-c4b5129f05d5\") " pod="calico-apiserver/calico-apiserver-6ffc95647b-4d92j" Sep 13 03:05:30.479787 kubelet[2517]: I0913 03:05:30.479639 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-526qr\" (UniqueName: \"kubernetes.io/projected/440e0220-08e0-41ce-8c9f-c4b5129f05d5-kube-api-access-526qr\") pod \"calico-apiserver-6ffc95647b-4d92j\" (UID: \"440e0220-08e0-41ce-8c9f-c4b5129f05d5\") " pod="calico-apiserver/calico-apiserver-6ffc95647b-4d92j" Sep 13 03:05:30.479787 kubelet[2517]: I0913 03:05:30.479693 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-ca-bundle\") pod \"whisker-749d6d88b7-7h9k2\" (UID: \"3b74d61d-621f-4d7d-9b6b-243626e50cca\") " pod="calico-system/whisker-749d6d88b7-7h9k2" Sep 13 03:05:30.479787 kubelet[2517]: I0913 03:05:30.479757 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/9008353e-2c90-41f7-baad-336c80f2f4a8-goldmane-key-pair\") pod \"goldmane-54d579b49d-2896r\" (UID: \"9008353e-2c90-41f7-baad-336c80f2f4a8\") " pod="calico-system/goldmane-54d579b49d-2896r" Sep 13 03:05:30.480515 kubelet[2517]: I0913 03:05:30.479803 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-backend-key-pair\") pod \"whisker-749d6d88b7-7h9k2\" (UID: \"3b74d61d-621f-4d7d-9b6b-243626e50cca\") " pod="calico-system/whisker-749d6d88b7-7h9k2" Sep 13 03:05:30.480515 kubelet[2517]: I0913 03:05:30.479881 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/bcea16e9-21a3-4755-b83a-ac7b4f597078-calico-apiserver-certs\") pod \"calico-apiserver-6ffc95647b-s46sh\" (UID: \"bcea16e9-21a3-4755-b83a-ac7b4f597078\") " pod="calico-apiserver/calico-apiserver-6ffc95647b-s46sh" Sep 13 03:05:30.480515 kubelet[2517]: I0913 03:05:30.479931 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/9008353e-2c90-41f7-baad-336c80f2f4a8-config\") pod \"goldmane-54d579b49d-2896r\" (UID: \"9008353e-2c90-41f7-baad-336c80f2f4a8\") " pod="calico-system/goldmane-54d579b49d-2896r" Sep 13 03:05:30.480515 kubelet[2517]: I0913 03:05:30.479999 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wm8n9\" (UniqueName: \"kubernetes.io/projected/bcea16e9-21a3-4755-b83a-ac7b4f597078-kube-api-access-wm8n9\") pod \"calico-apiserver-6ffc95647b-s46sh\" (UID: \"bcea16e9-21a3-4755-b83a-ac7b4f597078\") " pod="calico-apiserver/calico-apiserver-6ffc95647b-s46sh" Sep 13 03:05:30.480515 kubelet[2517]: I0913 03:05:30.480172 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9008353e-2c90-41f7-baad-336c80f2f4a8-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-2896r\" (UID: \"9008353e-2c90-41f7-baad-336c80f2f4a8\") " pod="calico-system/goldmane-54d579b49d-2896r" Sep 13 03:05:30.486194 env[1575]: time="2025-09-13T03:05:30.486117470Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kp2ms,Uid:53dcf495-08a8-4cac-abf1-7ac4993f1d7d,Namespace:kube-system,Attempt:0,}" Sep 13 03:05:30.518147 env[1575]: time="2025-09-13T03:05:30.518064783Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bdv2h,Uid:fe014c83-bfbb-406d-8207-f066f50c73f7,Namespace:kube-system,Attempt:0,}" Sep 13 03:05:30.577730 env[1575]: time="2025-09-13T03:05:30.577683906Z" level=error msg="Failed to destroy network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.577950 env[1575]: time="2025-09-13T03:05:30.577928613Z" level=error msg="encountered an error cleaning up failed sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.577991 env[1575]: time="2025-09-13T03:05:30.577973034Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kp2ms,Uid:53dcf495-08a8-4cac-abf1-7ac4993f1d7d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.578146 kubelet[2517]: E0913 03:05:30.578118 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.578208 kubelet[2517]: E0913 03:05:30.578171 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-kp2ms" Sep 13 03:05:30.578208 kubelet[2517]: E0913 03:05:30.578197 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-kp2ms" Sep 13 03:05:30.578316 kubelet[2517]: E0913 03:05:30.578253 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-kp2ms_kube-system(53dcf495-08a8-4cac-abf1-7ac4993f1d7d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-kp2ms_kube-system(53dcf495-08a8-4cac-abf1-7ac4993f1d7d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-kp2ms" podUID="53dcf495-08a8-4cac-abf1-7ac4993f1d7d" Sep 13 03:05:30.580902 env[1575]: time="2025-09-13T03:05:30.580876509Z" level=error msg="Failed to destroy network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.581123 env[1575]: time="2025-09-13T03:05:30.581098462Z" level=error msg="encountered an error cleaning up failed sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.581185 env[1575]: time="2025-09-13T03:05:30.581136429Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bdv2h,Uid:fe014c83-bfbb-406d-8207-f066f50c73f7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.581303 kubelet[2517]: E0913 03:05:30.581279 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.581363 kubelet[2517]: E0913 03:05:30.581316 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-bdv2h" Sep 13 03:05:30.581363 kubelet[2517]: E0913 03:05:30.581339 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-bdv2h" Sep 13 03:05:30.581451 kubelet[2517]: E0913 03:05:30.581379 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-bdv2h_kube-system(fe014c83-bfbb-406d-8207-f066f50c73f7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-bdv2h_kube-system(fe014c83-bfbb-406d-8207-f066f50c73f7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-bdv2h" podUID="fe014c83-bfbb-406d-8207-f066f50c73f7" Sep 13 03:05:30.630747 env[1575]: time="2025-09-13T03:05:30.630664060Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f76d8bf97-mcssk,Uid:385b07dd-f30f-4c30-9b84-d07458eebcd2,Namespace:calico-system,Attempt:0,}" Sep 13 03:05:30.720868 env[1575]: time="2025-09-13T03:05:30.720785364Z" level=error msg="Failed to destroy network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.721127 env[1575]: time="2025-09-13T03:05:30.721080420Z" level=error msg="encountered an error cleaning up failed sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.721193 env[1575]: time="2025-09-13T03:05:30.721125026Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f76d8bf97-mcssk,Uid:385b07dd-f30f-4c30-9b84-d07458eebcd2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.721383 kubelet[2517]: E0913 03:05:30.721317 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.721383 kubelet[2517]: E0913 03:05:30.721377 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5f76d8bf97-mcssk" Sep 13 03:05:30.721512 kubelet[2517]: E0913 03:05:30.721399 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5f76d8bf97-mcssk" Sep 13 03:05:30.721512 kubelet[2517]: E0913 03:05:30.721449 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5f76d8bf97-mcssk_calico-system(385b07dd-f30f-4c30-9b84-d07458eebcd2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5f76d8bf97-mcssk_calico-system(385b07dd-f30f-4c30-9b84-d07458eebcd2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5f76d8bf97-mcssk" podUID="385b07dd-f30f-4c30-9b84-d07458eebcd2" Sep 13 03:05:30.725824 env[1575]: time="2025-09-13T03:05:30.725795711Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-4d92j,Uid:440e0220-08e0-41ce-8c9f-c4b5129f05d5,Namespace:calico-apiserver,Attempt:0,}" Sep 13 03:05:30.729571 env[1575]: time="2025-09-13T03:05:30.729468618Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-2896r,Uid:9008353e-2c90-41f7-baad-336c80f2f4a8,Namespace:calico-system,Attempt:0,}" Sep 13 03:05:30.733158 env[1575]: time="2025-09-13T03:05:30.733129043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-s46sh,Uid:bcea16e9-21a3-4755-b83a-ac7b4f597078,Namespace:calico-apiserver,Attempt:0,}" Sep 13 03:05:30.735682 env[1575]: time="2025-09-13T03:05:30.735645596Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-749d6d88b7-7h9k2,Uid:3b74d61d-621f-4d7d-9b6b-243626e50cca,Namespace:calico-system,Attempt:0,}" Sep 13 03:05:30.776361 env[1575]: time="2025-09-13T03:05:30.776312616Z" level=error msg="Failed to destroy network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.776593 env[1575]: time="2025-09-13T03:05:30.776569413Z" level=error msg="encountered an error cleaning up failed sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.776637 env[1575]: time="2025-09-13T03:05:30.776612562Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-2896r,Uid:9008353e-2c90-41f7-baad-336c80f2f4a8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.776749 env[1575]: time="2025-09-13T03:05:30.776725025Z" level=error msg="Failed to destroy network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.776802 kubelet[2517]: E0913 03:05:30.776769 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.776846 kubelet[2517]: E0913 03:05:30.776826 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-2896r" Sep 13 03:05:30.776885 kubelet[2517]: E0913 03:05:30.776844 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-2896r" Sep 13 03:05:30.776919 kubelet[2517]: E0913 03:05:30.776889 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-2896r_calico-system(9008353e-2c90-41f7-baad-336c80f2f4a8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-2896r_calico-system(9008353e-2c90-41f7-baad-336c80f2f4a8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-2896r" podUID="9008353e-2c90-41f7-baad-336c80f2f4a8" Sep 13 03:05:30.776976 env[1575]: time="2025-09-13T03:05:30.776926186Z" level=error msg="encountered an error cleaning up failed sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.776976 env[1575]: time="2025-09-13T03:05:30.776957651Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-4d92j,Uid:440e0220-08e0-41ce-8c9f-c4b5129f05d5,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.777062 kubelet[2517]: E0913 03:05:30.777037 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.777101 kubelet[2517]: E0913 03:05:30.777066 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffc95647b-4d92j" Sep 13 03:05:30.777132 kubelet[2517]: E0913 03:05:30.777084 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffc95647b-4d92j" Sep 13 03:05:30.777159 kubelet[2517]: E0913 03:05:30.777133 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6ffc95647b-4d92j_calico-apiserver(440e0220-08e0-41ce-8c9f-c4b5129f05d5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6ffc95647b-4d92j_calico-apiserver(440e0220-08e0-41ce-8c9f-c4b5129f05d5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffc95647b-4d92j" podUID="440e0220-08e0-41ce-8c9f-c4b5129f05d5" Sep 13 03:05:30.780403 env[1575]: time="2025-09-13T03:05:30.780344242Z" level=error msg="Failed to destroy network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.780597 env[1575]: time="2025-09-13T03:05:30.780546004Z" level=error msg="encountered an error cleaning up failed sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.780597 env[1575]: time="2025-09-13T03:05:30.780584204Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-749d6d88b7-7h9k2,Uid:3b74d61d-621f-4d7d-9b6b-243626e50cca,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.780719 kubelet[2517]: E0913 03:05:30.780695 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.780759 kubelet[2517]: E0913 03:05:30.780733 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-749d6d88b7-7h9k2" Sep 13 03:05:30.780759 kubelet[2517]: E0913 03:05:30.780750 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-749d6d88b7-7h9k2" Sep 13 03:05:30.780814 kubelet[2517]: E0913 03:05:30.780783 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-749d6d88b7-7h9k2_calico-system(3b74d61d-621f-4d7d-9b6b-243626e50cca)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-749d6d88b7-7h9k2_calico-system(3b74d61d-621f-4d7d-9b6b-243626e50cca)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-749d6d88b7-7h9k2" podUID="3b74d61d-621f-4d7d-9b6b-243626e50cca" Sep 13 03:05:30.781856 env[1575]: time="2025-09-13T03:05:30.781829958Z" level=error msg="Failed to destroy network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.782020 env[1575]: time="2025-09-13T03:05:30.782001521Z" level=error msg="encountered an error cleaning up failed sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.782056 env[1575]: time="2025-09-13T03:05:30.782029441Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-s46sh,Uid:bcea16e9-21a3-4755-b83a-ac7b4f597078,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.782134 kubelet[2517]: E0913 03:05:30.782118 2517 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:30.782169 kubelet[2517]: E0913 03:05:30.782145 2517 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffc95647b-s46sh" Sep 13 03:05:30.782169 kubelet[2517]: E0913 03:05:30.782158 2517 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6ffc95647b-s46sh" Sep 13 03:05:30.782217 kubelet[2517]: E0913 03:05:30.782183 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6ffc95647b-s46sh_calico-apiserver(bcea16e9-21a3-4755-b83a-ac7b4f597078)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6ffc95647b-s46sh_calico-apiserver(bcea16e9-21a3-4755-b83a-ac7b4f597078)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffc95647b-s46sh" podUID="bcea16e9-21a3-4755-b83a-ac7b4f597078" Sep 13 03:05:31.149549 kubelet[2517]: I0913 03:05:31.149335 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:05:31.150876 env[1575]: time="2025-09-13T03:05:31.150752835Z" level=info msg="StopPodSandbox for \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\"" Sep 13 03:05:31.156223 kubelet[2517]: I0913 03:05:31.156166 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:05:31.156752 env[1575]: time="2025-09-13T03:05:31.156667927Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 13 03:05:31.157575 env[1575]: time="2025-09-13T03:05:31.157475498Z" level=info msg="StopPodSandbox for \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\"" Sep 13 03:05:31.158971 kubelet[2517]: I0913 03:05:31.158874 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:05:31.160398 env[1575]: time="2025-09-13T03:05:31.160306102Z" level=info msg="StopPodSandbox for \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\"" Sep 13 03:05:31.161419 kubelet[2517]: I0913 03:05:31.161357 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:05:31.163014 env[1575]: time="2025-09-13T03:05:31.162916143Z" level=info msg="StopPodSandbox for \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\"" Sep 13 03:05:31.163994 kubelet[2517]: I0913 03:05:31.163920 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:05:31.165222 env[1575]: time="2025-09-13T03:05:31.165144457Z" level=info msg="StopPodSandbox for \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\"" Sep 13 03:05:31.166654 kubelet[2517]: I0913 03:05:31.166590 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:05:31.168214 env[1575]: time="2025-09-13T03:05:31.168086859Z" level=info msg="StopPodSandbox for \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\"" Sep 13 03:05:31.169688 kubelet[2517]: I0913 03:05:31.169572 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:05:31.171159 env[1575]: time="2025-09-13T03:05:31.171062799Z" level=info msg="StopPodSandbox for \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\"" Sep 13 03:05:31.172242 kubelet[2517]: I0913 03:05:31.172174 2517 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:05:31.173869 env[1575]: time="2025-09-13T03:05:31.173747201Z" level=info msg="StopPodSandbox for \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\"" Sep 13 03:05:31.203422 env[1575]: time="2025-09-13T03:05:31.203353046Z" level=error msg="StopPodSandbox for \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\" failed" error="failed to destroy network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.203651 kubelet[2517]: E0913 03:05:31.203620 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:05:31.203729 kubelet[2517]: E0913 03:05:31.203677 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699"} Sep 13 03:05:31.203762 kubelet[2517]: E0913 03:05:31.203744 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9008353e-2c90-41f7-baad-336c80f2f4a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.203824 kubelet[2517]: E0913 03:05:31.203772 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9008353e-2c90-41f7-baad-336c80f2f4a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-2896r" podUID="9008353e-2c90-41f7-baad-336c80f2f4a8" Sep 13 03:05:31.204091 env[1575]: time="2025-09-13T03:05:31.204056739Z" level=error msg="StopPodSandbox for \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\" failed" error="failed to destroy network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.204233 kubelet[2517]: E0913 03:05:31.204203 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:05:31.204322 kubelet[2517]: E0913 03:05:31.204241 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0"} Sep 13 03:05:31.204322 kubelet[2517]: E0913 03:05:31.204286 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"385b07dd-f30f-4c30-9b84-d07458eebcd2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.204322 kubelet[2517]: E0913 03:05:31.204311 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"385b07dd-f30f-4c30-9b84-d07458eebcd2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5f76d8bf97-mcssk" podUID="385b07dd-f30f-4c30-9b84-d07458eebcd2" Sep 13 03:05:31.205306 env[1575]: time="2025-09-13T03:05:31.205277684Z" level=error msg="StopPodSandbox for \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\" failed" error="failed to destroy network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.205427 kubelet[2517]: E0913 03:05:31.205394 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:05:31.205478 kubelet[2517]: E0913 03:05:31.205429 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f"} Sep 13 03:05:31.205478 kubelet[2517]: E0913 03:05:31.205453 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"440e0220-08e0-41ce-8c9f-c4b5129f05d5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.205478 kubelet[2517]: E0913 03:05:31.205469 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"440e0220-08e0-41ce-8c9f-c4b5129f05d5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffc95647b-4d92j" podUID="440e0220-08e0-41ce-8c9f-c4b5129f05d5" Sep 13 03:05:31.205905 env[1575]: time="2025-09-13T03:05:31.205865472Z" level=error msg="StopPodSandbox for \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\" failed" error="failed to destroy network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.206020 kubelet[2517]: E0913 03:05:31.206000 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:05:31.206066 kubelet[2517]: E0913 03:05:31.206027 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492"} Sep 13 03:05:31.206066 kubelet[2517]: E0913 03:05:31.206052 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3b74d61d-621f-4d7d-9b6b-243626e50cca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.206164 kubelet[2517]: E0913 03:05:31.206070 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3b74d61d-621f-4d7d-9b6b-243626e50cca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-749d6d88b7-7h9k2" podUID="3b74d61d-621f-4d7d-9b6b-243626e50cca" Sep 13 03:05:31.206164 kubelet[2517]: E0913 03:05:31.206144 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:05:31.206164 kubelet[2517]: E0913 03:05:31.206160 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693"} Sep 13 03:05:31.206300 env[1575]: time="2025-09-13T03:05:31.206036062Z" level=error msg="StopPodSandbox for \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\" failed" error="failed to destroy network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.206300 env[1575]: time="2025-09-13T03:05:31.206120902Z" level=error msg="StopPodSandbox for \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\" failed" error="failed to destroy network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.206300 env[1575]: time="2025-09-13T03:05:31.206156338Z" level=error msg="StopPodSandbox for \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\" failed" error="failed to destroy network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.206390 kubelet[2517]: E0913 03:05:31.206177 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"53dcf495-08a8-4cac-abf1-7ac4993f1d7d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.206390 kubelet[2517]: E0913 03:05:31.206194 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"53dcf495-08a8-4cac-abf1-7ac4993f1d7d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-kp2ms" podUID="53dcf495-08a8-4cac-abf1-7ac4993f1d7d" Sep 13 03:05:31.206390 kubelet[2517]: E0913 03:05:31.206203 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:05:31.206390 kubelet[2517]: E0913 03:05:31.206234 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b"} Sep 13 03:05:31.206537 kubelet[2517]: E0913 03:05:31.206247 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:05:31.206537 kubelet[2517]: E0913 03:05:31.206281 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5"} Sep 13 03:05:31.206537 kubelet[2517]: E0913 03:05:31.206302 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"84539b9b-f46c-497d-8000-3665fcd3c774\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.206537 kubelet[2517]: E0913 03:05:31.206321 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"84539b9b-f46c-497d-8000-3665fcd3c774\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-b476g" podUID="84539b9b-f46c-497d-8000-3665fcd3c774" Sep 13 03:05:31.206676 kubelet[2517]: E0913 03:05:31.206254 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bcea16e9-21a3-4755-b83a-ac7b4f597078\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.206676 kubelet[2517]: E0913 03:05:31.206348 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bcea16e9-21a3-4755-b83a-ac7b4f597078\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6ffc95647b-s46sh" podUID="bcea16e9-21a3-4755-b83a-ac7b4f597078" Sep 13 03:05:31.206767 env[1575]: time="2025-09-13T03:05:31.206696736Z" level=error msg="StopPodSandbox for \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\" failed" error="failed to destroy network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 03:05:31.206799 kubelet[2517]: E0913 03:05:31.206779 2517 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:05:31.206799 kubelet[2517]: E0913 03:05:31.206796 2517 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33"} Sep 13 03:05:31.206852 kubelet[2517]: E0913 03:05:31.206817 2517 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fe014c83-bfbb-406d-8207-f066f50c73f7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 03:05:31.206852 kubelet[2517]: E0913 03:05:31.206831 2517 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fe014c83-bfbb-406d-8207-f066f50c73f7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-bdv2h" podUID="fe014c83-bfbb-406d-8207-f066f50c73f7" Sep 13 03:05:33.189772 kubelet[2517]: I0913 03:05:33.189714 2517 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 03:05:33.211000 audit[3960]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=3960 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:33.211000 audit[3960]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffc4eae400 a2=0 a3=7fffc4eae3ec items=0 ppid=2721 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:33.211000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:33.225000 audit[3960]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=3960 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:33.225000 audit[3960]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fffc4eae400 a2=0 a3=7fffc4eae3ec items=0 ppid=2721 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:33.225000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:37.569723 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount983815779.mount: Deactivated successfully. Sep 13 03:05:37.586266 env[1575]: time="2025-09-13T03:05:37.586215163Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:37.586920 env[1575]: time="2025-09-13T03:05:37.586880996Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:37.587446 env[1575]: time="2025-09-13T03:05:37.587404179Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:37.588093 env[1575]: time="2025-09-13T03:05:37.588051580Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:37.588394 env[1575]: time="2025-09-13T03:05:37.588345609Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:ce9c4ac0f175f22c56e80844e65379d9ebe1d8a4e2bbb38dc1db0f53a8826f0f\"" Sep 13 03:05:37.593374 env[1575]: time="2025-09-13T03:05:37.593355625Z" level=info msg="CreateContainer within sandbox \"4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 13 03:05:37.598702 env[1575]: time="2025-09-13T03:05:37.598683245Z" level=info msg="CreateContainer within sandbox \"4b33174b14ea3b285f0aef49404e54aa6008e19d4a94bf12e5e6831c456c1b40\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"320fcc03d938fb8e524b63ca8da00cdd37241e52391597ab63f72eb89dbf9cd3\"" Sep 13 03:05:37.599127 env[1575]: time="2025-09-13T03:05:37.599046205Z" level=info msg="StartContainer for \"320fcc03d938fb8e524b63ca8da00cdd37241e52391597ab63f72eb89dbf9cd3\"" Sep 13 03:05:37.607900 systemd[1]: Started cri-containerd-320fcc03d938fb8e524b63ca8da00cdd37241e52391597ab63f72eb89dbf9cd3.scope. Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.643780 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 13 03:05:37.643848 kernel: audit: type=1400 audit(1757732737.616:1000): avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f23d5a392f8 items=0 ppid=3148 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:37.804799 kernel: audit: type=1300 audit(1757732737.616:1000): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f23d5a392f8 items=0 ppid=3148 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:37.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332306663633033643933386662386535323462363363613864613030 Sep 13 03:05:37.805338 kernel: audit: type=1327 audit(1757732737.616:1000): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332306663633033643933386662386535323462363363613864613030 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.962037 kernel: audit: type=1400 audit(1757732737.616:1001): avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.962066 kernel: audit: type=1400 audit(1757732737.616:1001): avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.962079 kernel: audit: type=1400 audit(1757732737.616:1001): avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.962092 kernel: audit: type=1400 audit(1757732737.616:1001): avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:38.154269 kernel: audit: type=1400 audit(1757732737.616:1001): avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:38.158931 env[1575]: time="2025-09-13T03:05:38.158877327Z" level=info msg="StartContainer for \"320fcc03d938fb8e524b63ca8da00cdd37241e52391597ab63f72eb89dbf9cd3\" returns successfully" Sep 13 03:05:38.193542 kubelet[2517]: I0913 03:05:38.193511 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-c8zpj" podStartSLOduration=1.843879678 podStartE2EDuration="19.193501208s" podCreationTimestamp="2025-09-13 03:05:19 +0000 UTC" firstStartedPulling="2025-09-13 03:05:20.239195478 +0000 UTC m=+16.256308917" lastFinishedPulling="2025-09-13 03:05:37.588817006 +0000 UTC m=+33.605930447" observedRunningTime="2025-09-13 03:05:38.193095272 +0000 UTC m=+34.210208713" watchObservedRunningTime="2025-09-13 03:05:38.193501208 +0000 UTC m=+34.210614646" Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:38.218341 kernel: audit: type=1400 audit(1757732737.616:1001): avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:38.282313 kernel: audit: type=1400 audit(1757732737.616:1001): avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.616000 audit: BPF prog-id=139 op=LOAD Sep 13 03:05:37.616000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000024d78 items=0 ppid=3148 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:37.616000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332306663633033643933386662386535323462363363613864613030 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.707000 audit: BPF prog-id=140 op=LOAD Sep 13 03:05:37.707000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000024dc8 items=0 ppid=3148 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:37.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332306663633033643933386662386535323462363363613864613030 Sep 13 03:05:37.898000 audit: BPF prog-id=140 op=UNLOAD Sep 13 03:05:37.898000 audit: BPF prog-id=139 op=UNLOAD Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:37.898000 audit: BPF prog-id=141 op=LOAD Sep 13 03:05:37.898000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000024e58 items=0 ppid=3148 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:37.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332306663633033643933386662386535323462363363613864613030 Sep 13 03:05:38.432134 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 13 03:05:38.432169 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 13 03:05:38.477439 env[1575]: time="2025-09-13T03:05:38.477405899Z" level=info msg="StopPodSandbox for \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\"" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.502 [INFO][4042] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.502 [INFO][4042] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" iface="eth0" netns="/var/run/netns/cni-a178b10a-53e0-bfc2-1c23-6ea64ae21fed" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.502 [INFO][4042] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" iface="eth0" netns="/var/run/netns/cni-a178b10a-53e0-bfc2-1c23-6ea64ae21fed" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.502 [INFO][4042] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" iface="eth0" netns="/var/run/netns/cni-a178b10a-53e0-bfc2-1c23-6ea64ae21fed" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.502 [INFO][4042] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.502 [INFO][4042] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.512 [INFO][4069] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.512 [INFO][4069] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.512 [INFO][4069] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.516 [WARNING][4069] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.516 [INFO][4069] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.517 [INFO][4069] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:38.519940 env[1575]: 2025-09-13 03:05:38.519 [INFO][4042] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:05:38.520235 env[1575]: time="2025-09-13T03:05:38.520014073Z" level=info msg="TearDown network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\" successfully" Sep 13 03:05:38.520235 env[1575]: time="2025-09-13T03:05:38.520035550Z" level=info msg="StopPodSandbox for \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\" returns successfully" Sep 13 03:05:38.577005 systemd[1]: run-netns-cni\x2da178b10a\x2d53e0\x2dbfc2\x2d1c23\x2d6ea64ae21fed.mount: Deactivated successfully. Sep 13 03:05:38.638510 kubelet[2517]: I0913 03:05:38.638404 2517 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-k2cd9\" (UniqueName: \"kubernetes.io/projected/3b74d61d-621f-4d7d-9b6b-243626e50cca-kube-api-access-k2cd9\") pod \"3b74d61d-621f-4d7d-9b6b-243626e50cca\" (UID: \"3b74d61d-621f-4d7d-9b6b-243626e50cca\") " Sep 13 03:05:38.638510 kubelet[2517]: I0913 03:05:38.638513 2517 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-ca-bundle\") pod \"3b74d61d-621f-4d7d-9b6b-243626e50cca\" (UID: \"3b74d61d-621f-4d7d-9b6b-243626e50cca\") " Sep 13 03:05:38.638848 kubelet[2517]: I0913 03:05:38.638586 2517 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-backend-key-pair\") pod \"3b74d61d-621f-4d7d-9b6b-243626e50cca\" (UID: \"3b74d61d-621f-4d7d-9b6b-243626e50cca\") " Sep 13 03:05:38.639403 kubelet[2517]: I0913 03:05:38.639295 2517 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "3b74d61d-621f-4d7d-9b6b-243626e50cca" (UID: "3b74d61d-621f-4d7d-9b6b-243626e50cca"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 13 03:05:38.644431 kubelet[2517]: I0913 03:05:38.644333 2517 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/3b74d61d-621f-4d7d-9b6b-243626e50cca-kube-api-access-k2cd9" (OuterVolumeSpecName: "kube-api-access-k2cd9") pod "3b74d61d-621f-4d7d-9b6b-243626e50cca" (UID: "3b74d61d-621f-4d7d-9b6b-243626e50cca"). InnerVolumeSpecName "kube-api-access-k2cd9". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 13 03:05:38.644624 kubelet[2517]: I0913 03:05:38.644530 2517 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "3b74d61d-621f-4d7d-9b6b-243626e50cca" (UID: "3b74d61d-621f-4d7d-9b6b-243626e50cca"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 13 03:05:38.649933 systemd[1]: var-lib-kubelet-pods-3b74d61d\x2d621f\x2d4d7d\x2d9b6b\x2d243626e50cca-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dk2cd9.mount: Deactivated successfully. Sep 13 03:05:38.650156 systemd[1]: var-lib-kubelet-pods-3b74d61d\x2d621f\x2d4d7d\x2d9b6b\x2d243626e50cca-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 13 03:05:38.739880 kubelet[2517]: I0913 03:05:38.739648 2517 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-ca-bundle\") on node \"ci-3510.3.8-n-ba666c4ddc\" DevicePath \"\"" Sep 13 03:05:38.739880 kubelet[2517]: I0913 03:05:38.739717 2517 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3b74d61d-621f-4d7d-9b6b-243626e50cca-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-ba666c4ddc\" DevicePath \"\"" Sep 13 03:05:38.739880 kubelet[2517]: I0913 03:05:38.739750 2517 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-k2cd9\" (UniqueName: \"kubernetes.io/projected/3b74d61d-621f-4d7d-9b6b-243626e50cca-kube-api-access-k2cd9\") on node \"ci-3510.3.8-n-ba666c4ddc\" DevicePath \"\"" Sep 13 03:05:39.188890 kubelet[2517]: I0913 03:05:39.188658 2517 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 03:05:39.197082 systemd[1]: Removed slice kubepods-besteffort-pod3b74d61d_621f_4d7d_9b6b_243626e50cca.slice. Sep 13 03:05:39.268292 systemd[1]: Created slice kubepods-besteffort-pod6e4923b6_2613_4742_a305_bad1757a5db3.slice. Sep 13 03:05:39.343852 kubelet[2517]: I0913 03:05:39.343763 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6e4923b6-2613-4742-a305-bad1757a5db3-whisker-ca-bundle\") pod \"whisker-5888889c9d-x992d\" (UID: \"6e4923b6-2613-4742-a305-bad1757a5db3\") " pod="calico-system/whisker-5888889c9d-x992d" Sep 13 03:05:39.344656 kubelet[2517]: I0913 03:05:39.343863 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-44h8d\" (UniqueName: \"kubernetes.io/projected/6e4923b6-2613-4742-a305-bad1757a5db3-kube-api-access-44h8d\") pod \"whisker-5888889c9d-x992d\" (UID: \"6e4923b6-2613-4742-a305-bad1757a5db3\") " pod="calico-system/whisker-5888889c9d-x992d" Sep 13 03:05:39.344656 kubelet[2517]: I0913 03:05:39.344018 2517 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6e4923b6-2613-4742-a305-bad1757a5db3-whisker-backend-key-pair\") pod \"whisker-5888889c9d-x992d\" (UID: \"6e4923b6-2613-4742-a305-bad1757a5db3\") " pod="calico-system/whisker-5888889c9d-x992d" Sep 13 03:05:39.577112 env[1575]: time="2025-09-13T03:05:39.576987361Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5888889c9d-x992d,Uid:6e4923b6-2613-4742-a305-bad1757a5db3,Namespace:calico-system,Attempt:0,}" Sep 13 03:05:39.629000 audit[4154]: AVC avc: denied { write } for pid=4154 comm="tee" name="fd" dev="proc" ino=32287 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 03:05:39.629000 audit[4154]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe071ec7d0 a2=241 a3=1b6 items=1 ppid=4123 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.629000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 13 03:05:39.629000 audit: PATH item=0 name="/dev/fd/63" inode=38994 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:05:39.629000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 03:05:39.629000 audit[4157]: AVC avc: denied { write } for pid=4157 comm="tee" name="fd" dev="proc" ino=38997 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 03:05:39.629000 audit[4157]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcefcd87cf a2=241 a3=1b6 items=1 ppid=4124 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.629000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 13 03:05:39.629000 audit: PATH item=0 name="/dev/fd/63" inode=35175 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:05:39.629000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 03:05:39.631000 audit[4162]: AVC avc: denied { write } for pid=4162 comm="tee" name="fd" dev="proc" ino=36088 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 03:05:39.631000 audit[4162]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffec76c57d1 a2=241 a3=1b6 items=1 ppid=4128 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.631000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 13 03:05:39.631000 audit: PATH item=0 name="/dev/fd/63" inode=36085 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:05:39.631000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 03:05:39.631000 audit[4160]: AVC avc: denied { write } for pid=4160 comm="tee" name="fd" dev="proc" ino=29653 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 03:05:39.632000 audit[4175]: AVC avc: denied { write } for pid=4175 comm="tee" name="fd" dev="proc" ino=23251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 03:05:39.632000 audit[4175]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdc5f8d7cf a2=241 a3=1b6 items=1 ppid=4127 pid=4175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.632000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 13 03:05:39.632000 audit: PATH item=0 name="/dev/fd/63" inode=29650 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:05:39.632000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 03:05:39.631000 audit[4160]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff030827c0 a2=241 a3=1b6 items=1 ppid=4125 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.631000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 13 03:05:39.631000 audit: PATH item=0 name="/dev/fd/63" inode=31706 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:05:39.631000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 03:05:39.633000 audit[4198]: AVC avc: denied { write } for pid=4198 comm="tee" name="fd" dev="proc" ino=33403 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 03:05:39.633000 audit[4198]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffced8037bf a2=241 a3=1b6 items=1 ppid=4132 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.633000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 13 03:05:39.633000 audit: PATH item=0 name="/dev/fd/63" inode=30603 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:05:39.633000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 03:05:39.634000 audit[4204]: AVC avc: denied { write } for pid=4204 comm="tee" name="fd" dev="proc" ino=35180 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 03:05:39.634000 audit[4204]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd6a2887cf a2=241 a3=1b6 items=1 ppid=4135 pid=4204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.634000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 13 03:05:39.634000 audit: PATH item=0 name="/dev/fd/63" inode=24467 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 03:05:39.634000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit: BPF prog-id=142 op=LOAD Sep 13 03:05:39.691000 audit[4279]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc3745ea80 a2=98 a3=1fffffffffffffff items=0 ppid=4138 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.691000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 03:05:39.691000 audit: BPF prog-id=142 op=UNLOAD Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit: BPF prog-id=143 op=LOAD Sep 13 03:05:39.691000 audit[4279]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc3745e960 a2=94 a3=3 items=0 ppid=4138 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.691000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 03:05:39.691000 audit: BPF prog-id=143 op=UNLOAD Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { bpf } for pid=4279 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit: BPF prog-id=144 op=LOAD Sep 13 03:05:39.691000 audit[4279]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc3745e9a0 a2=94 a3=7ffc3745eb80 items=0 ppid=4138 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.691000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 03:05:39.691000 audit: BPF prog-id=144 op=UNLOAD Sep 13 03:05:39.691000 audit[4279]: AVC avc: denied { perfmon } for pid=4279 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4279]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffc3745ea70 a2=50 a3=a000000085 items=0 ppid=4138 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.691000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691957 systemd-networkd[1307]: cali97e924ea61e: Link UP Sep 13 03:05:39.691000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.691000 audit: BPF prog-id=145 op=LOAD Sep 13 03:05:39.691000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc95d27870 a2=98 a3=3 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.691000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.719000 audit: BPF prog-id=145 op=UNLOAD Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.748227 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 03:05:39.748266 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali97e924ea61e: link becomes ready Sep 13 03:05:39.719000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.719000 audit: BPF prog-id=146 op=LOAD Sep 13 03:05:39.719000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc95d27660 a2=94 a3=54428f items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.719000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.747000 audit: BPF prog-id=146 op=UNLOAD Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.747000 audit: BPF prog-id=147 op=LOAD Sep 13 03:05:39.747000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc95d27690 a2=94 a3=2 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.748000 audit: BPF prog-id=147 op=UNLOAD Sep 13 03:05:39.748288 systemd-networkd[1307]: cali97e924ea61e: Gained carrier Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.635 [INFO][4100] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.646 [INFO][4100] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0 whisker-5888889c9d- calico-system 6e4923b6-2613-4742-a305-bad1757a5db3 923 0 2025-09-13 03:05:39 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5888889c9d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc whisker-5888889c9d-x992d eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali97e924ea61e [] [] }} ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.647 [INFO][4100] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.665 [INFO][4227] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" HandleID="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.666 [INFO][4227] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" HandleID="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004faf0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"whisker-5888889c9d-x992d", "timestamp":"2025-09-13 03:05:39.665858706 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.666 [INFO][4227] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.666 [INFO][4227] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.666 [INFO][4227] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.671 [INFO][4227] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.674 [INFO][4227] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.676 [INFO][4227] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.678 [INFO][4227] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.679 [INFO][4227] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.679 [INFO][4227] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.680 [INFO][4227] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7 Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.683 [INFO][4227] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.686 [INFO][4227] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.129/26] block=192.168.40.128/26 handle="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.686 [INFO][4227] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.129/26] handle="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.686 [INFO][4227] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:39.754219 env[1575]: 2025-09-13 03:05:39.686 [INFO][4227] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.129/26] IPv6=[] ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" HandleID="k8s-pod-network.5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" Sep 13 03:05:39.754657 env[1575]: 2025-09-13 03:05:39.687 [INFO][4100] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0", GenerateName:"whisker-5888889c9d-", Namespace:"calico-system", SelfLink:"", UID:"6e4923b6-2613-4742-a305-bad1757a5db3", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5888889c9d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"whisker-5888889c9d-x992d", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.40.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali97e924ea61e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:39.754657 env[1575]: 2025-09-13 03:05:39.687 [INFO][4100] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.129/32] ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" Sep 13 03:05:39.754657 env[1575]: 2025-09-13 03:05:39.687 [INFO][4100] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali97e924ea61e ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" Sep 13 03:05:39.754657 env[1575]: 2025-09-13 03:05:39.748 [INFO][4100] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" Sep 13 03:05:39.754657 env[1575]: 2025-09-13 03:05:39.748 [INFO][4100] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0", GenerateName:"whisker-5888889c9d-", Namespace:"calico-system", SelfLink:"", UID:"6e4923b6-2613-4742-a305-bad1757a5db3", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5888889c9d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7", Pod:"whisker-5888889c9d-x992d", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.40.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali97e924ea61e", MAC:"4a:26:5e:fd:38:e5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:39.754657 env[1575]: 2025-09-13 03:05:39.753 [INFO][4100] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7" Namespace="calico-system" Pod="whisker-5888889c9d-x992d" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--5888889c9d--x992d-eth0" Sep 13 03:05:39.768634 env[1575]: time="2025-09-13T03:05:39.768600129Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:39.768634 env[1575]: time="2025-09-13T03:05:39.768621200Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:39.768634 env[1575]: time="2025-09-13T03:05:39.768627991Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:39.768725 env[1575]: time="2025-09-13T03:05:39.768692643Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7 pid=4294 runtime=io.containerd.runc.v2 Sep 13 03:05:39.775725 systemd[1]: Started cri-containerd-5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7.scope. Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit: BPF prog-id=148 op=LOAD Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4294 pid=4304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653534623035356465366332346230373162396461643636653462 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4294 pid=4304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653534623035356465366332346230373162396461643636653462 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit: BPF prog-id=149 op=LOAD Sep 13 03:05:39.780000 audit[4304]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003e43c0 items=0 ppid=4294 pid=4304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653534623035356465366332346230373162396461643636653462 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit: BPF prog-id=150 op=LOAD Sep 13 03:05:39.780000 audit[4304]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003e4408 items=0 ppid=4294 pid=4304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653534623035356465366332346230373162396461643636653462 Sep 13 03:05:39.780000 audit: BPF prog-id=150 op=UNLOAD Sep 13 03:05:39.780000 audit: BPF prog-id=149 op=UNLOAD Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { perfmon } for pid=4304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit[4304]: AVC avc: denied { bpf } for pid=4304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.780000 audit: BPF prog-id=151 op=LOAD Sep 13 03:05:39.780000 audit[4304]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003e4818 items=0 ppid=4294 pid=4304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653534623035356465366332346230373162396461643636653462 Sep 13 03:05:39.796293 env[1575]: time="2025-09-13T03:05:39.796252789Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5888889c9d-x992d,Uid:6e4923b6-2613-4742-a305-bad1757a5db3,Namespace:calico-system,Attempt:0,} returns sandbox id \"5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7\"" Sep 13 03:05:39.796946 env[1575]: time="2025-09-13T03:05:39.796935225Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit: BPF prog-id=152 op=LOAD Sep 13 03:05:39.834000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc95d27550 a2=94 a3=1 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.834000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.834000 audit: BPF prog-id=152 op=UNLOAD Sep 13 03:05:39.834000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.834000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc95d27620 a2=50 a3=7ffc95d27700 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.834000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc95d27560 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc95d27590 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc95d274a0 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc95d275b0 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc95d27590 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc95d27580 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc95d275b0 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc95d27590 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc95d275b0 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc95d27580 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc95d275f0 a2=28 a3=0 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc95d273a0 a2=50 a3=1 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit: BPF prog-id=153 op=LOAD Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc95d273a0 a2=94 a3=5 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit: BPF prog-id=153 op=UNLOAD Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc95d27450 a2=50 a3=1 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc95d27570 a2=4 a3=38 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.841000 audit[4281]: AVC avc: denied { confidentiality } for pid=4281 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 03:05:39.841000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc95d275c0 a2=94 a3=6 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.841000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { confidentiality } for pid=4281 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 03:05:39.842000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc95d26d70 a2=94 a3=88 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.842000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { perfmon } for pid=4281 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { bpf } for pid=4281 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.842000 audit[4281]: AVC avc: denied { confidentiality } for pid=4281 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 03:05:39.842000 audit[4281]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc95d26d70 a2=94 a3=88 items=0 ppid=4138 pid=4281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.842000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit: BPF prog-id=154 op=LOAD Sep 13 03:05:39.846000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff9c5ab6e0 a2=98 a3=1999999999999999 items=0 ppid=4138 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.846000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 03:05:39.846000 audit: BPF prog-id=154 op=UNLOAD Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit: BPF prog-id=155 op=LOAD Sep 13 03:05:39.846000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff9c5ab5c0 a2=94 a3=ffff items=0 ppid=4138 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.846000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 03:05:39.846000 audit: BPF prog-id=155 op=UNLOAD Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.846000 audit: BPF prog-id=156 op=LOAD Sep 13 03:05:39.846000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff9c5ab600 a2=94 a3=7fff9c5ab7e0 items=0 ppid=4138 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.846000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 03:05:39.846000 audit: BPF prog-id=156 op=UNLOAD Sep 13 03:05:39.873996 systemd-networkd[1307]: vxlan.calico: Link UP Sep 13 03:05:39.874001 systemd-networkd[1307]: vxlan.calico: Gained carrier Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit: BPF prog-id=157 op=LOAD Sep 13 03:05:39.881000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc052ebe20 a2=98 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.881000 audit: BPF prog-id=157 op=UNLOAD Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.881000 audit: BPF prog-id=158 op=LOAD Sep 13 03:05:39.881000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc052ebc30 a2=94 a3=54428f items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit: BPF prog-id=158 op=UNLOAD Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit: BPF prog-id=159 op=LOAD Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc052ebc60 a2=94 a3=2 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit: BPF prog-id=159 op=UNLOAD Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc052ebb30 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc052ebb60 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc052eba70 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc052ebb80 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc052ebb60 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc052ebb50 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc052ebb80 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc052ebb60 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc052ebb80 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc052ebb50 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc052ebbc0 a2=28 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit: BPF prog-id=160 op=LOAD Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc052eba30 a2=94 a3=0 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit: BPF prog-id=160 op=UNLOAD Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc052eba20 a2=50 a3=2800 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc052eba20 a2=50 a3=2800 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit: BPF prog-id=161 op=LOAD Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc052eb240 a2=94 a3=2 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.882000 audit: BPF prog-id=161 op=UNLOAD Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { perfmon } for pid=4362 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit[4362]: AVC avc: denied { bpf } for pid=4362 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.882000 audit: BPF prog-id=162 op=LOAD Sep 13 03:05:39.882000 audit[4362]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc052eb340 a2=94 a3=30 items=0 ppid=4138 pid=4362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.882000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit: BPF prog-id=163 op=LOAD Sep 13 03:05:39.883000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd6ce15470 a2=98 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.883000 audit: BPF prog-id=163 op=UNLOAD Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit: BPF prog-id=164 op=LOAD Sep 13 03:05:39.883000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd6ce15260 a2=94 a3=54428f items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.883000 audit: BPF prog-id=164 op=UNLOAD Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.883000 audit: BPF prog-id=165 op=LOAD Sep 13 03:05:39.883000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd6ce15290 a2=94 a3=2 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.883000 audit: BPF prog-id=165 op=UNLOAD Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit: BPF prog-id=166 op=LOAD Sep 13 03:05:39.970000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd6ce15150 a2=94 a3=1 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.970000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.970000 audit: BPF prog-id=166 op=UNLOAD Sep 13 03:05:39.970000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.970000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd6ce15220 a2=50 a3=7ffd6ce15300 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.970000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd6ce15160 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6ce15190 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6ce150a0 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd6ce151b0 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd6ce15190 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd6ce15180 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd6ce151b0 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6ce15190 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6ce151b0 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6ce15180 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd6ce151f0 a2=28 a3=0 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd6ce14fa0 a2=50 a3=1 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit: BPF prog-id=167 op=LOAD Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd6ce14fa0 a2=94 a3=5 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit: BPF prog-id=167 op=UNLOAD Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd6ce15050 a2=50 a3=1 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd6ce15170 a2=4 a3=38 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { confidentiality } for pid=4366 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd6ce151c0 a2=94 a3=6 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.977000 audit[4366]: AVC avc: denied { confidentiality } for pid=4366 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 03:05:39.977000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd6ce14970 a2=94 a3=88 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { confidentiality } for pid=4366 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 03:05:39.978000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd6ce14970 a2=94 a3=88 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd6ce163a0 a2=10 a3=f8f00800 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd6ce16240 a2=10 a3=3 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd6ce161e0 a2=10 a3=3 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.978000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:39.978000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd6ce161e0 a2=10 a3=7 items=0 ppid=4138 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 03:05:39.994000 audit: BPF prog-id=162 op=UNLOAD Sep 13 03:05:40.027000 audit[4427]: NETFILTER_CFG table=mangle:99 family=2 entries=16 op=nft_register_chain pid=4427 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:40.027000 audit[4427]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff26a53010 a2=0 a3=7fff26a52ffc items=0 ppid=4138 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:40.027000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:40.030000 audit[4423]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=4423 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:40.030000 audit[4423]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffefb777200 a2=0 a3=7ffefb7771ec items=0 ppid=4138 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:40.030000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:40.033000 audit[4422]: NETFILTER_CFG table=raw:101 family=2 entries=21 op=nft_register_chain pid=4422 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:40.033000 audit[4422]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffd9d951180 a2=0 a3=7ffd9d95116c items=0 ppid=4138 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:40.033000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:40.033000 audit[4426]: NETFILTER_CFG table=filter:102 family=2 entries=94 op=nft_register_chain pid=4426 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:40.033000 audit[4426]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffef6d6e1f0 a2=0 a3=7ffef6d6e1dc items=0 ppid=4138 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:40.033000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:40.075439 kubelet[2517]: I0913 03:05:40.075417 2517 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="3b74d61d-621f-4d7d-9b6b-243626e50cca" path="/var/lib/kubelet/pods/3b74d61d-621f-4d7d-9b6b-243626e50cca/volumes" Sep 13 03:05:41.017597 systemd-networkd[1307]: cali97e924ea61e: Gained IPv6LL Sep 13 03:05:41.396532 env[1575]: time="2025-09-13T03:05:41.396475201Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:41.397122 env[1575]: time="2025-09-13T03:05:41.397108602Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:41.397811 env[1575]: time="2025-09-13T03:05:41.397797931Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:41.398534 env[1575]: time="2025-09-13T03:05:41.398521425Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:41.398860 env[1575]: time="2025-09-13T03:05:41.398817263Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:9a4eedeed4a531acefb7f5d0a1b7e3856b1a9a24d9e7d25deef2134d7a734c2d\"" Sep 13 03:05:41.400749 env[1575]: time="2025-09-13T03:05:41.400709608Z" level=info msg="CreateContainer within sandbox \"5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 13 03:05:41.404939 env[1575]: time="2025-09-13T03:05:41.404895686Z" level=info msg="CreateContainer within sandbox \"5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"3fcb9bdb0a17b888cfd653f727d62b35a0c8be972e84740607133afab6067c3e\"" Sep 13 03:05:41.405158 env[1575]: time="2025-09-13T03:05:41.405147368Z" level=info msg="StartContainer for \"3fcb9bdb0a17b888cfd653f727d62b35a0c8be972e84740607133afab6067c3e\"" Sep 13 03:05:41.417205 systemd[1]: Started cri-containerd-3fcb9bdb0a17b888cfd653f727d62b35a0c8be972e84740607133afab6067c3e.scope. Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit: BPF prog-id=168 op=LOAD Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4294 pid=4446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:41.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636239626462306131376238383863666436353366373237643632 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4294 pid=4446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:41.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636239626462306131376238383863666436353366373237643632 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit: BPF prog-id=169 op=LOAD Sep 13 03:05:41.422000 audit[4446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002f66e0 items=0 ppid=4294 pid=4446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:41.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636239626462306131376238383863666436353366373237643632 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit: BPF prog-id=170 op=LOAD Sep 13 03:05:41.422000 audit[4446]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002f6728 items=0 ppid=4294 pid=4446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:41.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636239626462306131376238383863666436353366373237643632 Sep 13 03:05:41.422000 audit: BPF prog-id=170 op=UNLOAD Sep 13 03:05:41.422000 audit: BPF prog-id=169 op=UNLOAD Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { perfmon } for pid=4446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit[4446]: AVC avc: denied { bpf } for pid=4446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:41.422000 audit: BPF prog-id=171 op=LOAD Sep 13 03:05:41.422000 audit[4446]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002f6b38 items=0 ppid=4294 pid=4446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:41.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366636239626462306131376238383863666436353366373237643632 Sep 13 03:05:41.438804 env[1575]: time="2025-09-13T03:05:41.438782524Z" level=info msg="StartContainer for \"3fcb9bdb0a17b888cfd653f727d62b35a0c8be972e84740607133afab6067c3e\" returns successfully" Sep 13 03:05:41.439363 env[1575]: time="2025-09-13T03:05:41.439349239Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 13 03:05:41.442000 audit[4457]: AVC avc: denied { search } for pid=4457 comm="nginx" name="crypto" dev="proc" ino=40129 scontext=system_u:system_r:svirt_lxc_net_t:s0:c48,c796 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 13 03:05:41.442000 audit[4457]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb6a0978728 a2=0 a3=0 items=0 ppid=4294 pid=4457 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c48,c796 key=(null) Sep 13 03:05:41.442000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 13 03:05:41.657527 systemd-networkd[1307]: vxlan.calico: Gained IPv6LL Sep 13 03:05:43.073895 env[1575]: time="2025-09-13T03:05:43.073859294Z" level=info msg="StopPodSandbox for \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\"" Sep 13 03:05:43.073895 env[1575]: time="2025-09-13T03:05:43.073859988Z" level=info msg="StopPodSandbox for \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\"" Sep 13 03:05:43.074287 env[1575]: time="2025-09-13T03:05:43.073859326Z" level=info msg="StopPodSandbox for \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\"" Sep 13 03:05:43.074287 env[1575]: time="2025-09-13T03:05:43.073966104Z" level=info msg="StopPodSandbox for \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\"" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.099 [INFO][4537] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.099 [INFO][4537] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" iface="eth0" netns="/var/run/netns/cni-6c4c2f5c-9261-9c8b-ddda-3f3567482001" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.099 [INFO][4537] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" iface="eth0" netns="/var/run/netns/cni-6c4c2f5c-9261-9c8b-ddda-3f3567482001" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.099 [INFO][4537] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" iface="eth0" netns="/var/run/netns/cni-6c4c2f5c-9261-9c8b-ddda-3f3567482001" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.099 [INFO][4537] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.099 [INFO][4537] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.110 [INFO][4598] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.110 [INFO][4598] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.110 [INFO][4598] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.114 [WARNING][4598] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.114 [INFO][4598] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.115 [INFO][4598] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.116658 env[1575]: 2025-09-13 03:05:43.115 [INFO][4537] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:05:43.116984 env[1575]: time="2025-09-13T03:05:43.116724902Z" level=info msg="TearDown network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\" successfully" Sep 13 03:05:43.116984 env[1575]: time="2025-09-13T03:05:43.116748961Z" level=info msg="StopPodSandbox for \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\" returns successfully" Sep 13 03:05:43.117794 env[1575]: time="2025-09-13T03:05:43.117748047Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-2896r,Uid:9008353e-2c90-41f7-baad-336c80f2f4a8,Namespace:calico-system,Attempt:1,}" Sep 13 03:05:43.118298 systemd[1]: run-netns-cni\x2d6c4c2f5c\x2d9261\x2d9c8b\x2dddda\x2d3f3567482001.mount: Deactivated successfully. Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.100 [INFO][4538] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.100 [INFO][4538] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" iface="eth0" netns="/var/run/netns/cni-8b5dea24-d09f-a850-6f21-0d3db2f28ae0" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.100 [INFO][4538] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" iface="eth0" netns="/var/run/netns/cni-8b5dea24-d09f-a850-6f21-0d3db2f28ae0" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.100 [INFO][4538] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" iface="eth0" netns="/var/run/netns/cni-8b5dea24-d09f-a850-6f21-0d3db2f28ae0" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.100 [INFO][4538] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.100 [INFO][4538] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.110 [INFO][4600] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.110 [INFO][4600] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.115 [INFO][4600] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.118 [WARNING][4600] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.119 [INFO][4600] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.120 [INFO][4600] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.121463 env[1575]: 2025-09-13 03:05:43.120 [INFO][4538] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:05:43.121734 env[1575]: time="2025-09-13T03:05:43.121527102Z" level=info msg="TearDown network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\" successfully" Sep 13 03:05:43.121734 env[1575]: time="2025-09-13T03:05:43.121549610Z" level=info msg="StopPodSandbox for \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\" returns successfully" Sep 13 03:05:43.121939 env[1575]: time="2025-09-13T03:05:43.121899697Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-s46sh,Uid:bcea16e9-21a3-4755-b83a-ac7b4f597078,Namespace:calico-apiserver,Attempt:1,}" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.100 [INFO][4536] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.100 [INFO][4536] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" iface="eth0" netns="/var/run/netns/cni-41186a35-f6ac-c48d-5dd5-7b970c9551be" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.100 [INFO][4536] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" iface="eth0" netns="/var/run/netns/cni-41186a35-f6ac-c48d-5dd5-7b970c9551be" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.100 [INFO][4536] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" iface="eth0" netns="/var/run/netns/cni-41186a35-f6ac-c48d-5dd5-7b970c9551be" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.100 [INFO][4536] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.100 [INFO][4536] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.110 [INFO][4606] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.110 [INFO][4606] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.120 [INFO][4606] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.124 [WARNING][4606] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.124 [INFO][4606] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.125 [INFO][4606] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.126989 env[1575]: 2025-09-13 03:05:43.126 [INFO][4536] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:05:43.127367 env[1575]: time="2025-09-13T03:05:43.127072182Z" level=info msg="TearDown network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\" successfully" Sep 13 03:05:43.127367 env[1575]: time="2025-09-13T03:05:43.127099737Z" level=info msg="StopPodSandbox for \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\" returns successfully" Sep 13 03:05:43.127087 systemd[1]: run-netns-cni\x2d8b5dea24\x2dd09f\x2da850\x2d6f21\x2d0d3db2f28ae0.mount: Deactivated successfully. Sep 13 03:05:43.127586 env[1575]: time="2025-09-13T03:05:43.127569493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-4d92j,Uid:440e0220-08e0-41ce-8c9f-c4b5129f05d5,Namespace:calico-apiserver,Attempt:1,}" Sep 13 03:05:43.131571 systemd[1]: run-netns-cni\x2d41186a35\x2df6ac\x2dc48d\x2d5dd5\x2d7b970c9551be.mount: Deactivated successfully. Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.106 [INFO][4535] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.106 [INFO][4535] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" iface="eth0" netns="/var/run/netns/cni-6a992a36-9304-b252-d20c-eb15403e6e26" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.106 [INFO][4535] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" iface="eth0" netns="/var/run/netns/cni-6a992a36-9304-b252-d20c-eb15403e6e26" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.106 [INFO][4535] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" iface="eth0" netns="/var/run/netns/cni-6a992a36-9304-b252-d20c-eb15403e6e26" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.106 [INFO][4535] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.106 [INFO][4535] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.117 [INFO][4623] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.117 [INFO][4623] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.125 [INFO][4623] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.129 [WARNING][4623] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.129 [INFO][4623] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.131 [INFO][4623] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.136132 env[1575]: 2025-09-13 03:05:43.131 [INFO][4535] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:05:43.136485 env[1575]: time="2025-09-13T03:05:43.136207998Z" level=info msg="TearDown network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\" successfully" Sep 13 03:05:43.136485 env[1575]: time="2025-09-13T03:05:43.136227942Z" level=info msg="StopPodSandbox for \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\" returns successfully" Sep 13 03:05:43.136657 env[1575]: time="2025-09-13T03:05:43.136640198Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kp2ms,Uid:53dcf495-08a8-4cac-abf1-7ac4993f1d7d,Namespace:kube-system,Attempt:1,}" Sep 13 03:05:43.177699 systemd-networkd[1307]: calie7538e48334: Link UP Sep 13 03:05:43.232845 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 03:05:43.232912 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie7538e48334: link becomes ready Sep 13 03:05:43.232941 systemd-networkd[1307]: calie7538e48334: Gained carrier Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.141 [INFO][4657] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0 goldmane-54d579b49d- calico-system 9008353e-2c90-41f7-baad-336c80f2f4a8 944 0 2025-09-13 03:05:19 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc goldmane-54d579b49d-2896r eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calie7538e48334 [] [] }} ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.141 [INFO][4657] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.155 [INFO][4738] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" HandleID="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.156 [INFO][4738] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" HandleID="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000710c20), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"goldmane-54d579b49d-2896r", "timestamp":"2025-09-13 03:05:43.155911314 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.156 [INFO][4738] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.156 [INFO][4738] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.156 [INFO][4738] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.160 [INFO][4738] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.163 [INFO][4738] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.166 [INFO][4738] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.167 [INFO][4738] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.168 [INFO][4738] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.168 [INFO][4738] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.169 [INFO][4738] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5 Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.171 [INFO][4738] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.175 [INFO][4738] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.130/26] block=192.168.40.128/26 handle="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.175 [INFO][4738] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.130/26] handle="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.175 [INFO][4738] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.239774 env[1575]: 2025-09-13 03:05:43.175 [INFO][4738] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.130/26] IPv6=[] ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" HandleID="k8s-pod-network.54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.240454 env[1575]: 2025-09-13 03:05:43.176 [INFO][4657] cni-plugin/k8s.go 418: Populated endpoint ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"9008353e-2c90-41f7-baad-336c80f2f4a8", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"goldmane-54d579b49d-2896r", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.40.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie7538e48334", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.240454 env[1575]: 2025-09-13 03:05:43.176 [INFO][4657] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.130/32] ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.240454 env[1575]: 2025-09-13 03:05:43.176 [INFO][4657] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie7538e48334 ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.240454 env[1575]: 2025-09-13 03:05:43.233 [INFO][4657] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.240454 env[1575]: 2025-09-13 03:05:43.233 [INFO][4657] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"9008353e-2c90-41f7-baad-336c80f2f4a8", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5", Pod:"goldmane-54d579b49d-2896r", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.40.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie7538e48334", MAC:"d2:7d:3a:c4:b2:78", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.240454 env[1575]: 2025-09-13 03:05:43.238 [INFO][4657] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5" Namespace="calico-system" Pod="goldmane-54d579b49d-2896r" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:05:43.244328 env[1575]: time="2025-09-13T03:05:43.244269834Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:43.244328 env[1575]: time="2025-09-13T03:05:43.244290825Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:43.244328 env[1575]: time="2025-09-13T03:05:43.244297680Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:43.244439 env[1575]: time="2025-09-13T03:05:43.244397467Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5 pid=4817 runtime=io.containerd.runc.v2 Sep 13 03:05:43.246000 audit[4828]: NETFILTER_CFG table=filter:103 family=2 entries=44 op=nft_register_chain pid=4828 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:43.250018 systemd[1]: Started cri-containerd-54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5.scope. Sep 13 03:05:43.272427 kernel: kauditd_printk_skb: 707 callbacks suppressed Sep 13 03:05:43.272516 kernel: audit: type=1325 audit(1757732743.246:1152): table=filter:103 family=2 entries=44 op=nft_register_chain pid=4828 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:43.277421 systemd-networkd[1307]: cali1a31ff9146f: Link UP Sep 13 03:05:43.246000 audit[4828]: SYSCALL arch=c000003e syscall=46 success=yes exit=25180 a0=3 a1=7ffe0d6e9e50 a2=0 a3=7ffe0d6e9e3c items=0 ppid=4138 pid=4828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.330270 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1a31ff9146f: link becomes ready Sep 13 03:05:43.330310 kernel: audit: type=1300 audit(1757732743.246:1152): arch=c000003e syscall=46 success=yes exit=25180 a0=3 a1=7ffe0d6e9e50 a2=0 a3=7ffe0d6e9e3c items=0 ppid=4138 pid=4828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.357249 systemd-networkd[1307]: cali1a31ff9146f: Gained carrier Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.143 [INFO][4668] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0 calico-apiserver-6ffc95647b- calico-apiserver bcea16e9-21a3-4755-b83a-ac7b4f597078 945 0 2025-09-13 03:05:17 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6ffc95647b projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc calico-apiserver-6ffc95647b-s46sh eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1a31ff9146f [] [] }} ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.143 [INFO][4668] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.157 [INFO][4749] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" HandleID="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.157 [INFO][4749] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" HandleID="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a5a70), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"calico-apiserver-6ffc95647b-s46sh", "timestamp":"2025-09-13 03:05:43.157108886 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.157 [INFO][4749] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.175 [INFO][4749] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.175 [INFO][4749] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.260 [INFO][4749] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.263 [INFO][4749] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.266 [INFO][4749] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.267 [INFO][4749] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.269 [INFO][4749] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.269 [INFO][4749] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.270 [INFO][4749] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99 Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.272 [INFO][4749] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.275 [INFO][4749] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.131/26] block=192.168.40.128/26 handle="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.275 [INFO][4749] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.131/26] handle="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.275 [INFO][4749] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.378434 env[1575]: 2025-09-13 03:05:43.275 [INFO][4749] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.131/26] IPv6=[] ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" HandleID="k8s-pod-network.21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.378982 env[1575]: 2025-09-13 03:05:43.276 [INFO][4668] cni-plugin/k8s.go 418: Populated endpoint ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"bcea16e9-21a3-4755-b83a-ac7b4f597078", ResourceVersion:"945", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"calico-apiserver-6ffc95647b-s46sh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a31ff9146f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.378982 env[1575]: 2025-09-13 03:05:43.276 [INFO][4668] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.131/32] ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.378982 env[1575]: 2025-09-13 03:05:43.276 [INFO][4668] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1a31ff9146f ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.378982 env[1575]: 2025-09-13 03:05:43.357 [INFO][4668] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.378982 env[1575]: 2025-09-13 03:05:43.357 [INFO][4668] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"bcea16e9-21a3-4755-b83a-ac7b4f597078", ResourceVersion:"945", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99", Pod:"calico-apiserver-6ffc95647b-s46sh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a31ff9146f", MAC:"ba:7d:55:15:23:56", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.378982 env[1575]: 2025-09-13 03:05:43.377 [INFO][4668] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-s46sh" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:05:43.383511 env[1575]: time="2025-09-13T03:05:43.383471977Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:43.383511 env[1575]: time="2025-09-13T03:05:43.383494175Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:43.383511 env[1575]: time="2025-09-13T03:05:43.383503320Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:43.383627 env[1575]: time="2025-09-13T03:05:43.383563010Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99 pid=4867 runtime=io.containerd.runc.v2 Sep 13 03:05:43.246000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:43.451270 kernel: audit: type=1327 audit(1757732743.246:1152): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.511555 systemd[1]: Started cri-containerd-21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99.scope. Sep 13 03:05:43.571229 kernel: audit: type=1400 audit(1757732743.336:1153): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.571303 kernel: audit: type=1400 audit(1757732743.336:1154): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632260 kernel: audit: type=1400 audit(1757732743.336:1155): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.644379 systemd-networkd[1307]: calif915a5d4ac9: Link UP Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.694273 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif915a5d4ac9: link becomes ready Sep 13 03:05:43.694313 kernel: audit: type=1400 audit(1757732743.336:1156): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.694333 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 03:05:43.694346 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 03:05:43.694357 kernel: audit: backlog limit exceeded Sep 13 03:05:43.721073 systemd-networkd[1307]: calif915a5d4ac9: Gained carrier Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.148 [INFO][4694] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0 calico-apiserver-6ffc95647b- calico-apiserver 440e0220-08e0-41ce-8c9f-c4b5129f05d5 946 0 2025-09-13 03:05:17 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6ffc95647b projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc calico-apiserver-6ffc95647b-4d92j eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif915a5d4ac9 [] [] }} ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.148 [INFO][4694] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.162 [INFO][4771] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" HandleID="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.162 [INFO][4771] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" HandleID="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000139540), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"calico-apiserver-6ffc95647b-4d92j", "timestamp":"2025-09-13 03:05:43.162258501 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.162 [INFO][4771] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.275 [INFO][4771] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.275 [INFO][4771] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.451 [INFO][4771] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.571 [INFO][4771] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.581 [INFO][4771] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.583 [INFO][4771] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.584 [INFO][4771] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.584 [INFO][4771] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.632 [INFO][4771] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775 Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.635 [INFO][4771] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.639 [INFO][4771] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.132/26] block=192.168.40.128/26 handle="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.639 [INFO][4771] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.132/26] handle="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.639 [INFO][4771] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.726736 env[1575]: 2025-09-13 03:05:43.639 [INFO][4771] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.132/26] IPv6=[] ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" HandleID="k8s-pod-network.793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.727444 env[1575]: 2025-09-13 03:05:43.643 [INFO][4694] cni-plugin/k8s.go 418: Populated endpoint ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"440e0220-08e0-41ce-8c9f-c4b5129f05d5", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"calico-apiserver-6ffc95647b-4d92j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif915a5d4ac9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.727444 env[1575]: 2025-09-13 03:05:43.643 [INFO][4694] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.132/32] ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.727444 env[1575]: 2025-09-13 03:05:43.643 [INFO][4694] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif915a5d4ac9 ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.727444 env[1575]: 2025-09-13 03:05:43.720 [INFO][4694] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.727444 env[1575]: 2025-09-13 03:05:43.721 [INFO][4694] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"440e0220-08e0-41ce-8c9f-c4b5129f05d5", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775", Pod:"calico-apiserver-6ffc95647b-4d92j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif915a5d4ac9", MAC:"6e:81:92:af:10:9b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.727444 env[1575]: 2025-09-13 03:05:43.725 [INFO][4694] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775" Namespace="calico-apiserver" Pod="calico-apiserver-6ffc95647b-4d92j" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:05:43.731420 env[1575]: time="2025-09-13T03:05:43.731387173Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:43.731420 env[1575]: time="2025-09-13T03:05:43.731407935Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:43.731420 env[1575]: time="2025-09-13T03:05:43.731417678Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:43.731590 env[1575]: time="2025-09-13T03:05:43.731489781Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775 pid=4913 runtime=io.containerd.runc.v2 Sep 13 03:05:43.737193 systemd-networkd[1307]: cali6c1b57483a9: Link UP Sep 13 03:05:43.737351 systemd[1]: Started cri-containerd-793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775.scope. Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.385000 audit[4877]: NETFILTER_CFG table=filter:104 family=2 entries=54 op=nft_register_chain pid=4877 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:43.385000 audit[4877]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7ffeaddeba50 a2=0 a3=7ffeaddeba3c items=0 ppid=4138 pid=4877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.385000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:43.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.509000 audit: BPF prog-id=172 op=LOAD Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=4817 pid=4827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534626139343538613765333834303133386236623365336531623039 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.782299 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6c1b57483a9: link becomes ready Sep 13 03:05:43.510000 audit[4827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=4817 pid=4827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534626139343538613765333834303133386236623365336531623039 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.510000 audit: BPF prog-id=173 op=LOAD Sep 13 03:05:43.510000 audit[4827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c000314920 items=0 ppid=4817 pid=4827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534626139343538613765333834303133386236623365336531623039 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.632000 audit: BPF prog-id=174 op=LOAD Sep 13 03:05:43.693000 audit: BPF prog-id=175 op=LOAD Sep 13 03:05:43.632000 audit[4827]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c000314968 items=0 ppid=4817 pid=4827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534626139343538613765333834303133386236623365336531623039 Sep 13 03:05:43.693000 audit: BPF prog-id=174 op=UNLOAD Sep 13 03:05:43.693000 audit: BPF prog-id=173 op=UNLOAD Sep 13 03:05:43.693000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[4827]: AVC avc: denied { perfmon } for pid=4827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[4827]: AVC avc: denied { bpf } for pid=4827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit: BPF prog-id=176 op=LOAD Sep 13 03:05:43.693000 audit[4827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c000314d78 items=0 ppid=4817 pid=4827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534626139343538613765333834303133386236623365336531623039 Sep 13 03:05:43.733000 audit[4922]: NETFILTER_CFG table=filter:105 family=2 entries=45 op=nft_register_chain pid=4922 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:43.733000 audit[4922]: SYSCALL arch=c000003e syscall=46 success=yes exit=24264 a0=3 a1=7ffc0fcd9e90 a2=0 a3=7ffc0fcd9e7c items=0 ppid=4138 pid=4922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.733000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.693000 audit: BPF prog-id=177 op=LOAD Sep 13 03:05:43.693000 audit[4876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001ddfb0 items=0 ppid=4867 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231666132396137363631313661333334306530656635613130656534 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.833000 audit: BPF prog-id=178 op=LOAD Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=4913 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739336162383164333866303066366266396237626262336264333731 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=c items=0 ppid=4913 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739336162383164333866303066366266396237626262336264333731 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.807000 audit: BPF prog-id=179 op=LOAD Sep 13 03:05:43.807000 audit[4876]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002232b8 items=0 ppid=4867 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231666132396137363631313661333334306530656635613130656534 Sep 13 03:05:43.857000 audit: BPF prog-id=179 op=UNLOAD Sep 13 03:05:43.857000 audit: BPF prog-id=177 op=UNLOAD Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.834000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.857000 audit: BPF prog-id=181 op=LOAD Sep 13 03:05:43.834000 audit: BPF prog-id=180 op=LOAD Sep 13 03:05:43.857000 audit[4876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002236c8 items=0 ppid=4867 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231666132396137363631313661333334306530656635613130656534 Sep 13 03:05:43.834000 audit[4921]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0002d3ce0 items=0 ppid=4913 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739336162383164333866303066366266396237626262336264333731 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit: BPF prog-id=182 op=LOAD Sep 13 03:05:43.884000 audit[4921]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0002d3d28 items=0 ppid=4913 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739336162383164333866303066366266396237626262336264333731 Sep 13 03:05:43.884000 audit: BPF prog-id=182 op=UNLOAD Sep 13 03:05:43.884000 audit: BPF prog-id=180 op=UNLOAD Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { perfmon } for pid=4921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit[4921]: AVC avc: denied { bpf } for pid=4921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.884000 audit: BPF prog-id=183 op=LOAD Sep 13 03:05:43.884000 audit[4921]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0003da138 items=0 ppid=4913 pid=4921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739336162383164333866303066366266396237626262336264333731 Sep 13 03:05:43.884903 systemd-networkd[1307]: cali6c1b57483a9: Gained carrier Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.159 [INFO][4724] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0 coredns-674b8bbfcf- kube-system 53dcf495-08a8-4cac-abf1-7ac4993f1d7d 947 0 2025-09-13 03:05:09 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc coredns-674b8bbfcf-kp2ms eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6c1b57483a9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.159 [INFO][4724] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.171 [INFO][4784] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" HandleID="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.171 [INFO][4784] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" HandleID="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f640), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"coredns-674b8bbfcf-kp2ms", "timestamp":"2025-09-13 03:05:43.171841375 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.171 [INFO][4784] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.639 [INFO][4784] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.639 [INFO][4784] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.643 [INFO][4784] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.721 [INFO][4784] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.724 [INFO][4784] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.725 [INFO][4784] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.727 [INFO][4784] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.727 [INFO][4784] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.728 [INFO][4784] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252 Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.731 [INFO][4784] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.734 [INFO][4784] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.133/26] block=192.168.40.128/26 handle="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.734 [INFO][4784] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.133/26] handle="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.734 [INFO][4784] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:43.898884 env[1575]: 2025-09-13 03:05:43.734 [INFO][4784] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.133/26] IPv6=[] ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" HandleID="k8s-pod-network.f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.899593 env[1575]: 2025-09-13 03:05:43.736 [INFO][4724] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"53dcf495-08a8-4cac-abf1-7ac4993f1d7d", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"coredns-674b8bbfcf-kp2ms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6c1b57483a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.899593 env[1575]: 2025-09-13 03:05:43.736 [INFO][4724] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.133/32] ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.899593 env[1575]: 2025-09-13 03:05:43.736 [INFO][4724] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6c1b57483a9 ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.899593 env[1575]: 2025-09-13 03:05:43.885 [INFO][4724] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.899593 env[1575]: 2025-09-13 03:05:43.885 [INFO][4724] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"53dcf495-08a8-4cac-abf1-7ac4993f1d7d", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252", Pod:"coredns-674b8bbfcf-kp2ms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6c1b57483a9", MAC:"26:48:7f:55:b1:d3", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:43.899593 env[1575]: 2025-09-13 03:05:43.891 [INFO][4724] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252" Namespace="kube-system" Pod="coredns-674b8bbfcf-kp2ms" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:05:43.901000 audit[4954]: NETFILTER_CFG table=filter:106 family=2 entries=54 op=nft_register_chain pid=4954 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:43.901000 audit[4954]: SYSCALL arch=c000003e syscall=46 success=yes exit=26116 a0=3 a1=7fff3e456eb0 a2=0 a3=7fff3e456e9c items=0 ppid=4138 pid=4954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.901000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:43.903145 env[1575]: time="2025-09-13T03:05:43.903118175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-4d92j,Uid:440e0220-08e0-41ce-8c9f-c4b5129f05d5,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775\"" Sep 13 03:05:43.904607 env[1575]: time="2025-09-13T03:05:43.904577032Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-2896r,Uid:9008353e-2c90-41f7-baad-336c80f2f4a8,Namespace:calico-system,Attempt:1,} returns sandbox id \"54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5\"" Sep 13 03:05:43.904781 env[1575]: time="2025-09-13T03:05:43.904731138Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:43.904781 env[1575]: time="2025-09-13T03:05:43.904762285Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:43.904781 env[1575]: time="2025-09-13T03:05:43.904773173Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:43.904912 env[1575]: time="2025-09-13T03:05:43.904835095Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6ffc95647b-s46sh,Uid:bcea16e9-21a3-4755-b83a-ac7b4f597078,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99\"" Sep 13 03:05:43.904935 env[1575]: time="2025-09-13T03:05:43.904897343Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252 pid=4978 runtime=io.containerd.runc.v2 Sep 13 03:05:43.911133 systemd[1]: Started cri-containerd-f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252.scope. Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit: BPF prog-id=184 op=LOAD Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4978 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630343135656634333435333437643564613630303135313265303233 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4978 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630343135656634333435333437643564613630303135313265303233 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit: BPF prog-id=185 op=LOAD Sep 13 03:05:43.917000 audit[4987]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000243080 items=0 ppid=4978 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630343135656634333435333437643564613630303135313265303233 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.917000 audit: BPF prog-id=186 op=LOAD Sep 13 03:05:43.917000 audit[4987]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002430c8 items=0 ppid=4978 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630343135656634333435333437643564613630303135313265303233 Sep 13 03:05:43.917000 audit: BPF prog-id=186 op=UNLOAD Sep 13 03:05:43.917000 audit: BPF prog-id=185 op=UNLOAD Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { perfmon } for pid=4987 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit[4987]: AVC avc: denied { bpf } for pid=4987 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.918000 audit: BPF prog-id=187 op=LOAD Sep 13 03:05:43.918000 audit[4987]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002434d8 items=0 ppid=4978 pid=4987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630343135656634333435333437643564613630303135313265303233 Sep 13 03:05:43.934750 env[1575]: time="2025-09-13T03:05:43.934721512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-kp2ms,Uid:53dcf495-08a8-4cac-abf1-7ac4993f1d7d,Namespace:kube-system,Attempt:1,} returns sandbox id \"f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252\"" Sep 13 03:05:43.936811 env[1575]: time="2025-09-13T03:05:43.936772371Z" level=info msg="CreateContainer within sandbox \"f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 03:05:43.941201 env[1575]: time="2025-09-13T03:05:43.941155768Z" level=info msg="CreateContainer within sandbox \"f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"49d36b9a85ab02d22334f7782a8626cf2783e009d6832e3b4b750976e6f06d7f\"" Sep 13 03:05:43.941354 env[1575]: time="2025-09-13T03:05:43.941340585Z" level=info msg="StartContainer for \"49d36b9a85ab02d22334f7782a8626cf2783e009d6832e3b4b750976e6f06d7f\"" Sep 13 03:05:43.948690 systemd[1]: Started cri-containerd-49d36b9a85ab02d22334f7782a8626cf2783e009d6832e3b4b750976e6f06d7f.scope. Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit: BPF prog-id=188 op=LOAD Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4978 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439643336623961383561623032643232333334663737383261383632 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4978 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439643336623961383561623032643232333334663737383261383632 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit: BPF prog-id=189 op=LOAD Sep 13 03:05:43.955000 audit[5019]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000408110 items=0 ppid=4978 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439643336623961383561623032643232333334663737383261383632 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.955000 audit: BPF prog-id=190 op=LOAD Sep 13 03:05:43.955000 audit[5019]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000408158 items=0 ppid=4978 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439643336623961383561623032643232333334663737383261383632 Sep 13 03:05:43.955000 audit: BPF prog-id=190 op=UNLOAD Sep 13 03:05:43.956000 audit: BPF prog-id=189 op=UNLOAD Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { perfmon } for pid=5019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit[5019]: AVC avc: denied { bpf } for pid=5019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:43.956000 audit: BPF prog-id=191 op=LOAD Sep 13 03:05:43.956000 audit[5019]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000408568 items=0 ppid=4978 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:43.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439643336623961383561623032643232333334663737383261383632 Sep 13 03:05:43.963158 env[1575]: time="2025-09-13T03:05:43.963131865Z" level=info msg="StartContainer for \"49d36b9a85ab02d22334f7782a8626cf2783e009d6832e3b4b750976e6f06d7f\" returns successfully" Sep 13 03:05:43.966000 audit[5029]: AVC avc: denied { getattr } for pid=5029 comm="coredns" path="cgroup:[4026532776]" dev="nsfs" ino=4026532776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c258,c443 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 03:05:43.966000 audit[5029]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a8b8 a2=c0000e36f8 a3=0 items=0 ppid=4978 pid=5029 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c258,c443 key=(null) Sep 13 03:05:43.966000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 03:05:43.983800 env[1575]: time="2025-09-13T03:05:43.983746551Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:43.984308 env[1575]: time="2025-09-13T03:05:43.984291436Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:43.985011 env[1575]: time="2025-09-13T03:05:43.984962632Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:43.985701 env[1575]: time="2025-09-13T03:05:43.985659388Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:43.986034 env[1575]: time="2025-09-13T03:05:43.985988569Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:7e29b0984d517678aab6ca138482c318989f6f28daf9d3b5dd6e4a5a3115ac16\"" Sep 13 03:05:43.986586 env[1575]: time="2025-09-13T03:05:43.986546649Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 03:05:43.987547 env[1575]: time="2025-09-13T03:05:43.987533083Z" level=info msg="CreateContainer within sandbox \"5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 13 03:05:43.991682 env[1575]: time="2025-09-13T03:05:43.991641104Z" level=info msg="CreateContainer within sandbox \"5fe54b055de6c24b071b9dad66e4bd0f8300d8b2bfd114b328d751d7c52037a7\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"a6ea5279cd0cc8b178d7945f504185d4dc0135deae839b374efb19c340fd4648\"" Sep 13 03:05:43.991884 env[1575]: time="2025-09-13T03:05:43.991871211Z" level=info msg="StartContainer for \"a6ea5279cd0cc8b178d7945f504185d4dc0135deae839b374efb19c340fd4648\"" Sep 13 03:05:43.999193 systemd[1]: Started cri-containerd-a6ea5279cd0cc8b178d7945f504185d4dc0135deae839b374efb19c340fd4648.scope. Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit: BPF prog-id=192 op=LOAD Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4294 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136656135323739636430636338623137386437393435663530343138 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4294 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136656135323739636430636338623137386437393435663530343138 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit: BPF prog-id=193 op=LOAD Sep 13 03:05:44.006000 audit[5067]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000263a10 items=0 ppid=4294 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136656135323739636430636338623137386437393435663530343138 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit: BPF prog-id=194 op=LOAD Sep 13 03:05:44.006000 audit[5067]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000263a58 items=0 ppid=4294 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136656135323739636430636338623137386437393435663530343138 Sep 13 03:05:44.006000 audit: BPF prog-id=194 op=UNLOAD Sep 13 03:05:44.006000 audit: BPF prog-id=193 op=UNLOAD Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.006000 audit: BPF prog-id=195 op=LOAD Sep 13 03:05:44.006000 audit[5067]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000263e68 items=0 ppid=4294 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136656135323739636430636338623137386437393435663530343138 Sep 13 03:05:44.023205 env[1575]: time="2025-09-13T03:05:44.023172763Z" level=info msg="StartContainer for \"a6ea5279cd0cc8b178d7945f504185d4dc0135deae839b374efb19c340fd4648\" returns successfully" Sep 13 03:05:44.076913 env[1575]: time="2025-09-13T03:05:44.076817644Z" level=info msg="StopPodSandbox for \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\"" Sep 13 03:05:44.135409 systemd[1]: run-netns-cni\x2d6a992a36\x2d9304\x2db252\x2dd20c\x2deb15403e6e26.mount: Deactivated successfully. Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.149 [INFO][5116] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.149 [INFO][5116] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" iface="eth0" netns="/var/run/netns/cni-3776e5ee-9d6f-bf5e-afe0-7fb194055615" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.150 [INFO][5116] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" iface="eth0" netns="/var/run/netns/cni-3776e5ee-9d6f-bf5e-afe0-7fb194055615" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.151 [INFO][5116] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" iface="eth0" netns="/var/run/netns/cni-3776e5ee-9d6f-bf5e-afe0-7fb194055615" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.151 [INFO][5116] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.151 [INFO][5116] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.170 [INFO][5135] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.170 [INFO][5135] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.170 [INFO][5135] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.177 [WARNING][5135] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.177 [INFO][5135] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.178 [INFO][5135] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:44.180893 env[1575]: 2025-09-13 03:05:44.179 [INFO][5116] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:05:44.181426 env[1575]: time="2025-09-13T03:05:44.181013654Z" level=info msg="TearDown network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\" successfully" Sep 13 03:05:44.181426 env[1575]: time="2025-09-13T03:05:44.181043497Z" level=info msg="StopPodSandbox for \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\" returns successfully" Sep 13 03:05:44.181603 env[1575]: time="2025-09-13T03:05:44.181547680Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bdv2h,Uid:fe014c83-bfbb-406d-8207-f066f50c73f7,Namespace:kube-system,Attempt:1,}" Sep 13 03:05:44.183832 systemd[1]: run-netns-cni\x2d3776e5ee\x2d9d6f\x2dbf5e\x2dafe0\x2d7fb194055615.mount: Deactivated successfully. Sep 13 03:05:44.219992 kubelet[2517]: I0913 03:05:44.219916 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-kp2ms" podStartSLOduration=35.21989714 podStartE2EDuration="35.21989714s" podCreationTimestamp="2025-09-13 03:05:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 03:05:44.219776905 +0000 UTC m=+40.236890362" watchObservedRunningTime="2025-09-13 03:05:44.21989714 +0000 UTC m=+40.237010588" Sep 13 03:05:44.229000 audit[5181]: NETFILTER_CFG table=filter:107 family=2 entries=20 op=nft_register_rule pid=5181 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:44.229000 audit[5181]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffca630b0a0 a2=0 a3=7ffca630b08c items=0 ppid=2721 pid=5181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:44.238680 kubelet[2517]: I0913 03:05:44.238615 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5888889c9d-x992d" podStartSLOduration=1.048920563 podStartE2EDuration="5.238594194s" podCreationTimestamp="2025-09-13 03:05:39 +0000 UTC" firstStartedPulling="2025-09-13 03:05:39.796803388 +0000 UTC m=+35.813916826" lastFinishedPulling="2025-09-13 03:05:43.986477017 +0000 UTC m=+40.003590457" observedRunningTime="2025-09-13 03:05:44.237949935 +0000 UTC m=+40.255063398" watchObservedRunningTime="2025-09-13 03:05:44.238594194 +0000 UTC m=+40.255707641" Sep 13 03:05:44.240000 audit[5181]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=5181 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:44.240000 audit[5181]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffca630b0a0 a2=0 a3=0 items=0 ppid=2721 pid=5181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.240000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:44.262000 audit[5193]: NETFILTER_CFG table=filter:109 family=2 entries=16 op=nft_register_rule pid=5193 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:44.262000 audit[5193]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff70f4c700 a2=0 a3=7fff70f4c6ec items=0 ppid=2721 pid=5193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.262000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:44.275291 systemd-networkd[1307]: calia701f7cd8ee: Link UP Sep 13 03:05:44.326981 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 03:05:44.327024 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia701f7cd8ee: link becomes ready Sep 13 03:05:44.327000 audit[5193]: NETFILTER_CFG table=nat:110 family=2 entries=42 op=nft_register_chain pid=5193 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:44.327000 audit[5193]: SYSCALL arch=c000003e syscall=46 success=yes exit=17772 a0=3 a1=7fff70f4c700 a2=0 a3=7fff70f4c6ec items=0 ppid=2721 pid=5193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.327000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:44.327709 systemd-networkd[1307]: calia701f7cd8ee: Gained carrier Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.213 [INFO][5152] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0 coredns-674b8bbfcf- kube-system fe014c83-bfbb-406d-8207-f066f50c73f7 972 0 2025-09-13 03:05:09 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc coredns-674b8bbfcf-bdv2h eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calia701f7cd8ee [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.214 [INFO][5152] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.241 [INFO][5175] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" HandleID="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.241 [INFO][5175] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" HandleID="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f730), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"coredns-674b8bbfcf-bdv2h", "timestamp":"2025-09-13 03:05:44.241613089 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.241 [INFO][5175] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.241 [INFO][5175] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.241 [INFO][5175] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.248 [INFO][5175] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.253 [INFO][5175] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.258 [INFO][5175] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.260 [INFO][5175] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.262 [INFO][5175] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.262 [INFO][5175] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.263 [INFO][5175] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.266 [INFO][5175] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.272 [INFO][5175] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.134/26] block=192.168.40.128/26 handle="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.272 [INFO][5175] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.134/26] handle="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.272 [INFO][5175] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:44.333728 env[1575]: 2025-09-13 03:05:44.272 [INFO][5175] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.134/26] IPv6=[] ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" HandleID="k8s-pod-network.945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.334178 env[1575]: 2025-09-13 03:05:44.273 [INFO][5152] cni-plugin/k8s.go 418: Populated endpoint ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fe014c83-bfbb-406d-8207-f066f50c73f7", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"coredns-674b8bbfcf-bdv2h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia701f7cd8ee", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:44.334178 env[1575]: 2025-09-13 03:05:44.274 [INFO][5152] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.134/32] ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.334178 env[1575]: 2025-09-13 03:05:44.274 [INFO][5152] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia701f7cd8ee ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.334178 env[1575]: 2025-09-13 03:05:44.327 [INFO][5152] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.334178 env[1575]: 2025-09-13 03:05:44.327 [INFO][5152] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fe014c83-bfbb-406d-8207-f066f50c73f7", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba", Pod:"coredns-674b8bbfcf-bdv2h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia701f7cd8ee", MAC:"ee:f9:31:35:c6:e8", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:44.334178 env[1575]: 2025-09-13 03:05:44.332 [INFO][5152] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba" Namespace="kube-system" Pod="coredns-674b8bbfcf-bdv2h" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:05:44.338184 env[1575]: time="2025-09-13T03:05:44.338155504Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:44.338184 env[1575]: time="2025-09-13T03:05:44.338178444Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:44.338245 env[1575]: time="2025-09-13T03:05:44.338187452Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:44.338282 env[1575]: time="2025-09-13T03:05:44.338245523Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba pid=5209 runtime=io.containerd.runc.v2 Sep 13 03:05:44.343783 systemd[1]: Started cri-containerd-945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba.scope. Sep 13 03:05:44.345000 audit[5229]: NETFILTER_CFG table=filter:111 family=2 entries=48 op=nft_register_chain pid=5229 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:44.345000 audit[5229]: SYSCALL arch=c000003e syscall=46 success=yes exit=22720 a0=3 a1=7fffa4078ac0 a2=0 a3=7fffa4078aac items=0 ppid=4138 pid=5229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.345000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.350000 audit: BPF prog-id=196 op=LOAD Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=5209 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934356436636533393338303433303263613764393237353637646664 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=5209 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934356436636533393338303433303263613764393237353637646664 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit: BPF prog-id=197 op=LOAD Sep 13 03:05:44.351000 audit[5218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002edd90 items=0 ppid=5209 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934356436636533393338303433303263613764393237353637646664 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit: BPF prog-id=198 op=LOAD Sep 13 03:05:44.351000 audit[5218]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002eddd8 items=0 ppid=5209 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934356436636533393338303433303263613764393237353637646664 Sep 13 03:05:44.351000 audit: BPF prog-id=198 op=UNLOAD Sep 13 03:05:44.351000 audit: BPF prog-id=197 op=UNLOAD Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { perfmon } for pid=5218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit[5218]: AVC avc: denied { bpf } for pid=5218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.351000 audit: BPF prog-id=199 op=LOAD Sep 13 03:05:44.351000 audit[5218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e41e8 items=0 ppid=5209 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934356436636533393338303433303263613764393237353637646664 Sep 13 03:05:44.367421 env[1575]: time="2025-09-13T03:05:44.367396944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-bdv2h,Uid:fe014c83-bfbb-406d-8207-f066f50c73f7,Namespace:kube-system,Attempt:1,} returns sandbox id \"945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba\"" Sep 13 03:05:44.369104 env[1575]: time="2025-09-13T03:05:44.369090906Z" level=info msg="CreateContainer within sandbox \"945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 03:05:44.373125 env[1575]: time="2025-09-13T03:05:44.373085672Z" level=info msg="CreateContainer within sandbox \"945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"60f779e415be7ba2c14294b9d54fa642a9513e267c88af20177c74c0d0f77da2\"" Sep 13 03:05:44.373305 env[1575]: time="2025-09-13T03:05:44.373289988Z" level=info msg="StartContainer for \"60f779e415be7ba2c14294b9d54fa642a9513e267c88af20177c74c0d0f77da2\"" Sep 13 03:05:44.380449 systemd[1]: Started cri-containerd-60f779e415be7ba2c14294b9d54fa642a9513e267c88af20177c74c0d0f77da2.scope. Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.386000 audit: BPF prog-id=200 op=LOAD Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=5209 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663737396534313562653762613263313432393462396435346661 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=5209 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663737396534313562653762613263313432393462396435346661 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit: BPF prog-id=201 op=LOAD Sep 13 03:05:44.387000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0002c3e10 items=0 ppid=5209 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663737396534313562653762613263313432393462396435346661 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit: BPF prog-id=202 op=LOAD Sep 13 03:05:44.387000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0002c3e58 items=0 ppid=5209 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663737396534313562653762613263313432393462396435346661 Sep 13 03:05:44.387000 audit: BPF prog-id=202 op=UNLOAD Sep 13 03:05:44.387000 audit: BPF prog-id=201 op=UNLOAD Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:44.387000 audit: BPF prog-id=203 op=LOAD Sep 13 03:05:44.387000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0002fe268 items=0 ppid=5209 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:44.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663737396534313562653762613263313432393462396435346661 Sep 13 03:05:44.392784 env[1575]: time="2025-09-13T03:05:44.392760058Z" level=info msg="StartContainer for \"60f779e415be7ba2c14294b9d54fa642a9513e267c88af20177c74c0d0f77da2\" returns successfully" Sep 13 03:05:44.398000 audit[5262]: AVC avc: denied { getattr } for pid=5262 comm="coredns" path="cgroup:[4026532815]" dev="nsfs" ino=4026532815 scontext=system_u:system_r:svirt_lxc_net_t:s0:c120,c846 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 03:05:44.398000 audit[5262]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000510930 a2=c00051efa8 a3=0 items=0 ppid=5209 pid=5262 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c120,c846 key=(null) Sep 13 03:05:44.398000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 03:05:44.921605 systemd-networkd[1307]: calie7538e48334: Gained IPv6LL Sep 13 03:05:44.922430 systemd-networkd[1307]: cali1a31ff9146f: Gained IPv6LL Sep 13 03:05:44.985561 systemd-networkd[1307]: calif915a5d4ac9: Gained IPv6LL Sep 13 03:05:45.075182 env[1575]: time="2025-09-13T03:05:45.075057594Z" level=info msg="StopPodSandbox for \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\"" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.142 [INFO][5312] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.142 [INFO][5312] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" iface="eth0" netns="/var/run/netns/cni-3b01e135-8306-4892-23d3-ce7356f9485a" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.142 [INFO][5312] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" iface="eth0" netns="/var/run/netns/cni-3b01e135-8306-4892-23d3-ce7356f9485a" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.142 [INFO][5312] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" iface="eth0" netns="/var/run/netns/cni-3b01e135-8306-4892-23d3-ce7356f9485a" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.142 [INFO][5312] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.142 [INFO][5312] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.158 [INFO][5330] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.158 [INFO][5330] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.158 [INFO][5330] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.163 [WARNING][5330] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.163 [INFO][5330] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.166 [INFO][5330] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:45.169285 env[1575]: 2025-09-13 03:05:45.167 [INFO][5312] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:05:45.170010 env[1575]: time="2025-09-13T03:05:45.169384989Z" level=info msg="TearDown network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\" successfully" Sep 13 03:05:45.170010 env[1575]: time="2025-09-13T03:05:45.169417470Z" level=info msg="StopPodSandbox for \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\" returns successfully" Sep 13 03:05:45.170010 env[1575]: time="2025-09-13T03:05:45.169915402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f76d8bf97-mcssk,Uid:385b07dd-f30f-4c30-9b84-d07458eebcd2,Namespace:calico-system,Attempt:1,}" Sep 13 03:05:45.172527 systemd[1]: run-netns-cni\x2d3b01e135\x2d8306\x2d4892\x2d23d3\x2dce7356f9485a.mount: Deactivated successfully. Sep 13 03:05:45.222457 kubelet[2517]: I0913 03:05:45.222411 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-bdv2h" podStartSLOduration=36.222393374 podStartE2EDuration="36.222393374s" podCreationTimestamp="2025-09-13 03:05:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 03:05:45.222072562 +0000 UTC m=+41.239186015" watchObservedRunningTime="2025-09-13 03:05:45.222393374 +0000 UTC m=+41.239506817" Sep 13 03:05:45.229000 audit[5391]: NETFILTER_CFG table=filter:112 family=2 entries=12 op=nft_register_rule pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:45.229000 audit[5391]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffda46782b0 a2=0 a3=7ffda467829c items=0 ppid=2721 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:45.239000 audit[5391]: NETFILTER_CFG table=nat:113 family=2 entries=46 op=nft_register_rule pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:45.239000 audit[5391]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffda46782b0 a2=0 a3=7ffda467829c items=0 ppid=2721 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.239000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:45.255067 systemd-networkd[1307]: cali467b96aa9d3: Link UP Sep 13 03:05:45.281059 systemd-networkd[1307]: cali467b96aa9d3: Gained carrier Sep 13 03:05:45.281271 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali467b96aa9d3: link becomes ready Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.201 [INFO][5351] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0 calico-kube-controllers-5f76d8bf97- calico-system 385b07dd-f30f-4c30-9b84-d07458eebcd2 998 0 2025-09-13 03:05:20 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5f76d8bf97 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc calico-kube-controllers-5f76d8bf97-mcssk eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali467b96aa9d3 [] [] }} ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.201 [INFO][5351] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.220 [INFO][5373] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" HandleID="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.220 [INFO][5373] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" HandleID="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003ce060), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"calico-kube-controllers-5f76d8bf97-mcssk", "timestamp":"2025-09-13 03:05:45.220449957 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.220 [INFO][5373] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.220 [INFO][5373] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.220 [INFO][5373] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.226 [INFO][5373] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.229 [INFO][5373] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.232 [INFO][5373] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.234 [INFO][5373] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.235 [INFO][5373] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.235 [INFO][5373] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.237 [INFO][5373] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255 Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.248 [INFO][5373] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.252 [INFO][5373] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.135/26] block=192.168.40.128/26 handle="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.252 [INFO][5373] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.135/26] handle="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.252 [INFO][5373] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:45.287466 env[1575]: 2025-09-13 03:05:45.252 [INFO][5373] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.135/26] IPv6=[] ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" HandleID="k8s-pod-network.649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.288058 env[1575]: 2025-09-13 03:05:45.254 [INFO][5351] cni-plugin/k8s.go 418: Populated endpoint ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0", GenerateName:"calico-kube-controllers-5f76d8bf97-", Namespace:"calico-system", SelfLink:"", UID:"385b07dd-f30f-4c30-9b84-d07458eebcd2", ResourceVersion:"998", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f76d8bf97", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"calico-kube-controllers-5f76d8bf97-mcssk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.40.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali467b96aa9d3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:45.288058 env[1575]: 2025-09-13 03:05:45.254 [INFO][5351] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.135/32] ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.288058 env[1575]: 2025-09-13 03:05:45.254 [INFO][5351] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali467b96aa9d3 ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.288058 env[1575]: 2025-09-13 03:05:45.281 [INFO][5351] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.288058 env[1575]: 2025-09-13 03:05:45.281 [INFO][5351] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0", GenerateName:"calico-kube-controllers-5f76d8bf97-", Namespace:"calico-system", SelfLink:"", UID:"385b07dd-f30f-4c30-9b84-d07458eebcd2", ResourceVersion:"998", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f76d8bf97", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255", Pod:"calico-kube-controllers-5f76d8bf97-mcssk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.40.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali467b96aa9d3", MAC:"9a:f0:17:8c:0b:6e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:45.288058 env[1575]: 2025-09-13 03:05:45.286 [INFO][5351] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255" Namespace="calico-system" Pod="calico-kube-controllers-5f76d8bf97-mcssk" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:05:45.293232 env[1575]: time="2025-09-13T03:05:45.293194171Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:45.293232 env[1575]: time="2025-09-13T03:05:45.293216755Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:45.293232 env[1575]: time="2025-09-13T03:05:45.293224663Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:45.293381 env[1575]: time="2025-09-13T03:05:45.293304539Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255 pid=5407 runtime=io.containerd.runc.v2 Sep 13 03:05:45.294000 audit[5415]: NETFILTER_CFG table=filter:114 family=2 entries=56 op=nft_register_chain pid=5415 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:45.294000 audit[5415]: SYSCALL arch=c000003e syscall=46 success=yes exit=25516 a0=3 a1=7ffe1d6570c0 a2=0 a3=7ffe1d6570ac items=0 ppid=4138 pid=5415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.294000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:45.299930 systemd[1]: Started cri-containerd-649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255.scope. Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.306000 audit: BPF prog-id=204 op=LOAD Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=5407 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393133366565306433653735336636306537323265386535626133 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=5407 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393133366565306433653735336636306537323265386535626133 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit: BPF prog-id=205 op=LOAD Sep 13 03:05:45.307000 audit[5418]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024900 items=0 ppid=5407 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393133366565306433653735336636306537323265386535626133 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit: BPF prog-id=206 op=LOAD Sep 13 03:05:45.307000 audit[5418]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024948 items=0 ppid=5407 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393133366565306433653735336636306537323265386535626133 Sep 13 03:05:45.307000 audit: BPF prog-id=206 op=UNLOAD Sep 13 03:05:45.307000 audit: BPF prog-id=205 op=UNLOAD Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { perfmon } for pid=5418 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit[5418]: AVC avc: denied { bpf } for pid=5418 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:45.307000 audit: BPF prog-id=207 op=LOAD Sep 13 03:05:45.307000 audit[5418]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024d58 items=0 ppid=5407 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:45.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634393133366565306433653735336636306537323265386535626133 Sep 13 03:05:45.325203 env[1575]: time="2025-09-13T03:05:45.325174577Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5f76d8bf97-mcssk,Uid:385b07dd-f30f-4c30-9b84-d07458eebcd2,Namespace:calico-system,Attempt:1,} returns sandbox id \"649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255\"" Sep 13 03:05:45.369539 systemd-networkd[1307]: cali6c1b57483a9: Gained IPv6LL Sep 13 03:05:46.074511 systemd-networkd[1307]: calia701f7cd8ee: Gained IPv6LL Sep 13 03:05:46.074870 env[1575]: time="2025-09-13T03:05:46.074475165Z" level=info msg="StopPodSandbox for \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\"" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.099 [INFO][5451] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.099 [INFO][5451] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" iface="eth0" netns="/var/run/netns/cni-1226c294-c19c-066a-38df-3bc36c6c6b47" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.099 [INFO][5451] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" iface="eth0" netns="/var/run/netns/cni-1226c294-c19c-066a-38df-3bc36c6c6b47" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.100 [INFO][5451] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" iface="eth0" netns="/var/run/netns/cni-1226c294-c19c-066a-38df-3bc36c6c6b47" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.100 [INFO][5451] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.100 [INFO][5451] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.112 [INFO][5468] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.113 [INFO][5468] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.113 [INFO][5468] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.116 [WARNING][5468] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.116 [INFO][5468] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.117 [INFO][5468] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:46.119582 env[1575]: 2025-09-13 03:05:46.118 [INFO][5451] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:05:46.119859 env[1575]: time="2025-09-13T03:05:46.119628215Z" level=info msg="TearDown network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\" successfully" Sep 13 03:05:46.119859 env[1575]: time="2025-09-13T03:05:46.119650818Z" level=info msg="StopPodSandbox for \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\" returns successfully" Sep 13 03:05:46.120124 env[1575]: time="2025-09-13T03:05:46.120083060Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-b476g,Uid:84539b9b-f46c-497d-8000-3665fcd3c774,Namespace:calico-system,Attempt:1,}" Sep 13 03:05:46.121906 systemd[1]: run-netns-cni\x2d1226c294\x2dc19c\x2d066a\x2d38df\x2d3bc36c6c6b47.mount: Deactivated successfully. Sep 13 03:05:46.174698 systemd-networkd[1307]: cali650e9b92dba: Link UP Sep 13 03:05:46.224285 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 03:05:46.224355 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali650e9b92dba: link becomes ready Sep 13 03:05:46.224714 systemd-networkd[1307]: cali650e9b92dba: Gained carrier Sep 13 03:05:46.228000 audit[5524]: NETFILTER_CFG table=filter:115 family=2 entries=12 op=nft_register_rule pid=5524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:46.228000 audit[5524]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc36a11390 a2=0 a3=7ffc36a1137c items=0 ppid=2721 pid=5524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.228000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.139 [INFO][5483] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0 csi-node-driver- calico-system 84539b9b-f46c-497d-8000-3665fcd3c774 1009 0 2025-09-13 03:05:20 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-ba666c4ddc csi-node-driver-b476g eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali650e9b92dba [] [] }} ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.139 [INFO][5483] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.151 [INFO][5503] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" HandleID="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.151 [INFO][5503] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" HandleID="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004fe10), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-ba666c4ddc", "pod":"csi-node-driver-b476g", "timestamp":"2025-09-13 03:05:46.151695081 +0000 UTC"}, Hostname:"ci-3510.3.8-n-ba666c4ddc", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.151 [INFO][5503] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.151 [INFO][5503] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.151 [INFO][5503] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-ba666c4ddc' Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.155 [INFO][5503] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.159 [INFO][5503] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.162 [INFO][5503] ipam/ipam.go 511: Trying affinity for 192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.164 [INFO][5503] ipam/ipam.go 158: Attempting to load block cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.165 [INFO][5503] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.40.128/26 host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.165 [INFO][5503] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.40.128/26 handle="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.166 [INFO][5503] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0 Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.169 [INFO][5503] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.40.128/26 handle="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.172 [INFO][5503] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.40.136/26] block=192.168.40.128/26 handle="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.172 [INFO][5503] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.40.136/26] handle="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" host="ci-3510.3.8-n-ba666c4ddc" Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.172 [INFO][5503] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:05:46.231638 env[1575]: 2025-09-13 03:05:46.172 [INFO][5503] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.40.136/26] IPv6=[] ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" HandleID="k8s-pod-network.60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.232255 env[1575]: 2025-09-13 03:05:46.173 [INFO][5483] cni-plugin/k8s.go 418: Populated endpoint ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"84539b9b-f46c-497d-8000-3665fcd3c774", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"", Pod:"csi-node-driver-b476g", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.40.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali650e9b92dba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:46.232255 env[1575]: 2025-09-13 03:05:46.173 [INFO][5483] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.40.136/32] ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.232255 env[1575]: 2025-09-13 03:05:46.173 [INFO][5483] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali650e9b92dba ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.232255 env[1575]: 2025-09-13 03:05:46.224 [INFO][5483] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.232255 env[1575]: 2025-09-13 03:05:46.225 [INFO][5483] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"84539b9b-f46c-497d-8000-3665fcd3c774", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0", Pod:"csi-node-driver-b476g", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.40.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali650e9b92dba", MAC:"d6:d0:25:14:76:57", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:05:46.232255 env[1575]: 2025-09-13 03:05:46.230 [INFO][5483] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0" Namespace="calico-system" Pod="csi-node-driver-b476g" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:05:46.235974 env[1575]: time="2025-09-13T03:05:46.235905249Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 03:05:46.235974 env[1575]: time="2025-09-13T03:05:46.235926244Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 03:05:46.235974 env[1575]: time="2025-09-13T03:05:46.235933280Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 03:05:46.236080 env[1575]: time="2025-09-13T03:05:46.235998306Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0 pid=5539 runtime=io.containerd.runc.v2 Sep 13 03:05:46.241929 systemd[1]: Started cri-containerd-60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0.scope. Sep 13 03:05:46.244000 audit[5524]: NETFILTER_CFG table=nat:116 family=2 entries=58 op=nft_register_chain pid=5524 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:46.244000 audit[5524]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffc36a11390 a2=0 a3=7ffc36a1137c items=0 ppid=2721 pid=5524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.244000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit: BPF prog-id=208 op=LOAD Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=5539 pid=5548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663233303565326130336366326633316663663465353366303165 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=5539 pid=5548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663233303565326130336366326633316663663465353366303165 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit: BPF prog-id=209 op=LOAD Sep 13 03:05:46.247000 audit[5548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0002bddc0 items=0 ppid=5539 pid=5548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663233303565326130336366326633316663663465353366303165 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit: BPF prog-id=210 op=LOAD Sep 13 03:05:46.247000 audit[5548]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0002bde08 items=0 ppid=5539 pid=5548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663233303565326130336366326633316663663465353366303165 Sep 13 03:05:46.247000 audit: BPF prog-id=210 op=UNLOAD Sep 13 03:05:46.247000 audit: BPF prog-id=209 op=UNLOAD Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { perfmon } for pid=5548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit[5548]: AVC avc: denied { bpf } for pid=5548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.247000 audit: BPF prog-id=211 op=LOAD Sep 13 03:05:46.247000 audit[5548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c00038c218 items=0 ppid=5539 pid=5548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630663233303565326130336366326633316663663465353366303165 Sep 13 03:05:46.252482 env[1575]: time="2025-09-13T03:05:46.252458531Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-b476g,Uid:84539b9b-f46c-497d-8000-3665fcd3c774,Namespace:calico-system,Attempt:1,} returns sandbox id \"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0\"" Sep 13 03:05:46.244000 audit[5558]: NETFILTER_CFG table=filter:117 family=2 entries=66 op=nft_register_chain pid=5558 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 03:05:46.244000 audit[5558]: SYSCALL arch=c000003e syscall=46 success=yes exit=29556 a0=3 a1=7ffeda247e70 a2=0 a3=557341729000 items=0 ppid=4138 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.244000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 03:05:46.540824 kubelet[2517]: I0913 03:05:46.540762 2517 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 03:05:46.777766 env[1575]: time="2025-09-13T03:05:46.777711050Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:46.778328 env[1575]: time="2025-09-13T03:05:46.778268579Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:46.778948 env[1575]: time="2025-09-13T03:05:46.778907055Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:46.779632 env[1575]: time="2025-09-13T03:05:46.779592616Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:46.780253 env[1575]: time="2025-09-13T03:05:46.780210473Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 13 03:05:46.780764 env[1575]: time="2025-09-13T03:05:46.780729412Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 13 03:05:46.781907 env[1575]: time="2025-09-13T03:05:46.781893708Z" level=info msg="CreateContainer within sandbox \"793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 03:05:46.786238 env[1575]: time="2025-09-13T03:05:46.786194355Z" level=info msg="CreateContainer within sandbox \"793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"26c877a687c515327969034370568ab4c0fbf47cd1cd512e2ef3cba22ffe8a55\"" Sep 13 03:05:46.786535 env[1575]: time="2025-09-13T03:05:46.786520201Z" level=info msg="StartContainer for \"26c877a687c515327969034370568ab4c0fbf47cd1cd512e2ef3cba22ffe8a55\"" Sep 13 03:05:46.795502 systemd[1]: Started cri-containerd-26c877a687c515327969034370568ab4c0fbf47cd1cd512e2ef3cba22ffe8a55.scope. Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit: BPF prog-id=212 op=LOAD Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4913 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633837376136383763353135333237393639303334333730353638 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4913 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633837376136383763353135333237393639303334333730353638 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit: BPF prog-id=213 op=LOAD Sep 13 03:05:46.801000 audit[5646]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e59f0 items=0 ppid=4913 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633837376136383763353135333237393639303334333730353638 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit: BPF prog-id=214 op=LOAD Sep 13 03:05:46.801000 audit[5646]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e5a38 items=0 ppid=4913 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633837376136383763353135333237393639303334333730353638 Sep 13 03:05:46.801000 audit: BPF prog-id=214 op=UNLOAD Sep 13 03:05:46.801000 audit: BPF prog-id=213 op=UNLOAD Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { perfmon } for pid=5646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit[5646]: AVC avc: denied { bpf } for pid=5646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:46.801000 audit: BPF prog-id=215 op=LOAD Sep 13 03:05:46.801000 audit[5646]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e5e48 items=0 ppid=4913 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:46.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236633837376136383763353135333237393639303334333730353638 Sep 13 03:05:46.827053 env[1575]: time="2025-09-13T03:05:46.827021545Z" level=info msg="StartContainer for \"26c877a687c515327969034370568ab4c0fbf47cd1cd512e2ef3cba22ffe8a55\" returns successfully" Sep 13 03:05:47.225386 kubelet[2517]: I0913 03:05:47.225352 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6ffc95647b-4d92j" podStartSLOduration=27.348477794 podStartE2EDuration="30.225341257s" podCreationTimestamp="2025-09-13 03:05:17 +0000 UTC" firstStartedPulling="2025-09-13 03:05:43.903785782 +0000 UTC m=+39.920899220" lastFinishedPulling="2025-09-13 03:05:46.780649239 +0000 UTC m=+42.797762683" observedRunningTime="2025-09-13 03:05:47.225015813 +0000 UTC m=+43.242129254" watchObservedRunningTime="2025-09-13 03:05:47.225341257 +0000 UTC m=+43.242454693" Sep 13 03:05:47.231000 audit[5691]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=5691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:47.231000 audit[5691]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffa1bcc500 a2=0 a3=7fffa1bcc4ec items=0 ppid=2721 pid=5691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:47.231000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:47.248000 audit[5691]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=5691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:47.248000 audit[5691]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fffa1bcc500 a2=0 a3=7fffa1bcc4ec items=0 ppid=2721 pid=5691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:47.248000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:47.289406 systemd-networkd[1307]: cali467b96aa9d3: Gained IPv6LL Sep 13 03:05:47.417416 systemd-networkd[1307]: cali650e9b92dba: Gained IPv6LL Sep 13 03:05:48.213000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:05:48.213000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000dca1c0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:05:48.213000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:05:48.219838 kubelet[2517]: I0913 03:05:48.219823 2517 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 03:05:49.492914 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4006610784.mount: Deactivated successfully. Sep 13 03:05:49.951321 env[1575]: time="2025-09-13T03:05:49.951222492Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:49.951883 env[1575]: time="2025-09-13T03:05:49.951869429Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:49.952660 env[1575]: time="2025-09-13T03:05:49.952618438Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:49.953672 env[1575]: time="2025-09-13T03:05:49.953659003Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:49.953956 env[1575]: time="2025-09-13T03:05:49.953940010Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:a7d029fd8f6be94c26af980675c1650818e1e6e19dbd2f8c13e6e61963f021e8\"" Sep 13 03:05:49.954731 env[1575]: time="2025-09-13T03:05:49.954718350Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 03:05:49.955883 env[1575]: time="2025-09-13T03:05:49.955869551Z" level=info msg="CreateContainer within sandbox \"54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 13 03:05:49.960318 env[1575]: time="2025-09-13T03:05:49.960256297Z" level=info msg="CreateContainer within sandbox \"54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"613cd980ff8608d5c2b5a386b0826438855e32de84bb8bf13b11f7080a60d9e8\"" Sep 13 03:05:49.960640 env[1575]: time="2025-09-13T03:05:49.960625976Z" level=info msg="StartContainer for \"613cd980ff8608d5c2b5a386b0826438855e32de84bb8bf13b11f7080a60d9e8\"" Sep 13 03:05:49.969980 systemd[1]: Started cri-containerd-613cd980ff8608d5c2b5a386b0826438855e32de84bb8bf13b11f7080a60d9e8.scope. Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.000629 kernel: kauditd_printk_skb: 701 callbacks suppressed Sep 13 03:05:50.000676 kernel: audit: type=1400 audit(1757732749.977:1368): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112132 kernel: audit: type=1400 audit(1757732749.977:1369): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112182 kernel: audit: type=1400 audit(1757732749.977:1370): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.167839 kernel: audit: type=1400 audit(1757732749.977:1371): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.231165 kernel: audit: type=1400 audit(1757732749.977:1372): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.336148 kernel: audit: type=1400 audit(1757732749.977:1373): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.336235 kernel: audit: type=1400 audit(1757732749.977:1374): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.448935 kernel: audit: type=1400 audit(1757732749.977:1375): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.449014 kernel: audit: type=1400 audit(1757732749.977:1376): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:49.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.509468 env[1575]: time="2025-09-13T03:05:50.509414248Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:50.509964 env[1575]: time="2025-09-13T03:05:50.509920909Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:50.510920 env[1575]: time="2025-09-13T03:05:50.510908934Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:50.511478 env[1575]: time="2025-09-13T03:05:50.511465485Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:50.511781 env[1575]: time="2025-09-13T03:05:50.511769133Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:879f2443aed0573271114108bfec35d3e76419f98282ef796c646d0986c5ba6a\"" Sep 13 03:05:50.512400 env[1575]: time="2025-09-13T03:05:50.512385779Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 13 03:05:50.513820 env[1575]: time="2025-09-13T03:05:50.513803371Z" level=info msg="CreateContainer within sandbox \"21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 03:05:50.564851 kernel: audit: type=1400 audit(1757732750.111:1377): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.111000 audit: BPF prog-id=216 op=LOAD Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4817 pid=5699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631336364393830666638363038643563326235613338366230383236 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=4817 pid=5699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631336364393830666638363038643563326235613338366230383236 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.112000 audit: BPF prog-id=217 op=LOAD Sep 13 03:05:50.112000 audit[5699]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000305760 items=0 ppid=4817 pid=5699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631336364393830666638363038643563326235613338366230383236 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.223000 audit: BPF prog-id=218 op=LOAD Sep 13 03:05:50.223000 audit[5699]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003057a8 items=0 ppid=4817 pid=5699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631336364393830666638363038643563326235613338366230383236 Sep 13 03:05:50.279000 audit: BPF prog-id=218 op=UNLOAD Sep 13 03:05:50.279000 audit: BPF prog-id=217 op=UNLOAD Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { perfmon } for pid=5699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit[5699]: AVC avc: denied { bpf } for pid=5699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.279000 audit: BPF prog-id=219 op=LOAD Sep 13 03:05:50.279000 audit[5699]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000305bb8 items=0 ppid=4817 pid=5699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631336364393830666638363038643563326235613338366230383236 Sep 13 03:05:50.566858 env[1575]: time="2025-09-13T03:05:50.566834726Z" level=info msg="CreateContainer within sandbox \"21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"a2b014a11cd8feed0de44f4ac88d75a6e826d3e9a3579cce784fbc1bed7dd1a8\"" Sep 13 03:05:50.567150 env[1575]: time="2025-09-13T03:05:50.567136635Z" level=info msg="StartContainer for \"a2b014a11cd8feed0de44f4ac88d75a6e826d3e9a3579cce784fbc1bed7dd1a8\"" Sep 13 03:05:50.576219 systemd[1]: Started cri-containerd-a2b014a11cd8feed0de44f4ac88d75a6e826d3e9a3579cce784fbc1bed7dd1a8.scope. Sep 13 03:05:50.581520 env[1575]: time="2025-09-13T03:05:50.581493111Z" level=info msg="StartContainer for \"613cd980ff8608d5c2b5a386b0826438855e32de84bb8bf13b11f7080a60d9e8\" returns successfully" Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.581000 audit: BPF prog-id=220 op=LOAD Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4867 pid=5728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623031346131316364386665656430646534346634616338386437 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4867 pid=5728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623031346131316364386665656430646534346634616338386437 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit: BPF prog-id=221 op=LOAD Sep 13 03:05:50.582000 audit[5728]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003b2170 items=0 ppid=4867 pid=5728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623031346131316364386665656430646534346634616338386437 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit: BPF prog-id=222 op=LOAD Sep 13 03:05:50.582000 audit[5728]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003b21b8 items=0 ppid=4867 pid=5728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623031346131316364386665656430646534346634616338386437 Sep 13 03:05:50.582000 audit: BPF prog-id=222 op=UNLOAD Sep 13 03:05:50.582000 audit: BPF prog-id=221 op=UNLOAD Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { perfmon } for pid=5728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit[5728]: AVC avc: denied { bpf } for pid=5728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:50.582000 audit: BPF prog-id=223 op=LOAD Sep 13 03:05:50.582000 audit[5728]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003b25c8 items=0 ppid=4867 pid=5728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:50.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623031346131316364386665656430646534346634616338386437 Sep 13 03:05:50.599594 env[1575]: time="2025-09-13T03:05:50.599570753Z" level=info msg="StartContainer for \"a2b014a11cd8feed0de44f4ac88d75a6e826d3e9a3579cce784fbc1bed7dd1a8\" returns successfully" Sep 13 03:05:51.252660 kubelet[2517]: I0913 03:05:51.252477 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-2896r" podStartSLOduration=26.202990689 podStartE2EDuration="32.252444119s" podCreationTimestamp="2025-09-13 03:05:19 +0000 UTC" firstStartedPulling="2025-09-13 03:05:43.905171161 +0000 UTC m=+39.922284598" lastFinishedPulling="2025-09-13 03:05:49.954624591 +0000 UTC m=+45.971738028" observedRunningTime="2025-09-13 03:05:51.252192218 +0000 UTC m=+47.269305694" watchObservedRunningTime="2025-09-13 03:05:51.252444119 +0000 UTC m=+47.269557583" Sep 13 03:05:51.266307 kubelet[2517]: I0913 03:05:51.266213 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6ffc95647b-s46sh" podStartSLOduration=27.65927373 podStartE2EDuration="34.266183433s" podCreationTimestamp="2025-09-13 03:05:17 +0000 UTC" firstStartedPulling="2025-09-13 03:05:43.905360941 +0000 UTC m=+39.922474377" lastFinishedPulling="2025-09-13 03:05:50.512270639 +0000 UTC m=+46.529384080" observedRunningTime="2025-09-13 03:05:51.266036812 +0000 UTC m=+47.283150290" watchObservedRunningTime="2025-09-13 03:05:51.266183433 +0000 UTC m=+47.283296893" Sep 13 03:05:51.269000 audit[5815]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=5815 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:51.269000 audit[5815]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcb00a2d30 a2=0 a3=7ffcb00a2d1c items=0 ppid=2721 pid=5815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:51.269000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:51.279000 audit[5815]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=5815 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:51.279000 audit[5815]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffcb00a2d30 a2=0 a3=7ffcb00a2d1c items=0 ppid=2721 pid=5815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:51.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:51.306000 audit[5830]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=5830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:51.306000 audit[5830]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe4e4a5f10 a2=0 a3=7ffe4e4a5efc items=0 ppid=2721 pid=5830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:51.306000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:51.315000 audit[5830]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=5830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:51.315000 audit[5830]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe4e4a5f10 a2=0 a3=7ffe4e4a5efc items=0 ppid=2721 pid=5830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:51.315000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:51.550000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:05:51.550000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007c26c0 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:05:51.550000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:05:52.344000 audit[5870]: NETFILTER_CFG table=filter:124 family=2 entries=11 op=nft_register_rule pid=5870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:52.344000 audit[5870]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff4cbb6530 a2=0 a3=7fff4cbb651c items=0 ppid=2721 pid=5870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:52.344000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:52.351000 audit[5870]: NETFILTER_CFG table=nat:125 family=2 entries=29 op=nft_register_chain pid=5870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:05:52.351000 audit[5870]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff4cbb6530 a2=0 a3=7fff4cbb651c items=0 ppid=2721 pid=5870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:52.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:05:53.409204 env[1575]: time="2025-09-13T03:05:53.409178175Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:53.409837 env[1575]: time="2025-09-13T03:05:53.409795937Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:53.410419 env[1575]: time="2025-09-13T03:05:53.410378810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:53.411019 env[1575]: time="2025-09-13T03:05:53.410978488Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:53.411307 env[1575]: time="2025-09-13T03:05:53.411269002Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:df191a54fb79de3c693f8b1b864a1bd3bd14f63b3fff9d5fa4869c471ce3cd37\"" Sep 13 03:05:53.411942 env[1575]: time="2025-09-13T03:05:53.411929437Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 13 03:05:53.416012 env[1575]: time="2025-09-13T03:05:53.415992620Z" level=info msg="CreateContainer within sandbox \"649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 13 03:05:53.420075 env[1575]: time="2025-09-13T03:05:53.420057103Z" level=info msg="CreateContainer within sandbox \"649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"8163e1057134ffeba51824ef90251704498f0bccf7a78372ba9bbf8713cbf9df\"" Sep 13 03:05:53.420315 env[1575]: time="2025-09-13T03:05:53.420299694Z" level=info msg="StartContainer for \"8163e1057134ffeba51824ef90251704498f0bccf7a78372ba9bbf8713cbf9df\"" Sep 13 03:05:53.430243 systemd[1]: Started cri-containerd-8163e1057134ffeba51824ef90251704498f0bccf7a78372ba9bbf8713cbf9df.scope. Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.435000 audit: BPF prog-id=224 op=LOAD Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=5407 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:53.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363365313035373133346666656261353138323465663930323531 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=5407 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:53.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363365313035373133346666656261353138323465663930323531 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit: BPF prog-id=225 op=LOAD Sep 13 03:05:53.436000 audit[5882]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a3d10 items=0 ppid=5407 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:53.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363365313035373133346666656261353138323465663930323531 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit: BPF prog-id=226 op=LOAD Sep 13 03:05:53.436000 audit[5882]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a3d58 items=0 ppid=5407 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:53.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363365313035373133346666656261353138323465663930323531 Sep 13 03:05:53.436000 audit: BPF prog-id=226 op=UNLOAD Sep 13 03:05:53.436000 audit: BPF prog-id=225 op=UNLOAD Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { perfmon } for pid=5882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit[5882]: AVC avc: denied { bpf } for pid=5882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:53.436000 audit: BPF prog-id=227 op=LOAD Sep 13 03:05:53.436000 audit[5882]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002f4168 items=0 ppid=5407 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:53.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831363365313035373133346666656261353138323465663930323531 Sep 13 03:05:53.453080 env[1575]: time="2025-09-13T03:05:53.453053223Z" level=info msg="StartContainer for \"8163e1057134ffeba51824ef90251704498f0bccf7a78372ba9bbf8713cbf9df\" returns successfully" Sep 13 03:05:54.251882 kubelet[2517]: I0913 03:05:54.251842 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5f76d8bf97-mcssk" podStartSLOduration=26.165726227 podStartE2EDuration="34.251829566s" podCreationTimestamp="2025-09-13 03:05:20 +0000 UTC" firstStartedPulling="2025-09-13 03:05:45.325757611 +0000 UTC m=+41.342871049" lastFinishedPulling="2025-09-13 03:05:53.41186095 +0000 UTC m=+49.428974388" observedRunningTime="2025-09-13 03:05:54.251421521 +0000 UTC m=+50.268534967" watchObservedRunningTime="2025-09-13 03:05:54.251829566 +0000 UTC m=+50.268943005" Sep 13 03:05:55.063064 env[1575]: time="2025-09-13T03:05:55.063040295Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:55.063647 env[1575]: time="2025-09-13T03:05:55.063628616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:55.073856 env[1575]: time="2025-09-13T03:05:55.064743938Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:55.073856 env[1575]: time="2025-09-13T03:05:55.065756760Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:55.073856 env[1575]: time="2025-09-13T03:05:55.066712641Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:666f4e02e75c30547109a06ed75b415a990a970811173aa741379cfaac4d9dd7\"" Sep 13 03:05:55.075420 env[1575]: time="2025-09-13T03:05:55.075401541Z" level=info msg="CreateContainer within sandbox \"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 13 03:05:55.081089 env[1575]: time="2025-09-13T03:05:55.081057209Z" level=info msg="CreateContainer within sandbox \"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"fba81bf4ab90be090ab7865a1b02209371ed11b65a5a954a175553b89c1c722a\"" Sep 13 03:05:55.081418 env[1575]: time="2025-09-13T03:05:55.081401215Z" level=info msg="StartContainer for \"fba81bf4ab90be090ab7865a1b02209371ed11b65a5a954a175553b89c1c722a\"" Sep 13 03:05:55.093979 systemd[1]: Started cri-containerd-fba81bf4ab90be090ab7865a1b02209371ed11b65a5a954a175553b89c1c722a.scope. Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.125223 kernel: kauditd_printk_skb: 182 callbacks suppressed Sep 13 03:05:55.125327 kernel: audit: type=1400 audit(1757732755.100:1429): avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fa8081dc2c8 items=0 ppid=5539 pid=5960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:55.184371 kernel: audit: type=1300 audit(1757732755.100:1429): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fa8081dc2c8 items=0 ppid=5539 pid=5960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:55.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662613831626634616239306265303930616237383635613162303232 Sep 13 03:05:55.360266 kernel: audit: type=1327 audit(1757732755.100:1429): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662613831626634616239306265303930616237383635613162303232 Sep 13 03:05:55.360324 kernel: audit: type=1400 audit(1757732755.100:1430): avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.418932 kernel: audit: type=1400 audit(1757732755.100:1430): avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.477586 kernel: audit: type=1400 audit(1757732755.100:1430): avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.541971 env[1575]: time="2025-09-13T03:05:55.541943498Z" level=info msg="StartContainer for \"fba81bf4ab90be090ab7865a1b02209371ed11b65a5a954a175553b89c1c722a\" returns successfully" Sep 13 03:05:55.542538 env[1575]: time="2025-09-13T03:05:55.542525902Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.596343 kernel: audit: type=1400 audit(1757732755.100:1430): avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.596384 kernel: audit: type=1400 audit(1757732755.100:1430): avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.716135 kernel: audit: type=1400 audit(1757732755.100:1430): avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.716191 kernel: audit: type=1400 audit(1757732755.100:1430): avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.100000 audit: BPF prog-id=228 op=LOAD Sep 13 03:05:55.100000 audit[5960]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002547c8 items=0 ppid=5539 pid=5960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:55.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662613831626634616239306265303930616237383635613162303232 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.183000 audit: BPF prog-id=229 op=LOAD Sep 13 03:05:55.183000 audit[5960]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000254818 items=0 ppid=5539 pid=5960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:55.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662613831626634616239306265303930616237383635613162303232 Sep 13 03:05:55.359000 audit: BPF prog-id=229 op=UNLOAD Sep 13 03:05:55.360000 audit: BPF prog-id=228 op=UNLOAD Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { perfmon } for pid=5960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit[5960]: AVC avc: denied { bpf } for pid=5960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:55.360000 audit: BPF prog-id=230 op=LOAD Sep 13 03:05:55.360000 audit[5960]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002548a8 items=0 ppid=5539 pid=5960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662613831626634616239306265303930616237383635613162303232 Sep 13 03:05:57.800626 env[1575]: time="2025-09-13T03:05:57.800564078Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:57.801130 env[1575]: time="2025-09-13T03:05:57.801116221Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:57.801678 env[1575]: time="2025-09-13T03:05:57.801664106Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:57.802635 env[1575]: time="2025-09-13T03:05:57.802623085Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 03:05:57.802829 env[1575]: time="2025-09-13T03:05:57.802811746Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:b8f31c4fdaed3fa08af64de3d37d65a4c2ea0d9f6f522cb60d2e0cb424f8dd8a\"" Sep 13 03:05:57.804635 env[1575]: time="2025-09-13T03:05:57.804605706Z" level=info msg="CreateContainer within sandbox \"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 13 03:05:57.809238 env[1575]: time="2025-09-13T03:05:57.809222434Z" level=info msg="CreateContainer within sandbox \"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"f2d7a26a73ff60378eeae214edc70e5a72feb78d021057aa56974ef309edfca8\"" Sep 13 03:05:57.809579 env[1575]: time="2025-09-13T03:05:57.809522857Z" level=info msg="StartContainer for \"f2d7a26a73ff60378eeae214edc70e5a72feb78d021057aa56974ef309edfca8\"" Sep 13 03:05:57.821542 systemd[1]: Started cri-containerd-f2d7a26a73ff60378eeae214edc70e5a72feb78d021057aa56974ef309edfca8.scope. Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7ff042498db8 items=0 ppid=5539 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:57.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643761323661373366663630333738656561653231346564633730 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit: BPF prog-id=231 op=LOAD Sep 13 03:05:57.827000 audit[5996]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003a0558 items=0 ppid=5539 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:57.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643761323661373366663630333738656561653231346564633730 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit: BPF prog-id=232 op=LOAD Sep 13 03:05:57.827000 audit[5996]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003a05a8 items=0 ppid=5539 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:57.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643761323661373366663630333738656561653231346564633730 Sep 13 03:05:57.827000 audit: BPF prog-id=232 op=UNLOAD Sep 13 03:05:57.827000 audit: BPF prog-id=231 op=UNLOAD Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { perfmon } for pid=5996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit[5996]: AVC avc: denied { bpf } for pid=5996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 03:05:57.827000 audit: BPF prog-id=233 op=LOAD Sep 13 03:05:57.827000 audit[5996]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003a0638 items=0 ppid=5539 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:05:57.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643761323661373366663630333738656561653231346564633730 Sep 13 03:05:57.836144 env[1575]: time="2025-09-13T03:05:57.836115239Z" level=info msg="StartContainer for \"f2d7a26a73ff60378eeae214edc70e5a72feb78d021057aa56974ef309edfca8\" returns successfully" Sep 13 03:05:58.117317 kubelet[2517]: I0913 03:05:58.117251 2517 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 13 03:05:58.117317 kubelet[2517]: I0913 03:05:58.117283 2517 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 13 03:05:58.267083 kubelet[2517]: I0913 03:05:58.267022 2517 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-b476g" podStartSLOduration=26.716795531 podStartE2EDuration="38.267002388s" podCreationTimestamp="2025-09-13 03:05:20 +0000 UTC" firstStartedPulling="2025-09-13 03:05:46.253045151 +0000 UTC m=+42.270158588" lastFinishedPulling="2025-09-13 03:05:57.803252008 +0000 UTC m=+53.820365445" observedRunningTime="2025-09-13 03:05:58.266674182 +0000 UTC m=+54.283787652" watchObservedRunningTime="2025-09-13 03:05:58.267002388 +0000 UTC m=+54.284115840" Sep 13 03:05:59.817000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:59.817000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:05:59.817000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00144b200 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:05:59.817000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f34160 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:05:59.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:05:59.817000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:00.065000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:00.065000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:00.065000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00966f840 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:06:00.065000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c006fc5c80 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:06:00.065000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:00.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:06:00.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:06:00.065000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0060a57d0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:06:00.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:06:00.065000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:00.065000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0060a5800 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:06:00.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:06:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c013172560 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:06:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:06:00.067000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:00.067000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c012d939b0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:06:00.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:06:03.943000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:03.986391 kernel: kauditd_printk_skb: 100 callbacks suppressed Sep 13 03:06:03.986509 kernel: audit: type=1400 audit(1757732763.943:1449): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:04.057941 env[1575]: time="2025-09-13T03:06:04.057920055Z" level=info msg="StopPodSandbox for \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\"" Sep 13 03:06:03.943000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.077 [WARNING][6075] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0", GenerateName:"calico-kube-controllers-5f76d8bf97-", Namespace:"calico-system", SelfLink:"", UID:"385b07dd-f30f-4c30-9b84-d07458eebcd2", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f76d8bf97", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255", Pod:"calico-kube-controllers-5f76d8bf97-mcssk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.40.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali467b96aa9d3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.077 [INFO][6075] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.077 [INFO][6075] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" iface="eth0" netns="" Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.077 [INFO][6075] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.077 [INFO][6075] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.088 [INFO][6093] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.088 [INFO][6093] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.088 [INFO][6093] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.092 [WARNING][6093] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.092 [INFO][6093] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.093 [INFO][6093] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.094846 env[1575]: 2025-09-13 03:06:04.094 [INFO][6075] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.095307 env[1575]: time="2025-09-13T03:06:04.094859992Z" level=info msg="TearDown network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\" successfully" Sep 13 03:06:04.095307 env[1575]: time="2025-09-13T03:06:04.094875843Z" level=info msg="StopPodSandbox for \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\" returns successfully" Sep 13 03:06:04.095307 env[1575]: time="2025-09-13T03:06:04.095079113Z" level=info msg="RemovePodSandbox for \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\"" Sep 13 03:06:04.095307 env[1575]: time="2025-09-13T03:06:04.095101236Z" level=info msg="Forcibly stopping sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\"" Sep 13 03:06:04.168623 kernel: audit: type=1400 audit(1757732763.943:1450): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:04.168701 kernel: audit: type=1300 audit(1757732763.943:1450): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019d1140 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:03.943000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019d1140 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.169 [WARNING][6118] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0", GenerateName:"calico-kube-controllers-5f76d8bf97-", Namespace:"calico-system", SelfLink:"", UID:"385b07dd-f30f-4c30-9b84-d07458eebcd2", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5f76d8bf97", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"649136ee0d3e753f60e722e8e5ba3e2da44354b70d4eb4b5db352a197df84255", Pod:"calico-kube-controllers-5f76d8bf97-mcssk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.40.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali467b96aa9d3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.169 [INFO][6118] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.169 [INFO][6118] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" iface="eth0" netns="" Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.169 [INFO][6118] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.169 [INFO][6118] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.179 [INFO][6134] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.179 [INFO][6134] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.179 [INFO][6134] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.183 [WARNING][6134] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.183 [INFO][6134] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" HandleID="k8s-pod-network.bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--kube--controllers--5f76d8bf97--mcssk-eth0" Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.184 [INFO][6134] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.185802 env[1575]: 2025-09-13 03:06:04.185 [INFO][6118] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0" Sep 13 03:06:04.186141 env[1575]: time="2025-09-13T03:06:04.185820148Z" level=info msg="TearDown network for sandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\" successfully" Sep 13 03:06:04.187225 env[1575]: time="2025-09-13T03:06:04.187213348Z" level=info msg="RemovePodSandbox \"bc7957a39920ef5dc2eaa6ab599f2d701001bcff3933c83f91fb05c92f4e84e0\" returns successfully" Sep 13 03:06:04.187418 env[1575]: time="2025-09-13T03:06:04.187378672Z" level=info msg="StopPodSandbox for \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\"" Sep 13 03:06:03.943000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001cd06e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.290 [WARNING][6163] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"9008353e-2c90-41f7-baad-336c80f2f4a8", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5", Pod:"goldmane-54d579b49d-2896r", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.40.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie7538e48334", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.291 [INFO][6163] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.291 [INFO][6163] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" iface="eth0" netns="" Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.291 [INFO][6163] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.291 [INFO][6163] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.305 [INFO][6185] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.306 [INFO][6185] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.306 [INFO][6185] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.309 [WARNING][6185] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.309 [INFO][6185] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.310 [INFO][6185] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.312210 env[1575]: 2025-09-13 03:06:04.311 [INFO][6163] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.312715 env[1575]: time="2025-09-13T03:06:04.312229926Z" level=info msg="TearDown network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\" successfully" Sep 13 03:06:04.312715 env[1575]: time="2025-09-13T03:06:04.312250475Z" level=info msg="StopPodSandbox for \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\" returns successfully" Sep 13 03:06:04.312715 env[1575]: time="2025-09-13T03:06:04.312533199Z" level=info msg="RemovePodSandbox for \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\"" Sep 13 03:06:04.312715 env[1575]: time="2025-09-13T03:06:04.312551009Z" level=info msg="Forcibly stopping sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\"" Sep 13 03:06:04.411934 kernel: audit: type=1300 audit(1757732763.943:1449): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001cd06e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:03.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.412 [WARNING][6211] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"9008353e-2c90-41f7-baad-336c80f2f4a8", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"54ba9458a7e3840138b6b3e3e1b09ca6dfab836b6ad40f526810a1f72ea7d1a5", Pod:"goldmane-54d579b49d-2896r", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.40.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calie7538e48334", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.412 [INFO][6211] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.412 [INFO][6211] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" iface="eth0" netns="" Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.412 [INFO][6211] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.412 [INFO][6211] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.422 [INFO][6230] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.423 [INFO][6230] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.423 [INFO][6230] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.426 [WARNING][6230] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.426 [INFO][6230] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" HandleID="k8s-pod-network.cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-goldmane--54d579b49d--2896r-eth0" Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.427 [INFO][6230] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.429640 env[1575]: 2025-09-13 03:06:04.428 [INFO][6211] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699" Sep 13 03:06:04.429986 env[1575]: time="2025-09-13T03:06:04.429660474Z" level=info msg="TearDown network for sandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\" successfully" Sep 13 03:06:04.431132 env[1575]: time="2025-09-13T03:06:04.431120053Z" level=info msg="RemovePodSandbox \"cb625de1d1ce34120916cd35377f76406f5532e5f113e2c3c5a32db4ef37b699\" returns successfully" Sep 13 03:06:04.431401 env[1575]: time="2025-09-13T03:06:04.431387301Z" level=info msg="StopPodSandbox for \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\"" Sep 13 03:06:04.506083 kernel: audit: type=1327 audit(1757732763.943:1449): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:04.506197 kernel: audit: type=1327 audit(1757732763.943:1450): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:03.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.506 [WARNING][6255] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.506 [INFO][6255] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.506 [INFO][6255] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" iface="eth0" netns="" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.506 [INFO][6255] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.506 [INFO][6255] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.516 [INFO][6268] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.516 [INFO][6268] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.516 [INFO][6268] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.520 [WARNING][6268] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.520 [INFO][6268] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.521 [INFO][6268] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.522959 env[1575]: 2025-09-13 03:06:04.522 [INFO][6255] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.523254 env[1575]: time="2025-09-13T03:06:04.522963083Z" level=info msg="TearDown network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\" successfully" Sep 13 03:06:04.523254 env[1575]: time="2025-09-13T03:06:04.522987194Z" level=info msg="StopPodSandbox for \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\" returns successfully" Sep 13 03:06:04.523254 env[1575]: time="2025-09-13T03:06:04.523224497Z" level=info msg="RemovePodSandbox for \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\"" Sep 13 03:06:04.523321 env[1575]: time="2025-09-13T03:06:04.523241740Z" level=info msg="Forcibly stopping sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\"" Sep 13 03:06:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.600 [WARNING][6294] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" WorkloadEndpoint="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.600 [INFO][6294] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.600 [INFO][6294] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" iface="eth0" netns="" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.600 [INFO][6294] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.600 [INFO][6294] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.610 [INFO][6310] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.610 [INFO][6310] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.610 [INFO][6310] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.614 [WARNING][6310] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.614 [INFO][6310] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" HandleID="k8s-pod-network.1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-whisker--749d6d88b7--7h9k2-eth0" Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.615 [INFO][6310] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.616453 env[1575]: 2025-09-13 03:06:04.615 [INFO][6294] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492" Sep 13 03:06:04.616453 env[1575]: time="2025-09-13T03:06:04.616438627Z" level=info msg="TearDown network for sandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\" successfully" Sep 13 03:06:04.629320 env[1575]: time="2025-09-13T03:06:04.629276606Z" level=info msg="RemovePodSandbox \"1d5d1403855a30b76d5337517c91d79beb1aee3d184abb0d2caa55ec74f38492\" returns successfully" Sep 13 03:06:04.629574 env[1575]: time="2025-09-13T03:06:04.629539021Z" level=info msg="StopPodSandbox for \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\"" Sep 13 03:06:04.690725 kernel: audit: type=1400 audit(1757732763.944:1451): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:04.690799 kernel: audit: type=1300 audit(1757732763.944:1451): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0019d1720 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0019d1720 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.691 [WARNING][6335] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"84539b9b-f46c-497d-8000-3665fcd3c774", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0", Pod:"csi-node-driver-b476g", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.40.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali650e9b92dba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.691 [INFO][6335] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.691 [INFO][6335] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" iface="eth0" netns="" Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.691 [INFO][6335] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.691 [INFO][6335] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.701 [INFO][6351] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.701 [INFO][6351] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.701 [INFO][6351] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.705 [WARNING][6351] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.705 [INFO][6351] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.706 [INFO][6351] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.707612 env[1575]: 2025-09-13 03:06:04.706 [INFO][6335] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.708012 env[1575]: time="2025-09-13T03:06:04.707629359Z" level=info msg="TearDown network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\" successfully" Sep 13 03:06:04.708012 env[1575]: time="2025-09-13T03:06:04.707649725Z" level=info msg="StopPodSandbox for \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\" returns successfully" Sep 13 03:06:04.708012 env[1575]: time="2025-09-13T03:06:04.707952431Z" level=info msg="RemovePodSandbox for \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\"" Sep 13 03:06:04.708012 env[1575]: time="2025-09-13T03:06:04.707977899Z" level=info msg="Forcibly stopping sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\"" Sep 13 03:06:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.813 [WARNING][6380] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"84539b9b-f46c-497d-8000-3665fcd3c774", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"60f2305e2a03cf2f31fcf4e53f01eeee2c33f168385d605c7d14338697b3b8f0", Pod:"csi-node-driver-b476g", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.40.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali650e9b92dba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.813 [INFO][6380] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.813 [INFO][6380] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" iface="eth0" netns="" Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.813 [INFO][6380] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.813 [INFO][6380] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.826 [INFO][6398] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.826 [INFO][6398] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.826 [INFO][6398] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.841 [WARNING][6398] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.841 [INFO][6398] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" HandleID="k8s-pod-network.cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-csi--node--driver--b476g-eth0" Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.842 [INFO][6398] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.844174 env[1575]: 2025-09-13 03:06:04.843 [INFO][6380] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5" Sep 13 03:06:04.844650 env[1575]: time="2025-09-13T03:06:04.844198194Z" level=info msg="TearDown network for sandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\" successfully" Sep 13 03:06:04.845967 env[1575]: time="2025-09-13T03:06:04.845950856Z" level=info msg="RemovePodSandbox \"cb108d66a7ec003081efe2abc26bd2d280e9fdb29647dc1233acec90df3e46b5\" returns successfully" Sep 13 03:06:04.846247 env[1575]: time="2025-09-13T03:06:04.846232586Z" level=info msg="StopPodSandbox for \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\"" Sep 13 03:06:04.906544 kernel: audit: type=1327 audit(1757732763.944:1451): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:04.906616 kernel: audit: type=1400 audit(1757732763.944:1452): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.907 [WARNING][6425] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"440e0220-08e0-41ce-8c9f-c4b5129f05d5", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775", Pod:"calico-apiserver-6ffc95647b-4d92j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif915a5d4ac9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.907 [INFO][6425] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.907 [INFO][6425] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" iface="eth0" netns="" Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.907 [INFO][6425] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.907 [INFO][6425] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.917 [INFO][6440] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.917 [INFO][6440] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.917 [INFO][6440] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.922 [WARNING][6440] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.922 [INFO][6440] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.923 [INFO][6440] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:04.924787 env[1575]: 2025-09-13 03:06:04.924 [INFO][6425] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:04.925121 env[1575]: time="2025-09-13T03:06:04.924805634Z" level=info msg="TearDown network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\" successfully" Sep 13 03:06:04.925121 env[1575]: time="2025-09-13T03:06:04.924826068Z" level=info msg="StopPodSandbox for \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\" returns successfully" Sep 13 03:06:04.925121 env[1575]: time="2025-09-13T03:06:04.925103164Z" level=info msg="RemovePodSandbox for \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\"" Sep 13 03:06:04.925172 env[1575]: time="2025-09-13T03:06:04.925120444Z" level=info msg="Forcibly stopping sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\"" Sep 13 03:06:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0019d1760 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:04.998 [WARNING][6463] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"440e0220-08e0-41ce-8c9f-c4b5129f05d5", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"793ab81d38f00f6bf9b7bbb3bd3711869a3c21d4c86ed5d7d66c813b47442775", Pod:"calico-apiserver-6ffc95647b-4d92j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif915a5d4ac9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:04.998 [INFO][6463] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:04.998 [INFO][6463] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" iface="eth0" netns="" Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:04.998 [INFO][6463] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:04.998 [INFO][6463] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:05.008 [INFO][6480] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:05.008 [INFO][6480] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:05.008 [INFO][6480] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:05.012 [WARNING][6480] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:05.012 [INFO][6480] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" HandleID="k8s-pod-network.3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--4d92j-eth0" Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:05.013 [INFO][6480] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:05.014786 env[1575]: 2025-09-13 03:06:05.014 [INFO][6463] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f" Sep 13 03:06:05.015146 env[1575]: time="2025-09-13T03:06:05.014804926Z" level=info msg="TearDown network for sandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\" successfully" Sep 13 03:06:05.026949 env[1575]: time="2025-09-13T03:06:05.026905656Z" level=info msg="RemovePodSandbox \"3932cf438b823c0d4f3b9d944f1583d9a74cf416ffdc603afe3ceff459316f7f\" returns successfully" Sep 13 03:06:05.027178 env[1575]: time="2025-09-13T03:06:05.027142106Z" level=info msg="StopPodSandbox for \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\"" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.049 [WARNING][6506] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fe014c83-bfbb-406d-8207-f066f50c73f7", ResourceVersion:"1012", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba", Pod:"coredns-674b8bbfcf-bdv2h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia701f7cd8ee", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.050 [INFO][6506] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.050 [INFO][6506] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" iface="eth0" netns="" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.050 [INFO][6506] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.050 [INFO][6506] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.094 [INFO][6521] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.094 [INFO][6521] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.094 [INFO][6521] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.104 [WARNING][6521] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.104 [INFO][6521] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.107 [INFO][6521] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:05.111491 env[1575]: 2025-09-13 03:06:05.109 [INFO][6506] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.112934 env[1575]: time="2025-09-13T03:06:05.111522662Z" level=info msg="TearDown network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\" successfully" Sep 13 03:06:05.112934 env[1575]: time="2025-09-13T03:06:05.111580274Z" level=info msg="StopPodSandbox for \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\" returns successfully" Sep 13 03:06:05.112934 env[1575]: time="2025-09-13T03:06:05.112168916Z" level=info msg="RemovePodSandbox for \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\"" Sep 13 03:06:05.112934 env[1575]: time="2025-09-13T03:06:05.112221265Z" level=info msg="Forcibly stopping sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\"" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.166 [WARNING][6549] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fe014c83-bfbb-406d-8207-f066f50c73f7", ResourceVersion:"1012", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"945d6ce393804302ca7d927567dfdeab434e67d7f5c175a453c8220e01d696ba", Pod:"coredns-674b8bbfcf-bdv2h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia701f7cd8ee", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.166 [INFO][6549] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.166 [INFO][6549] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" iface="eth0" netns="" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.166 [INFO][6549] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.166 [INFO][6549] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.190 [INFO][6567] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.190 [INFO][6567] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.190 [INFO][6567] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.197 [WARNING][6567] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.197 [INFO][6567] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" HandleID="k8s-pod-network.ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--bdv2h-eth0" Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.199 [INFO][6567] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:05.202066 env[1575]: 2025-09-13 03:06:05.200 [INFO][6549] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33" Sep 13 03:06:05.202066 env[1575]: time="2025-09-13T03:06:05.202022349Z" level=info msg="TearDown network for sandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\" successfully" Sep 13 03:06:05.204779 env[1575]: time="2025-09-13T03:06:05.204723126Z" level=info msg="RemovePodSandbox \"ac6c6ef598ea955dc419add8c0f44077fceb5de7ba4c6801ab9fc1f62b63ea33\" returns successfully" Sep 13 03:06:05.205170 env[1575]: time="2025-09-13T03:06:05.205137819Z" level=info msg="StopPodSandbox for \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\"" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.237 [WARNING][6594] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"53dcf495-08a8-4cac-abf1-7ac4993f1d7d", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252", Pod:"coredns-674b8bbfcf-kp2ms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6c1b57483a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.238 [INFO][6594] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.238 [INFO][6594] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" iface="eth0" netns="" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.238 [INFO][6594] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.238 [INFO][6594] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.258 [INFO][6612] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.258 [INFO][6612] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.258 [INFO][6612] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.265 [WARNING][6612] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.265 [INFO][6612] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.266 [INFO][6612] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:05.269057 env[1575]: 2025-09-13 03:06:05.267 [INFO][6594] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.269922 env[1575]: time="2025-09-13T03:06:05.269138342Z" level=info msg="TearDown network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\" successfully" Sep 13 03:06:05.269922 env[1575]: time="2025-09-13T03:06:05.269176455Z" level=info msg="StopPodSandbox for \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\" returns successfully" Sep 13 03:06:05.269922 env[1575]: time="2025-09-13T03:06:05.269619879Z" level=info msg="RemovePodSandbox for \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\"" Sep 13 03:06:05.269922 env[1575]: time="2025-09-13T03:06:05.269658390Z" level=info msg="Forcibly stopping sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\"" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.302 [WARNING][6640] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"53dcf495-08a8-4cac-abf1-7ac4993f1d7d", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"f0415ef4345347d5da6001512e023c573988c232bfc0f0210a694451e2854252", Pod:"coredns-674b8bbfcf-kp2ms", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.40.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6c1b57483a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.302 [INFO][6640] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.302 [INFO][6640] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" iface="eth0" netns="" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.302 [INFO][6640] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.302 [INFO][6640] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.322 [INFO][6659] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.322 [INFO][6659] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.322 [INFO][6659] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.329 [WARNING][6659] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.329 [INFO][6659] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" HandleID="k8s-pod-network.c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-coredns--674b8bbfcf--kp2ms-eth0" Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.330 [INFO][6659] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:05.333562 env[1575]: 2025-09-13 03:06:05.332 [INFO][6640] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693" Sep 13 03:06:05.334206 env[1575]: time="2025-09-13T03:06:05.333565194Z" level=info msg="TearDown network for sandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\" successfully" Sep 13 03:06:05.336202 env[1575]: time="2025-09-13T03:06:05.336140568Z" level=info msg="RemovePodSandbox \"c6c987dc670483d116c35f6e35e4052b21b0771f99b7cd73f02b6dc47575e693\" returns successfully" Sep 13 03:06:05.336646 env[1575]: time="2025-09-13T03:06:05.336587389Z" level=info msg="StopPodSandbox for \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\"" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.369 [WARNING][6687] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"bcea16e9-21a3-4755-b83a-ac7b4f597078", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99", Pod:"calico-apiserver-6ffc95647b-s46sh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a31ff9146f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.369 [INFO][6687] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.369 [INFO][6687] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" iface="eth0" netns="" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.369 [INFO][6687] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.369 [INFO][6687] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.392 [INFO][6704] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.392 [INFO][6704] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.392 [INFO][6704] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.400 [WARNING][6704] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.400 [INFO][6704] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.401 [INFO][6704] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:05.404461 env[1575]: 2025-09-13 03:06:05.403 [INFO][6687] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.405239 env[1575]: time="2025-09-13T03:06:05.404490426Z" level=info msg="TearDown network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\" successfully" Sep 13 03:06:05.405239 env[1575]: time="2025-09-13T03:06:05.404522459Z" level=info msg="StopPodSandbox for \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\" returns successfully" Sep 13 03:06:05.405239 env[1575]: time="2025-09-13T03:06:05.404975041Z" level=info msg="RemovePodSandbox for \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\"" Sep 13 03:06:05.405239 env[1575]: time="2025-09-13T03:06:05.405007402Z" level=info msg="Forcibly stopping sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\"" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.435 [WARNING][6730] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0", GenerateName:"calico-apiserver-6ffc95647b-", Namespace:"calico-apiserver", SelfLink:"", UID:"bcea16e9-21a3-4755-b83a-ac7b4f597078", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 3, 5, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6ffc95647b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-ba666c4ddc", ContainerID:"21fa29a766116a3340e0ef5a10ee45156338bc59adbef3c1e74596ff9fef8f99", Pod:"calico-apiserver-6ffc95647b-s46sh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.40.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1a31ff9146f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.435 [INFO][6730] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.435 [INFO][6730] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" iface="eth0" netns="" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.435 [INFO][6730] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.435 [INFO][6730] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.452 [INFO][6745] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.452 [INFO][6745] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.452 [INFO][6745] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.466 [WARNING][6745] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.466 [INFO][6745] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" HandleID="k8s-pod-network.bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Workload="ci--3510.3.8--n--ba666c4ddc-k8s-calico--apiserver--6ffc95647b--s46sh-eth0" Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.467 [INFO][6745] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 03:06:05.469406 env[1575]: 2025-09-13 03:06:05.468 [INFO][6730] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b" Sep 13 03:06:05.469973 env[1575]: time="2025-09-13T03:06:05.469434273Z" level=info msg="TearDown network for sandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\" successfully" Sep 13 03:06:05.471326 env[1575]: time="2025-09-13T03:06:05.471307281Z" level=info msg="RemovePodSandbox \"bdd87cfac8ade21622a85c24d4952c828f84a19cb36dce83850642e610be4b5b\" returns successfully" Sep 13 03:06:13.973376 kubelet[2517]: I0913 03:06:13.973312 2517 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 03:06:14.012000 audit[6766]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=6766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:14.040816 kernel: kauditd_printk_skb: 2 callbacks suppressed Sep 13 03:06:14.040906 kernel: audit: type=1325 audit(1757732774.012:1453): table=filter:126 family=2 entries=10 op=nft_register_rule pid=6766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:14.012000 audit[6766]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeb30beb80 a2=0 a3=7ffeb30beb6c items=0 ppid=2721 pid=6766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:14.197885 kernel: audit: type=1300 audit(1757732774.012:1453): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeb30beb80 a2=0 a3=7ffeb30beb6c items=0 ppid=2721 pid=6766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:14.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:14.256294 kernel: audit: type=1327 audit(1757732774.012:1453): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:14.267000 audit[6766]: NETFILTER_CFG table=nat:127 family=2 entries=36 op=nft_register_chain pid=6766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:14.267000 audit[6766]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffeb30beb80 a2=0 a3=7ffeb30beb6c items=0 ppid=2721 pid=6766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:14.425989 kernel: audit: type=1325 audit(1757732774.267:1454): table=nat:127 family=2 entries=36 op=nft_register_chain pid=6766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:14.426076 kernel: audit: type=1300 audit(1757732774.267:1454): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffeb30beb80 a2=0 a3=7ffeb30beb6c items=0 ppid=2721 pid=6766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:14.426094 kernel: audit: type=1327 audit(1757732774.267:1454): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:14.267000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:22.340000 audit[6839]: NETFILTER_CFG table=filter:128 family=2 entries=9 op=nft_register_rule pid=6839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:22.340000 audit[6839]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffa951a9e0 a2=0 a3=7fffa951a9cc items=0 ppid=2721 pid=6839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:22.499158 kernel: audit: type=1325 audit(1757732782.340:1455): table=filter:128 family=2 entries=9 op=nft_register_rule pid=6839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:22.499253 kernel: audit: type=1300 audit(1757732782.340:1455): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffa951a9e0 a2=0 a3=7fffa951a9cc items=0 ppid=2721 pid=6839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:22.499289 kernel: audit: type=1327 audit(1757732782.340:1455): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:22.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:22.563000 audit[6839]: NETFILTER_CFG table=nat:129 family=2 entries=31 op=nft_register_chain pid=6839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:22.563000 audit[6839]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffa951a9e0 a2=0 a3=7fffa951a9cc items=0 ppid=2721 pid=6839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:22.722467 kernel: audit: type=1325 audit(1757732782.563:1456): table=nat:129 family=2 entries=31 op=nft_register_chain pid=6839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:06:22.722532 kernel: audit: type=1300 audit(1757732782.563:1456): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffa951a9e0 a2=0 a3=7fffa951a9cc items=0 ppid=2721 pid=6839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:06:22.722555 kernel: audit: type=1327 audit(1757732782.563:1456): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:22.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:06:48.214000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:06:48.214000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00016b700 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:06:48.435156 kernel: audit: type=1400 audit(1757732808.214:1457): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:06:48.435201 kernel: audit: type=1300 audit(1757732808.214:1457): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00016b700 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:06:48.435222 kernel: audit: type=1327 audit(1757732808.214:1457): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:06:48.214000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:06:51.549000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:06:51.549000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021386e0 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:06:51.769489 kernel: audit: type=1400 audit(1757732811.549:1458): avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:06:51.769534 kernel: audit: type=1300 audit(1757732811.549:1458): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021386e0 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:06:51.769551 kernel: audit: type=1327 audit(1757732811.549:1458): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:06:51.549000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:06:59.818000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:59.818000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:59.913343 kernel: audit: type=1400 audit(1757732819.818:1459): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:59.913382 kernel: audit: type=1400 audit(1757732819.818:1460): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:06:59.818000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016e2880 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:00.129703 kernel: audit: type=1300 audit(1757732819.818:1459): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016e2880 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:00.129776 kernel: audit: type=1327 audit(1757732819.818:1459): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:59.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:07:00.224080 kernel: audit: type=1300 audit(1757732819.818:1460): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00133ae40 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:06:59.818000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00133ae40 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:00.345937 kernel: audit: type=1327 audit(1757732819.818:1460): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:06:59.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:07:00.440114 kernel: audit: type=1400 audit(1757732820.066:1461): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.532104 kernel: audit: type=1300 audit(1757732820.066:1461): arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c0124e7d40 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:07:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c0124e7d40 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:07:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:07:00.725215 kernel: audit: type=1327 audit(1757732820.066:1461): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:07:00.725250 kernel: audit: type=1400 audit(1757732820.066:1462): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c005665bc0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:07:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:07:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c005665be0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:07:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:07:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c013a146f0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:07:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:07:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c008ab2cc0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:07:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:07:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c012a3a0f0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:07:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:07:01.027899 update_engine[1568]: I0913 03:07:01.027676 1568 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Sep 13 03:07:01.027899 update_engine[1568]: I0913 03:07:01.027755 1568 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Sep 13 03:07:01.028929 update_engine[1568]: I0913 03:07:01.028591 1568 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Sep 13 03:07:01.029774 update_engine[1568]: I0913 03:07:01.029697 1568 omaha_request_params.cc:62] Current group set to lts Sep 13 03:07:01.030040 update_engine[1568]: I0913 03:07:01.029996 1568 update_attempter.cc:499] Already updated boot flags. Skipping. Sep 13 03:07:01.030040 update_engine[1568]: I0913 03:07:01.030018 1568 update_attempter.cc:643] Scheduling an action processor start. Sep 13 03:07:01.030305 update_engine[1568]: I0913 03:07:01.030051 1568 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 13 03:07:01.030305 update_engine[1568]: I0913 03:07:01.030118 1568 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Sep 13 03:07:01.030305 update_engine[1568]: I0913 03:07:01.030277 1568 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 13 03:07:01.030305 update_engine[1568]: I0913 03:07:01.030299 1568 omaha_request_action.cc:271] Request: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.030305 update_engine[1568]: Sep 13 03:07:01.031363 update_engine[1568]: I0913 03:07:01.030323 1568 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 03:07:01.031463 locksmithd[1616]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Sep 13 03:07:01.033737 update_engine[1568]: I0913 03:07:01.033660 1568 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 03:07:01.033963 update_engine[1568]: E0913 03:07:01.033901 1568 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 03:07:01.034095 update_engine[1568]: I0913 03:07:01.034065 1568 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Sep 13 03:07:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016e2b00 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:07:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001a80c40 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:07:03.945000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:03.945000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018adc20 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:03.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:07:03.945000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:03.945000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018adc40 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:03.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:07:10.974511 update_engine[1568]: I0913 03:07:10.974390 1568 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 03:07:10.975575 update_engine[1568]: I0913 03:07:10.974929 1568 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 03:07:10.975575 update_engine[1568]: E0913 03:07:10.975155 1568 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 03:07:10.975575 update_engine[1568]: I0913 03:07:10.975443 1568 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Sep 13 03:07:20.974523 update_engine[1568]: I0913 03:07:20.974403 1568 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 03:07:20.975518 update_engine[1568]: I0913 03:07:20.974910 1568 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 03:07:20.975518 update_engine[1568]: E0913 03:07:20.975133 1568 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 03:07:20.975518 update_engine[1568]: I0913 03:07:20.975343 1568 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Sep 13 03:07:30.974477 update_engine[1568]: I0913 03:07:30.974350 1568 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 03:07:30.975428 update_engine[1568]: I0913 03:07:30.974892 1568 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 03:07:30.975428 update_engine[1568]: E0913 03:07:30.975142 1568 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 03:07:30.975428 update_engine[1568]: I0913 03:07:30.975356 1568 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 13 03:07:30.975428 update_engine[1568]: I0913 03:07:30.975381 1568 omaha_request_action.cc:621] Omaha request response: Sep 13 03:07:30.975841 update_engine[1568]: E0913 03:07:30.975544 1568 omaha_request_action.cc:640] Omaha request network transfer failed. Sep 13 03:07:30.975841 update_engine[1568]: I0913 03:07:30.975579 1568 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Sep 13 03:07:30.975841 update_engine[1568]: I0913 03:07:30.975589 1568 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 03:07:30.975841 update_engine[1568]: I0913 03:07:30.975597 1568 update_attempter.cc:306] Processing Done. Sep 13 03:07:30.975841 update_engine[1568]: E0913 03:07:30.975622 1568 update_attempter.cc:619] Update failed. Sep 13 03:07:30.975841 update_engine[1568]: I0913 03:07:30.975631 1568 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Sep 13 03:07:30.975841 update_engine[1568]: I0913 03:07:30.975641 1568 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Sep 13 03:07:30.975841 update_engine[1568]: I0913 03:07:30.975651 1568 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Sep 13 03:07:30.975841 update_engine[1568]: I0913 03:07:30.975800 1568 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.975852 1568 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.975863 1568 omaha_request_action.cc:271] Request: Sep 13 03:07:30.976841 update_engine[1568]: Sep 13 03:07:30.976841 update_engine[1568]: Sep 13 03:07:30.976841 update_engine[1568]: Sep 13 03:07:30.976841 update_engine[1568]: Sep 13 03:07:30.976841 update_engine[1568]: Sep 13 03:07:30.976841 update_engine[1568]: Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.975873 1568 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976191 1568 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 03:07:30.976841 update_engine[1568]: E0913 03:07:30.976393 1568 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976533 1568 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976548 1568 omaha_request_action.cc:621] Omaha request response: Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976559 1568 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976567 1568 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976575 1568 update_attempter.cc:306] Processing Done. Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976583 1568 update_attempter.cc:310] Error event sent. Sep 13 03:07:30.976841 update_engine[1568]: I0913 03:07:30.976604 1568 update_check_scheduler.cc:74] Next update check in 40m50s Sep 13 03:07:30.978447 locksmithd[1616]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Sep 13 03:07:30.978447 locksmithd[1616]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Sep 13 03:07:48.215000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:07:48.242826 kernel: kauditd_printk_skb: 26 callbacks suppressed Sep 13 03:07:48.242912 kernel: audit: type=1400 audit(1757732868.215:1471): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:07:48.215000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0004011e0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:07:48.339324 kernel: audit: type=1300 audit(1757732868.215:1471): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0004011e0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:07:48.215000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:07:48.554405 kernel: audit: type=1327 audit(1757732868.215:1471): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:07:51.551000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:07:51.551000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002138840 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:07:51.768890 kernel: audit: type=1400 audit(1757732871.551:1472): avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:07:51.768979 kernel: audit: type=1300 audit(1757732871.551:1472): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002138840 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:07:51.768995 kernel: audit: type=1327 audit(1757732871.551:1472): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:07:51.551000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:07:59.818000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:59.818000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d60840 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:59.913329 kernel: audit: type=1400 audit(1757732879.818:1473): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:59.913405 kernel: audit: type=1300 audit(1757732879.818:1473): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d60840 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:07:59.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:00.127410 kernel: audit: type=1327 audit(1757732879.818:1473): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:00.127485 kernel: audit: type=1400 audit(1757732879.818:1474): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:59.818000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:07:59.818000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00155c000 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:00.337419 kernel: audit: type=1300 audit(1757732879.818:1474): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00155c000 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:00.337454 kernel: audit: type=1327 audit(1757732879.818:1474): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:07:59.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:00.430648 kernel: audit: type=1400 audit(1757732880.066:1475): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.520553 kernel: audit: type=1300 audit(1757732880.066:1475): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01128b4a0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:08:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01128b4a0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:08:00.618767 kernel: audit: type=1327 audit(1757732880.066:1475): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:08:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:08:00.712710 kernel: audit: type=1400 audit(1757732880.066:1476): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01128b4c0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:08:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:08:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c007cabe60 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:08:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:08:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c005738480 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:08:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:08:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c007cabf20 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:08:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:08:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c003874030 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:08:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:08:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001dca460 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ea8fa0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001ea8fc0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001dca480 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:14.984696 systemd[1]: Started sshd@9-86.109.11.213:22-91.224.92.106:64098.service. Sep 13 03:08:14.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-86.109.11.213:22-91.224.92.106:64098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:08:15.012133 kernel: kauditd_printk_skb: 26 callbacks suppressed Sep 13 03:08:15.012168 kernel: audit: type=1130 audit(1757732894.983:1485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-86.109.11.213:22-91.224.92.106:64098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:08:15.880313 sshd[7249]: Received disconnect from 91.224.92.106 port 64098:11: [preauth] Sep 13 03:08:15.880313 sshd[7249]: Disconnected from 91.224.92.106 port 64098 [preauth] Sep 13 03:08:15.882418 systemd[1]: sshd@9-86.109.11.213:22-91.224.92.106:64098.service: Deactivated successfully. Sep 13 03:08:15.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-86.109.11.213:22-91.224.92.106:64098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:08:15.974294 kernel: audit: type=1131 audit(1757732895.881:1486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-86.109.11.213:22-91.224.92.106:64098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:08:48.215000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:08:48.215000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00199a000 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:08:48.436547 kernel: audit: type=1400 audit(1757732928.215:1487): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:08:48.436637 kernel: audit: type=1300 audit(1757732928.215:1487): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00199a000 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:08:48.436654 kernel: audit: type=1327 audit(1757732928.215:1487): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:08:48.215000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:08:51.550000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:08:51.550000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021ec060 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:08:51.773101 kernel: audit: type=1400 audit(1757732931.550:1488): avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:08:51.773134 kernel: audit: type=1300 audit(1757732931.550:1488): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021ec060 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:08:51.773150 kernel: audit: type=1327 audit(1757732931.550:1488): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:08:51.550000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:08:59.818000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:08:59.818000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.003364 kernel: audit: type=1400 audit(1757732939.818:1490): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.003481 kernel: audit: type=1400 audit(1757732939.818:1489): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.003529 kernel: audit: type=1300 audit(1757732939.818:1490): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00152a1e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:59.818000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00152a1e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:08:59.818000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002032de0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:00.246326 kernel: audit: type=1300 audit(1757732939.818:1489): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002032de0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:00.246408 kernel: audit: type=1327 audit(1757732939.818:1489): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:59.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:08:59.818000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:00.432560 kernel: audit: type=1327 audit(1757732939.818:1490): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:00.432601 kernel: audit: type=1400 audit(1757732940.066:1491): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0134bfa40 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:09:00.622712 kernel: audit: type=1300 audit(1757732940.066:1491): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0134bfa40 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:09:00.622769 kernel: audit: type=1327 audit(1757732940.066:1491): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:09:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:09:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.810269 kernel: audit: type=1400 audit(1757732940.066:1492): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00d983740 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:09:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:09:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00d9837a0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:09:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:09:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00ef79500 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:09:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:09:00.066000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.066000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c006f21e00 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:09:00.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:09:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c013ac9500 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:09:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:09:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001dca700 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00041a5c0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:03.944000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:03.944000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018ad2a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:03.944000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:03.945000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:03.945000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018ad2e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:03.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:48.216000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:09:48.261034 kernel: kauditd_printk_skb: 26 callbacks suppressed Sep 13 03:09:48.261160 kernel: audit: type=1400 audit(1757732988.216:1501): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:09:48.216000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001d4a380 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:09:48.477683 kernel: audit: type=1300 audit(1757732988.216:1501): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001d4a380 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:09:48.477752 kernel: audit: type=1327 audit(1757732988.216:1501): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:09:48.216000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:09:51.552000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:09:51.552000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002026260 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:09:51.771416 kernel: audit: type=1400 audit(1757732991.552:1502): avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:09:51.771470 kernel: audit: type=1300 audit(1757732991.552:1502): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002026260 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:09:51.771519 kernel: audit: type=1327 audit(1757732991.552:1502): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:09:51.552000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:09:59.819000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:59.819000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0020324e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:59.914274 kernel: audit: type=1400 audit(1757732999.819:1503): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:09:59.914306 kernel: audit: type=1300 audit(1757732999.819:1503): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0020324e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:10:00.033330 kernel: audit: type=1327 audit(1757732999.819:1503): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:59.819000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:59.820000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.217176 kernel: audit: type=1400 audit(1757732999.820:1504): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.217248 kernel: audit: type=1300 audit(1757732999.820:1504): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c1a300 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:09:59.820000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c1a300 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:10:00.337320 kernel: audit: type=1327 audit(1757732999.820:1504): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:09:59.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:10:00.430361 kernel: audit: type=1400 audit(1757733000.067:1505): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.067000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.067000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c011d48cc0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:10:00.619760 kernel: audit: type=1300 audit(1757733000.067:1505): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c011d48cc0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:10:00.619801 kernel: audit: type=1327 audit(1757733000.067:1505): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:10:00.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:10:00.713610 kernel: audit: type=1400 audit(1757733000.067:1506): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.067000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.067000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c01157eca0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:10:00.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:10:00.067000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.067000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c011d48cf0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:10:00.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:10:00.067000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.067000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c010db8b20 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:10:00.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:10:00.067000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.067000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c011d48d20 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:10:00.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:10:00.069000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:00.069000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c005b8b290 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:10:00.069000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:10:03.945000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:03.945000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002032880 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:10:03.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:10:03.946000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:03.946000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003780180 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:10:03.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:10:03.946000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:03.946000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001e26180 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:10:03.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:10:03.946000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:03.946000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001f34060 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:10:03.946000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:10:48.218000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:10:48.261947 kernel: kauditd_printk_skb: 26 callbacks suppressed Sep 13 03:10:48.262053 kernel: audit: type=1400 audit(1757733048.218:1515): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:10:48.218000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001d4a0c0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:10:48.481600 kernel: audit: type=1300 audit(1757733048.218:1515): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001d4a0c0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:10:48.481645 kernel: audit: type=1327 audit(1757733048.218:1515): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:10:48.218000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:10:51.553000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:10:51.553000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021ec400 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:10:51.772002 kernel: audit: type=1400 audit(1757733051.553:1516): avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:10:51.772081 kernel: audit: type=1300 audit(1757733051.553:1516): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021ec400 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:10:51.772154 kernel: audit: type=1327 audit(1757733051.553:1516): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:10:51.553000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:10:59.821000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:59.821000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012158a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:00.035960 kernel: audit: type=1400 audit(1757733059.821:1517): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.036048 kernel: audit: type=1300 audit(1757733059.821:1517): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012158a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:00.036092 kernel: audit: type=1327 audit(1757733059.821:1517): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:10:59.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:00.129279 kernel: audit: type=1400 audit(1757733059.821:1518): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:59.821000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:10:59.821000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d1c090 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:00.340699 kernel: audit: type=1300 audit(1757733059.821:1518): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d1c090 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:00.340736 kernel: audit: type=1327 audit(1757733059.821:1518): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:10:59.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.523875 kernel: audit: type=1400 audit(1757733060.068:1519): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.523916 kernel: audit: type=1300 audit(1757733060.068:1519): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c011146320 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:11:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c011146320 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:11:00.622141 kernel: audit: type=1327 audit(1757733060.068:1519): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:11:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:11:00.716060 kernel: audit: type=1400 audit(1757733060.068:1520): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00aa4aea0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:11:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0102e7050 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:11:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:11:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c011146340 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:11:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:11:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:11:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c012ec1a70 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:11:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:11:00.070000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:00.070000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c012ec1b30 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:11:00.070000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:11:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00155ce20 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e91e40 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012158c0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c00155cec0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:48.218000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:11:48.246736 kernel: kauditd_printk_skb: 26 callbacks suppressed Sep 13 03:11:48.246824 kernel: audit: type=1400 audit(1757733108.218:1529): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:11:48.218000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00016b420 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:11:48.465195 kernel: audit: type=1300 audit(1757733108.218:1529): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00016b420 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:11:48.465233 kernel: audit: type=1327 audit(1757733108.218:1529): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:11:48.218000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:11:51.553000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:11:51.553000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00106c5c0 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:11:51.774456 kernel: audit: type=1400 audit(1757733111.553:1530): avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:11:51.774493 kernel: audit: type=1300 audit(1757733111.553:1530): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00106c5c0 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:11:51.774511 kernel: audit: type=1327 audit(1757733111.553:1530): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:11:51.553000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:11:59.821000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:11:59.821000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001e265e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:00.037715 kernel: audit: type=1400 audit(1757733119.821:1531): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.037773 kernel: audit: type=1300 audit(1757733119.821:1531): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001e265e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:00.037793 kernel: audit: type=1327 audit(1757733119.821:1531): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:59.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:59.821000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.222119 kernel: audit: type=1400 audit(1757733119.821:1532): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.222157 kernel: audit: type=1300 audit(1757733119.821:1532): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001e12510 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:11:59.821000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001e12510 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:00.342444 kernel: audit: type=1327 audit(1757733119.821:1532): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:11:59.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:12:00.435635 kernel: audit: type=1400 audit(1757733120.068:1533): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00f6ab830 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:12:00.625087 kernel: audit: type=1300 audit(1757733120.068:1533): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00f6ab830 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:12:00.625129 kernel: audit: type=1327 audit(1757733120.068:1533): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:12:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:12:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.809828 kernel: audit: type=1400 audit(1757733120.068:1534): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0136aa640 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:12:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:12:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0103a4a20 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:12:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:12:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0135f0080 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:12:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:12:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00e5dc750 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:12:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:12:00.070000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:00.070000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0103a4ab0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:12:00.070000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:12:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00155c420 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:12:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0024b05a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:12:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001e266a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:12:03.948000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:03.948000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0024b05e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:03.948000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:12:04.590958 systemd[1]: Started sshd@10-86.109.11.213:22-80.94.95.116:15272.service. Sep 13 03:12:04.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-86.109.11.213:22-80.94.95.116:15272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:12:07.408507 sshd[8218]: Invalid user 1234 from 80.94.95.116 port 15272 Sep 13 03:12:08.461222 sshd[8218]: pam_faillock(sshd:auth): User unknown Sep 13 03:12:08.461574 sshd[8218]: pam_unix(sshd:auth): check pass; user unknown Sep 13 03:12:08.460000 audit[8218]: USER_AUTH pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="1234" exe="/usr/sbin/sshd" hostname=80.94.95.116 addr=80.94.95.116 terminal=ssh res=failed' Sep 13 03:12:08.461714 sshd[8218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.116 Sep 13 03:12:08.461931 sshd[8218]: pam_faillock(sshd:auth): User unknown Sep 13 03:12:08.489183 kernel: kauditd_printk_skb: 27 callbacks suppressed Sep 13 03:12:08.489223 kernel: audit: type=1100 audit(1757733128.460:1544): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="1234" exe="/usr/sbin/sshd" hostname=80.94.95.116 addr=80.94.95.116 terminal=ssh res=failed' Sep 13 03:12:10.075498 sshd[8218]: Failed password for invalid user 1234 from 80.94.95.116 port 15272 ssh2 Sep 13 03:12:10.572806 sshd[8218]: Connection closed by invalid user 1234 80.94.95.116 port 15272 [preauth] Sep 13 03:12:10.575413 systemd[1]: sshd@10-86.109.11.213:22-80.94.95.116:15272.service: Deactivated successfully. Sep 13 03:12:10.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-86.109.11.213:22-80.94.95.116:15272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:12:10.666354 kernel: audit: type=1131 audit(1757733130.574:1545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-86.109.11.213:22-80.94.95.116:15272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:12:38.849877 systemd[1]: Started sshd@11-86.109.11.213:22-91.224.92.106:64820.service. Sep 13 03:12:38.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-86.109.11.213:22-91.224.92.106:64820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:12:38.941470 kernel: audit: type=1130 audit(1757733158.848:1546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-86.109.11.213:22-91.224.92.106:64820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:12:39.780365 sshd[8307]: Received disconnect from 91.224.92.106 port 64820:11: [preauth] Sep 13 03:12:39.780365 sshd[8307]: Disconnected from 91.224.92.106 port 64820 [preauth] Sep 13 03:12:39.782432 systemd[1]: sshd@11-86.109.11.213:22-91.224.92.106:64820.service: Deactivated successfully. Sep 13 03:12:39.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-86.109.11.213:22-91.224.92.106:64820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:12:39.874495 kernel: audit: type=1131 audit(1757733159.781:1547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-86.109.11.213:22-91.224.92.106:64820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:12:48.218000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:12:48.218000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00016b4e0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:12:48.439693 kernel: audit: type=1400 audit(1757733168.218:1548): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:12:48.439736 kernel: audit: type=1300 audit(1757733168.218:1548): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00016b4e0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:12:48.439758 kernel: audit: type=1327 audit(1757733168.218:1548): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:12:48.218000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:12:51.554000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:12:51.554000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021ec2c0 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:12:51.773802 kernel: audit: type=1400 audit(1757733171.554:1549): avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:12:51.773840 kernel: audit: type=1300 audit(1757733171.554:1549): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021ec2c0 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:12:51.773861 kernel: audit: type=1327 audit(1757733171.554:1549): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:12:51.554000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:12:59.822000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:59.822000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001dcad20 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:00.042341 kernel: audit: type=1400 audit(1757733179.822:1550): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.042418 kernel: audit: type=1300 audit(1757733179.822:1550): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001dcad20 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:00.042449 kernel: audit: type=1327 audit(1757733179.822:1550): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:12:59.822000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:00.137322 kernel: audit: type=1400 audit(1757733179.822:1551): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:12:59.822000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.228766 kernel: audit: type=1300 audit(1757733179.822:1551): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00241b080 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:12:59.822000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00241b080 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:00.350199 kernel: audit: type=1327 audit(1757733179.822:1551): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:12:59.822000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.536363 kernel: audit: type=1400 audit(1757733180.068:1552): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.536402 kernel: audit: type=1300 audit(1757733180.068:1552): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00e9f8fc0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:13:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00e9f8fc0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:13:00.635458 kernel: audit: type=1327 audit(1757733180.068:1552): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:13:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:13:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.821826 kernel: audit: type=1400 audit(1757733180.068:1553): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c008f6a8c0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:13:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:13:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c00e9f9020 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:13:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:13:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c007828de0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:13:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:13:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0125ad260 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:13:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:13:00.071000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:00.071000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c006777aa0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:13:00.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:13:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001dcae80 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003781160 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00041b6a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002032000 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:11.153526 systemd[1]: Started sshd@12-86.109.11.213:22-139.178.89.65:49818.service. Sep 13 03:13:11.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-86.109.11.213:22-139.178.89.65:49818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:11.195515 kernel: kauditd_printk_skb: 26 callbacks suppressed Sep 13 03:13:11.195624 kernel: audit: type=1130 audit(1757733191.153:1562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-86.109.11.213:22-139.178.89.65:49818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:11.316000 audit[8450]: USER_ACCT pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.317350 sshd[8450]: Accepted publickey for core from 139.178.89.65 port 49818 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:11.318576 sshd[8450]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:11.321185 systemd-logind[1566]: New session 12 of user core. Sep 13 03:13:11.321704 systemd[1]: Started session-12.scope. Sep 13 03:13:11.400213 sshd[8450]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:11.401749 systemd[1]: sshd@12-86.109.11.213:22-139.178.89.65:49818.service: Deactivated successfully. Sep 13 03:13:11.402206 systemd[1]: session-12.scope: Deactivated successfully. Sep 13 03:13:11.402587 systemd-logind[1566]: Session 12 logged out. Waiting for processes to exit. Sep 13 03:13:11.403044 systemd-logind[1566]: Removed session 12. Sep 13 03:13:11.318000 audit[8450]: CRED_ACQ pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.500610 kernel: audit: type=1101 audit(1757733191.316:1563): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.500642 kernel: audit: type=1103 audit(1757733191.318:1564): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.500661 kernel: audit: type=1006 audit(1757733191.318:1565): pid=8450 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 13 03:13:11.559602 kernel: audit: type=1300 audit(1757733191.318:1565): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd58d65100 a2=3 a3=0 items=0 ppid=1 pid=8450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:11.318000 audit[8450]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd58d65100 a2=3 a3=0 items=0 ppid=1 pid=8450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:11.652343 kernel: audit: type=1327 audit(1757733191.318:1565): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:11.318000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:11.683130 kernel: audit: type=1105 audit(1757733191.323:1566): pid=8450 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.323000 audit[8450]: USER_START pid=8450 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.324000 audit[8452]: CRED_ACQ pid=8452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.400000 audit[8450]: USER_END pid=8450 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.868326 kernel: audit: type=1103 audit(1757733191.324:1567): pid=8452 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.868368 kernel: audit: type=1106 audit(1757733191.400:1568): pid=8450 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.400000 audit[8450]: CRED_DISP pid=8450 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:12.052123 kernel: audit: type=1104 audit(1757733191.400:1569): pid=8450 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:11.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-86.109.11.213:22-139.178.89.65:49818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:16.412694 systemd[1]: Started sshd@13-86.109.11.213:22-139.178.89.65:49832.service. Sep 13 03:13:16.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-86.109.11.213:22-139.178.89.65:49832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:16.455252 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 03:13:16.455354 kernel: audit: type=1130 audit(1757733196.413:1571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-86.109.11.213:22-139.178.89.65:49832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:16.491021 sshd[8486]: Accepted publickey for core from 139.178.89.65 port 49832 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:16.492598 sshd[8486]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:16.495211 systemd-logind[1566]: New session 13 of user core. Sep 13 03:13:16.495780 systemd[1]: Started session-13.scope. Sep 13 03:13:16.490000 audit[8486]: USER_ACCT pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.574217 sshd[8486]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:16.575784 systemd[1]: sshd@13-86.109.11.213:22-139.178.89.65:49832.service: Deactivated successfully. Sep 13 03:13:16.576240 systemd[1]: session-13.scope: Deactivated successfully. Sep 13 03:13:16.576621 systemd-logind[1566]: Session 13 logged out. Waiting for processes to exit. Sep 13 03:13:16.577125 systemd-logind[1566]: Removed session 13. Sep 13 03:13:16.492000 audit[8486]: CRED_ACQ pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.725991 kernel: audit: type=1101 audit(1757733196.490:1572): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.726052 kernel: audit: type=1103 audit(1757733196.492:1573): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.726071 kernel: audit: type=1006 audit(1757733196.492:1574): pid=8486 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 13 03:13:16.492000 audit[8486]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe20a66c40 a2=3 a3=0 items=0 ppid=1 pid=8486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:16.876428 kernel: audit: type=1300 audit(1757733196.492:1574): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe20a66c40 a2=3 a3=0 items=0 ppid=1 pid=8486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:16.876480 kernel: audit: type=1327 audit(1757733196.492:1574): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:16.492000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:16.906976 kernel: audit: type=1105 audit(1757733196.497:1575): pid=8486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.497000 audit[8486]: USER_START pid=8486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.498000 audit[8488]: CRED_ACQ pid=8488 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:17.090346 kernel: audit: type=1103 audit(1757733196.498:1576): pid=8488 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.574000 audit[8486]: USER_END pid=8486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:17.091321 kernel: audit: type=1106 audit(1757733196.574:1577): pid=8486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.574000 audit[8486]: CRED_DISP pid=8486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:17.186270 kernel: audit: type=1104 audit(1757733196.574:1578): pid=8486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:16.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-86.109.11.213:22-139.178.89.65:49832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:21.581909 systemd[1]: Started sshd@14-86.109.11.213:22-139.178.89.65:41264.service. Sep 13 03:13:21.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-86.109.11.213:22-139.178.89.65:41264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:21.609339 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 03:13:21.609402 kernel: audit: type=1130 audit(1757733201.582:1580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-86.109.11.213:22-139.178.89.65:41264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:21.731000 audit[8547]: USER_ACCT pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.731709 sshd[8547]: Accepted publickey for core from 139.178.89.65 port 41264 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:21.732902 sshd[8547]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:21.735296 systemd-logind[1566]: New session 14 of user core. Sep 13 03:13:21.735781 systemd[1]: Started session-14.scope. Sep 13 03:13:21.813848 sshd[8547]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:21.815267 systemd[1]: sshd@14-86.109.11.213:22-139.178.89.65:41264.service: Deactivated successfully. Sep 13 03:13:21.815731 systemd[1]: session-14.scope: Deactivated successfully. Sep 13 03:13:21.816051 systemd-logind[1566]: Session 14 logged out. Waiting for processes to exit. Sep 13 03:13:21.816471 systemd-logind[1566]: Removed session 14. Sep 13 03:13:21.732000 audit[8547]: CRED_ACQ pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.913265 kernel: audit: type=1101 audit(1757733201.731:1581): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.913333 kernel: audit: type=1103 audit(1757733201.732:1582): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.913355 kernel: audit: type=1006 audit(1757733201.732:1583): pid=8547 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 13 03:13:21.732000 audit[8547]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe41d4a090 a2=3 a3=0 items=0 ppid=1 pid=8547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:22.063822 kernel: audit: type=1300 audit(1757733201.732:1583): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe41d4a090 a2=3 a3=0 items=0 ppid=1 pid=8547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:22.063887 kernel: audit: type=1327 audit(1757733201.732:1583): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:21.732000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:21.737000 audit[8547]: USER_START pid=8547 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:22.188770 kernel: audit: type=1105 audit(1757733201.737:1584): pid=8547 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:22.188821 kernel: audit: type=1103 audit(1757733201.738:1585): pid=8549 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.738000 audit[8549]: CRED_ACQ pid=8549 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.814000 audit[8547]: USER_END pid=8547 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:22.373147 kernel: audit: type=1106 audit(1757733201.814:1586): pid=8547 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:22.373221 kernel: audit: type=1104 audit(1757733201.814:1587): pid=8547 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.814000 audit[8547]: CRED_DISP pid=8547 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:21.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-86.109.11.213:22-139.178.89.65:41264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:26.826441 systemd[1]: Started sshd@15-86.109.11.213:22-139.178.89.65:41272.service. Sep 13 03:13:26.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-86.109.11.213:22-139.178.89.65:41272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:26.854150 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 03:13:26.854204 kernel: audit: type=1130 audit(1757733206.826:1589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-86.109.11.213:22-139.178.89.65:41272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:26.975000 audit[8635]: USER_ACCT pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:26.975783 sshd[8635]: Accepted publickey for core from 139.178.89.65 port 41272 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:26.976583 sshd[8635]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:26.979244 systemd-logind[1566]: New session 15 of user core. Sep 13 03:13:26.979742 systemd[1]: Started session-15.scope. Sep 13 03:13:27.058294 sshd[8635]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:27.060296 systemd[1]: sshd@15-86.109.11.213:22-139.178.89.65:41272.service: Deactivated successfully. Sep 13 03:13:27.060657 systemd[1]: session-15.scope: Deactivated successfully. Sep 13 03:13:27.061015 systemd-logind[1566]: Session 15 logged out. Waiting for processes to exit. Sep 13 03:13:27.061658 systemd[1]: Started sshd@16-86.109.11.213:22-139.178.89.65:41286.service. Sep 13 03:13:27.062085 systemd-logind[1566]: Removed session 15. Sep 13 03:13:26.976000 audit[8635]: CRED_ACQ pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.157329 kernel: audit: type=1101 audit(1757733206.975:1590): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.157379 kernel: audit: type=1103 audit(1757733206.976:1591): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.157397 kernel: audit: type=1006 audit(1757733206.976:1592): pid=8635 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 13 03:13:27.189325 sshd[8669]: Accepted publickey for core from 139.178.89.65 port 41286 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:27.191010 sshd[8669]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:27.193611 systemd-logind[1566]: New session 16 of user core. Sep 13 03:13:27.194088 systemd[1]: Started session-16.scope. Sep 13 03:13:27.215939 kernel: audit: type=1300 audit(1757733206.976:1592): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0ded9ad0 a2=3 a3=0 items=0 ppid=1 pid=8635 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:26.976000 audit[8635]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0ded9ad0 a2=3 a3=0 items=0 ppid=1 pid=8635 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:26.976000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:27.308799 sshd[8669]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:27.310761 systemd[1]: sshd@16-86.109.11.213:22-139.178.89.65:41286.service: Deactivated successfully. Sep 13 03:13:27.311148 systemd[1]: session-16.scope: Deactivated successfully. Sep 13 03:13:27.311491 systemd-logind[1566]: Session 16 logged out. Waiting for processes to exit. Sep 13 03:13:27.312159 systemd[1]: Started sshd@17-86.109.11.213:22-139.178.89.65:41296.service. Sep 13 03:13:27.312601 systemd-logind[1566]: Removed session 16. Sep 13 03:13:27.338486 kernel: audit: type=1327 audit(1757733206.976:1592): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:27.338557 kernel: audit: type=1105 audit(1757733206.981:1593): pid=8635 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:26.981000 audit[8635]: USER_START pid=8635 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.432718 kernel: audit: type=1103 audit(1757733206.982:1594): pid=8645 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:26.982000 audit[8645]: CRED_ACQ pid=8645 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.465247 sshd[8692]: Accepted publickey for core from 139.178.89.65 port 41296 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:27.467622 sshd[8692]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:27.470545 systemd-logind[1566]: New session 17 of user core. Sep 13 03:13:27.471063 systemd[1]: Started session-17.scope. Sep 13 03:13:27.058000 audit[8635]: USER_END pid=8635 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.553220 sshd[8692]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:27.554813 systemd[1]: sshd@17-86.109.11.213:22-139.178.89.65:41296.service: Deactivated successfully. Sep 13 03:13:27.555269 systemd[1]: session-17.scope: Deactivated successfully. Sep 13 03:13:27.555682 systemd-logind[1566]: Session 17 logged out. Waiting for processes to exit. Sep 13 03:13:27.556167 systemd-logind[1566]: Removed session 17. Sep 13 03:13:27.617141 kernel: audit: type=1106 audit(1757733207.058:1595): pid=8635 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.617183 kernel: audit: type=1104 audit(1757733207.058:1596): pid=8635 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.058000 audit[8635]: CRED_DISP pid=8635 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-86.109.11.213:22-139.178.89.65:41272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:27.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-86.109.11.213:22-139.178.89.65:41286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:27.189000 audit[8669]: USER_ACCT pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.190000 audit[8669]: CRED_ACQ pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.190000 audit[8669]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb38c4280 a2=3 a3=0 items=0 ppid=1 pid=8669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:27.190000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:27.196000 audit[8669]: USER_START pid=8669 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.196000 audit[8671]: CRED_ACQ pid=8671 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.309000 audit[8669]: USER_END pid=8669 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.309000 audit[8669]: CRED_DISP pid=8669 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-86.109.11.213:22-139.178.89.65:41286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:27.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-86.109.11.213:22-139.178.89.65:41296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:27.464000 audit[8692]: USER_ACCT pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.467000 audit[8692]: CRED_ACQ pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.467000 audit[8692]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb4ff32b0 a2=3 a3=0 items=0 ppid=1 pid=8692 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:27.467000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:27.473000 audit[8692]: USER_START pid=8692 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.473000 audit[8694]: CRED_ACQ pid=8694 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.553000 audit[8692]: USER_END pid=8692 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.553000 audit[8692]: CRED_DISP pid=8692 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:27.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-86.109.11.213:22-139.178.89.65:41296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:32.556968 systemd[1]: Started sshd@18-86.109.11.213:22-139.178.89.65:48248.service. Sep 13 03:13:32.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-86.109.11.213:22-139.178.89.65:48248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:32.583856 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 13 03:13:32.583957 kernel: audit: type=1130 audit(1757733212.556:1616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-86.109.11.213:22-139.178.89.65:48248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:32.714000 audit[8722]: USER_ACCT pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.714942 sshd[8722]: Accepted publickey for core from 139.178.89.65 port 48248 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:32.715643 sshd[8722]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:32.718481 systemd-logind[1566]: New session 18 of user core. Sep 13 03:13:32.718899 systemd[1]: Started session-18.scope. Sep 13 03:13:32.798674 sshd[8722]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:32.800642 systemd[1]: sshd@18-86.109.11.213:22-139.178.89.65:48248.service: Deactivated successfully. Sep 13 03:13:32.801134 systemd[1]: session-18.scope: Deactivated successfully. Sep 13 03:13:32.801581 systemd-logind[1566]: Session 18 logged out. Waiting for processes to exit. Sep 13 03:13:32.802098 systemd-logind[1566]: Removed session 18. Sep 13 03:13:32.715000 audit[8722]: CRED_ACQ pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.898500 kernel: audit: type=1101 audit(1757733212.714:1617): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.898564 kernel: audit: type=1103 audit(1757733212.715:1618): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.898585 kernel: audit: type=1006 audit(1757733212.715:1619): pid=8722 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Sep 13 03:13:32.957085 kernel: audit: type=1300 audit(1757733212.715:1619): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdba491a50 a2=3 a3=0 items=0 ppid=1 pid=8722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:32.715000 audit[8722]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdba491a50 a2=3 a3=0 items=0 ppid=1 pid=8722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:32.715000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:33.079642 kernel: audit: type=1327 audit(1757733212.715:1619): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:33.079685 kernel: audit: type=1105 audit(1757733212.720:1620): pid=8722 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.720000 audit[8722]: USER_START pid=8722 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:33.173909 kernel: audit: type=1103 audit(1757733212.721:1621): pid=8724 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.721000 audit[8724]: CRED_ACQ pid=8724 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:33.262990 kernel: audit: type=1106 audit(1757733212.799:1622): pid=8722 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.799000 audit[8722]: USER_END pid=8722 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.799000 audit[8722]: CRED_DISP pid=8722 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:33.447554 kernel: audit: type=1104 audit(1757733212.799:1623): pid=8722 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:32.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-86.109.11.213:22-139.178.89.65:48248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:37.810242 systemd[1]: Started sshd@19-86.109.11.213:22-139.178.89.65:48264.service. Sep 13 03:13:37.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-86.109.11.213:22-139.178.89.65:48264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:37.837981 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 03:13:37.838031 kernel: audit: type=1130 audit(1757733217.810:1625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-86.109.11.213:22-139.178.89.65:48264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:38.016000 audit[8754]: USER_ACCT pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.017164 sshd[8754]: Accepted publickey for core from 139.178.89.65 port 48264 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:38.022994 sshd[8754]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:38.034074 systemd-logind[1566]: New session 19 of user core. Sep 13 03:13:38.036679 systemd[1]: Started session-19.scope. Sep 13 03:13:38.021000 audit[8754]: CRED_ACQ pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.125153 sshd[8754]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:38.126569 systemd[1]: sshd@19-86.109.11.213:22-139.178.89.65:48264.service: Deactivated successfully. Sep 13 03:13:38.127014 systemd[1]: session-19.scope: Deactivated successfully. Sep 13 03:13:38.127336 systemd-logind[1566]: Session 19 logged out. Waiting for processes to exit. Sep 13 03:13:38.127785 systemd-logind[1566]: Removed session 19. Sep 13 03:13:38.200044 kernel: audit: type=1101 audit(1757733218.016:1626): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.200089 kernel: audit: type=1103 audit(1757733218.021:1627): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.200106 kernel: audit: type=1006 audit(1757733218.021:1628): pid=8754 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 13 03:13:38.258640 kernel: audit: type=1300 audit(1757733218.021:1628): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2c8139a0 a2=3 a3=0 items=0 ppid=1 pid=8754 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:38.021000 audit[8754]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2c8139a0 a2=3 a3=0 items=0 ppid=1 pid=8754 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:38.350682 kernel: audit: type=1327 audit(1757733218.021:1628): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:38.021000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:38.381196 kernel: audit: type=1105 audit(1757733218.045:1629): pid=8754 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.045000 audit[8754]: USER_START pid=8754 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.475504 kernel: audit: type=1103 audit(1757733218.046:1630): pid=8756 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.046000 audit[8756]: CRED_ACQ pid=8756 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.564718 kernel: audit: type=1106 audit(1757733218.125:1631): pid=8754 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.125000 audit[8754]: USER_END pid=8754 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.660079 kernel: audit: type=1104 audit(1757733218.125:1632): pid=8754 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.125000 audit[8754]: CRED_DISP pid=8754 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:38.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-86.109.11.213:22-139.178.89.65:48264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:43.131565 systemd[1]: Started sshd@20-86.109.11.213:22-139.178.89.65:51166.service. Sep 13 03:13:43.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-86.109.11.213:22-139.178.89.65:51166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:43.158013 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 03:13:43.158106 kernel: audit: type=1130 audit(1757733223.130:1634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-86.109.11.213:22-139.178.89.65:51166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:43.277000 audit[8783]: USER_ACCT pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.279080 sshd[8783]: Accepted publickey for core from 139.178.89.65 port 51166 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:43.281647 sshd[8783]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:43.284167 systemd-logind[1566]: New session 20 of user core. Sep 13 03:13:43.284634 systemd[1]: Started session-20.scope. Sep 13 03:13:43.367455 sshd[8783]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:43.368989 systemd[1]: sshd@20-86.109.11.213:22-139.178.89.65:51166.service: Deactivated successfully. Sep 13 03:13:43.369461 systemd[1]: session-20.scope: Deactivated successfully. Sep 13 03:13:43.369889 systemd-logind[1566]: Session 20 logged out. Waiting for processes to exit. Sep 13 03:13:43.280000 audit[8783]: CRED_ACQ pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.370402 systemd-logind[1566]: Removed session 20. Sep 13 03:13:43.460683 kernel: audit: type=1101 audit(1757733223.277:1635): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.460749 kernel: audit: type=1103 audit(1757733223.280:1636): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.460793 kernel: audit: type=1006 audit(1757733223.280:1637): pid=8783 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Sep 13 03:13:43.280000 audit[8783]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7eb932a0 a2=3 a3=0 items=0 ppid=1 pid=8783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:43.611286 kernel: audit: type=1300 audit(1757733223.280:1637): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7eb932a0 a2=3 a3=0 items=0 ppid=1 pid=8783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:43.611371 kernel: audit: type=1327 audit(1757733223.280:1637): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:43.280000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:43.285000 audit[8783]: USER_START pid=8783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.736212 kernel: audit: type=1105 audit(1757733223.285:1638): pid=8783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.736273 kernel: audit: type=1103 audit(1757733223.285:1639): pid=8785 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.285000 audit[8785]: CRED_ACQ pid=8785 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.825335 kernel: audit: type=1106 audit(1757733223.366:1640): pid=8783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.366000 audit[8783]: USER_END pid=8783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.920699 kernel: audit: type=1104 audit(1757733223.366:1641): pid=8783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.366000 audit[8783]: CRED_DISP pid=8783 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:43.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-86.109.11.213:22-139.178.89.65:51166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:48.219000 audit[5656]: AVC avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:13:48.247727 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 03:13:48.247869 kernel: audit: type=1400 audit(1757733228.219:1643): avc: denied { watch } for pid=5656 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.2389278293/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c718,c935 tclass=file permissive=0 Sep 13 03:13:48.219000 audit[5656]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000dca6e0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:13:48.370301 systemd[1]: Started sshd@21-86.109.11.213:22-139.178.89.65:51170.service. Sep 13 03:13:48.461273 kernel: audit: type=1300 audit(1757733228.219:1643): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000dca6e0 a2=fc6 a3=0 items=0 ppid=4913 pid=5656 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c718,c935 key=(null) Sep 13 03:13:48.461363 kernel: audit: type=1327 audit(1757733228.219:1643): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:13:48.219000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:13:48.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-86.109.11.213:22-139.178.89.65:51170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:48.586190 sshd[8840]: Accepted publickey for core from 139.178.89.65 port 51170 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:48.587594 sshd[8840]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:48.589929 systemd-logind[1566]: New session 21 of user core. Sep 13 03:13:48.590419 systemd[1]: Started session-21.scope. Sep 13 03:13:48.641992 kernel: audit: type=1130 audit(1757733228.369:1644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-86.109.11.213:22-139.178.89.65:51170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:48.642099 kernel: audit: type=1101 audit(1757733228.584:1645): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.584000 audit[8840]: USER_ACCT pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.667578 sshd[8840]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:48.669529 systemd[1]: sshd@21-86.109.11.213:22-139.178.89.65:51170.service: Deactivated successfully. Sep 13 03:13:48.669876 systemd[1]: session-21.scope: Deactivated successfully. Sep 13 03:13:48.670175 systemd-logind[1566]: Session 21 logged out. Waiting for processes to exit. Sep 13 03:13:48.670766 systemd[1]: Started sshd@22-86.109.11.213:22-139.178.89.65:51174.service. Sep 13 03:13:48.671164 systemd-logind[1566]: Removed session 21. Sep 13 03:13:48.733631 kernel: audit: type=1103 audit(1757733228.586:1646): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.586000 audit[8840]: CRED_ACQ pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.823809 kernel: audit: type=1006 audit(1757733228.586:1647): pid=8840 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Sep 13 03:13:48.856002 sshd[8864]: Accepted publickey for core from 139.178.89.65 port 51174 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:48.861609 sshd[8864]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:48.864213 systemd-logind[1566]: New session 22 of user core. Sep 13 03:13:48.864764 systemd[1]: Started session-22.scope. Sep 13 03:13:48.586000 audit[8840]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe52777e20 a2=3 a3=0 items=0 ppid=1 pid=8840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:48.883309 kernel: audit: type=1300 audit(1757733228.586:1647): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe52777e20 a2=3 a3=0 items=0 ppid=1 pid=8840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:48.586000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:48.996016 sshd[8864]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:48.997534 systemd[1]: sshd@22-86.109.11.213:22-139.178.89.65:51174.service: Deactivated successfully. Sep 13 03:13:48.997993 systemd[1]: session-22.scope: Deactivated successfully. Sep 13 03:13:48.998341 systemd-logind[1566]: Session 22 logged out. Waiting for processes to exit. Sep 13 03:13:48.998732 systemd-logind[1566]: Removed session 22. Sep 13 03:13:49.006141 kernel: audit: type=1327 audit(1757733228.586:1647): proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:49.006176 kernel: audit: type=1105 audit(1757733228.591:1648): pid=8840 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.591000 audit[8840]: USER_START pid=8840 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.592000 audit[8842]: CRED_ACQ pid=8842 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.667000 audit[8840]: USER_END pid=8840 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.667000 audit[8840]: CRED_DISP pid=8840 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-86.109.11.213:22-139.178.89.65:51170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:48.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-86.109.11.213:22-139.178.89.65:51174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:48.854000 audit[8864]: USER_ACCT pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.860000 audit[8864]: CRED_ACQ pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.860000 audit[8864]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdae370440 a2=3 a3=0 items=0 ppid=1 pid=8864 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:48.860000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:48.865000 audit[8864]: USER_START pid=8864 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.866000 audit[8866]: CRED_ACQ pid=8866 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.995000 audit[8864]: USER_END pid=8864 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.995000 audit[8864]: CRED_DISP pid=8864 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:48.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-86.109.11.213:22-139.178.89.65:51174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:49.103439 systemd[1]: Started sshd@23-86.109.11.213:22-139.178.89.65:51178.service. Sep 13 03:13:49.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-86.109.11.213:22-139.178.89.65:51178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:49.177000 audit[8884]: USER_ACCT pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.178654 sshd[8884]: Accepted publickey for core from 139.178.89.65 port 51178 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:49.178000 audit[8884]: CRED_ACQ pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.178000 audit[8884]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4404d730 a2=3 a3=0 items=0 ppid=1 pid=8884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:49.178000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:49.180032 sshd[8884]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:49.184213 systemd-logind[1566]: New session 23 of user core. Sep 13 03:13:49.185080 systemd[1]: Started session-23.scope. Sep 13 03:13:49.187000 audit[8884]: USER_START pid=8884 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.188000 audit[8886]: CRED_ACQ pid=8886 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.826000 audit[8909]: NETFILTER_CFG table=filter:130 family=2 entries=20 op=nft_register_rule pid=8909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:49.826000 audit[8909]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe69bb3320 a2=0 a3=7ffe69bb330c items=0 ppid=2721 pid=8909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:49.826000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:49.834949 sshd[8884]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:49.834000 audit[8884]: USER_END pid=8884 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.834000 audit[8884]: CRED_DISP pid=8884 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.836770 systemd[1]: sshd@23-86.109.11.213:22-139.178.89.65:51178.service: Deactivated successfully. Sep 13 03:13:49.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-86.109.11.213:22-139.178.89.65:51178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:49.835000 audit[8909]: NETFILTER_CFG table=nat:131 family=2 entries=26 op=nft_register_rule pid=8909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:49.835000 audit[8909]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffe69bb3320 a2=0 a3=0 items=0 ppid=2721 pid=8909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:49.835000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:49.837160 systemd[1]: session-23.scope: Deactivated successfully. Sep 13 03:13:49.837497 systemd-logind[1566]: Session 23 logged out. Waiting for processes to exit. Sep 13 03:13:49.838168 systemd[1]: Started sshd@24-86.109.11.213:22-139.178.89.65:51188.service. Sep 13 03:13:49.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-86.109.11.213:22-139.178.89.65:51188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:49.838593 systemd-logind[1566]: Removed session 23. Sep 13 03:13:49.851000 audit[8915]: NETFILTER_CFG table=filter:132 family=2 entries=32 op=nft_register_rule pid=8915 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:49.851000 audit[8915]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc2c9dfe00 a2=0 a3=7ffc2c9dfdec items=0 ppid=2721 pid=8915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:49.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:49.864000 audit[8915]: NETFILTER_CFG table=nat:133 family=2 entries=26 op=nft_register_rule pid=8915 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:49.864000 audit[8915]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc2c9dfe00 a2=0 a3=0 items=0 ppid=2721 pid=8915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:49.864000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:49.884000 audit[8912]: USER_ACCT pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.885720 sshd[8912]: Accepted publickey for core from 139.178.89.65 port 51188 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:49.884000 audit[8912]: CRED_ACQ pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.885000 audit[8912]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc89dde5a0 a2=3 a3=0 items=0 ppid=1 pid=8912 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:49.885000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:49.886449 sshd[8912]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:49.889145 systemd-logind[1566]: New session 24 of user core. Sep 13 03:13:49.889956 systemd[1]: Started session-24.scope. Sep 13 03:13:49.891000 audit[8912]: USER_START pid=8912 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:49.891000 audit[8916]: CRED_ACQ pid=8916 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.024469 sshd[8912]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:50.023000 audit[8912]: USER_END pid=8912 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.023000 audit[8912]: CRED_DISP pid=8912 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.026399 systemd[1]: sshd@24-86.109.11.213:22-139.178.89.65:51188.service: Deactivated successfully. Sep 13 03:13:50.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-86.109.11.213:22-139.178.89.65:51188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:50.026830 systemd[1]: session-24.scope: Deactivated successfully. Sep 13 03:13:50.027163 systemd-logind[1566]: Session 24 logged out. Waiting for processes to exit. Sep 13 03:13:50.027858 systemd[1]: Started sshd@25-86.109.11.213:22-139.178.89.65:49658.service. Sep 13 03:13:50.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-86.109.11.213:22-139.178.89.65:49658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:50.028323 systemd-logind[1566]: Removed session 24. Sep 13 03:13:50.065000 audit[8937]: USER_ACCT pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.067159 sshd[8937]: Accepted publickey for core from 139.178.89.65 port 49658 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:50.066000 audit[8937]: CRED_ACQ pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.066000 audit[8937]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe625e2870 a2=3 a3=0 items=0 ppid=1 pid=8937 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:50.066000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:50.067885 sshd[8937]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:50.070452 systemd-logind[1566]: New session 25 of user core. Sep 13 03:13:50.071031 systemd[1]: Started session-25.scope. Sep 13 03:13:50.071000 audit[8937]: USER_START pid=8937 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.072000 audit[8939]: CRED_ACQ pid=8939 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.196211 sshd[8937]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:50.195000 audit[8937]: USER_END pid=8937 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.195000 audit[8937]: CRED_DISP pid=8937 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:50.197605 systemd[1]: sshd@25-86.109.11.213:22-139.178.89.65:49658.service: Deactivated successfully. Sep 13 03:13:50.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-86.109.11.213:22-139.178.89.65:49658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:50.198070 systemd[1]: session-25.scope: Deactivated successfully. Sep 13 03:13:50.198377 systemd-logind[1566]: Session 25 logged out. Waiting for processes to exit. Sep 13 03:13:50.198774 systemd-logind[1566]: Removed session 25. Sep 13 03:13:51.555000 audit[5739]: AVC avc: denied { watch } for pid=5739 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_03_05_30.3541369979/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c1016 tclass=file permissive=0 Sep 13 03:13:51.555000 audit[5739]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0021edb40 a2=fc6 a3=0 items=0 ppid=4867 pid=5739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c1016 key=(null) Sep 13 03:13:51.555000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 03:13:54.257000 audit[8998]: NETFILTER_CFG table=filter:134 family=2 entries=20 op=nft_register_rule pid=8998 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:54.297704 kernel: kauditd_printk_skb: 63 callbacks suppressed Sep 13 03:13:54.297793 kernel: audit: type=1325 audit(1757733234.257:1694): table=filter:134 family=2 entries=20 op=nft_register_rule pid=8998 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:54.257000 audit[8998]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdb1e9d760 a2=0 a3=7ffdb1e9d74c items=0 ppid=2721 pid=8998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:54.356275 kernel: audit: type=1300 audit(1757733234.257:1694): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdb1e9d760 a2=0 a3=7ffdb1e9d74c items=0 ppid=2721 pid=8998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:54.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:54.510636 kernel: audit: type=1327 audit(1757733234.257:1694): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:54.510720 kernel: audit: type=1325 audit(1757733234.356:1695): table=nat:135 family=2 entries=110 op=nft_register_chain pid=8998 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:54.356000 audit[8998]: NETFILTER_CFG table=nat:135 family=2 entries=110 op=nft_register_chain pid=8998 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 03:13:54.356000 audit[8998]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffdb1e9d760 a2=0 a3=7ffdb1e9d74c items=0 ppid=2721 pid=8998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:54.666655 kernel: audit: type=1300 audit(1757733234.356:1695): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffdb1e9d760 a2=0 a3=7ffdb1e9d74c items=0 ppid=2721 pid=8998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:54.666710 kernel: audit: type=1327 audit(1757733234.356:1695): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:54.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 03:13:55.205822 systemd[1]: Started sshd@26-86.109.11.213:22-139.178.89.65:49672.service. Sep 13 03:13:55.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-86.109.11.213:22-139.178.89.65:49672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:55.296273 kernel: audit: type=1130 audit(1757733235.204:1696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-86.109.11.213:22-139.178.89.65:49672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:55.328000 audit[9013]: USER_ACCT pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.329504 sshd[9013]: Accepted publickey for core from 139.178.89.65 port 49672 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:13:55.331439 sshd[9013]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:13:55.333826 systemd-logind[1566]: New session 26 of user core. Sep 13 03:13:55.334448 systemd[1]: Started session-26.scope. Sep 13 03:13:55.423601 sshd[9013]: pam_unix(sshd:session): session closed for user core Sep 13 03:13:55.329000 audit[9013]: CRED_ACQ pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.424962 systemd[1]: sshd@26-86.109.11.213:22-139.178.89.65:49672.service: Deactivated successfully. Sep 13 03:13:55.425419 systemd[1]: session-26.scope: Deactivated successfully. Sep 13 03:13:55.425742 systemd-logind[1566]: Session 26 logged out. Waiting for processes to exit. Sep 13 03:13:55.426126 systemd-logind[1566]: Removed session 26. Sep 13 03:13:55.515151 kernel: audit: type=1101 audit(1757733235.328:1697): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.515189 kernel: audit: type=1103 audit(1757733235.329:1698): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.515209 kernel: audit: type=1006 audit(1757733235.329:1699): pid=9013 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 13 03:13:55.329000 audit[9013]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe83661cf0 a2=3 a3=0 items=0 ppid=1 pid=9013 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:13:55.329000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:13:55.335000 audit[9013]: USER_START pid=9013 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.336000 audit[9015]: CRED_ACQ pid=9015 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.422000 audit[9013]: USER_END pid=9013 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.422000 audit[9013]: CRED_DISP pid=9013 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:13:55.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-86.109.11.213:22-139.178.89.65:49672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:13:59.823000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:59.851358 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 03:13:59.851626 kernel: audit: type=1400 audit(1757733239.823:1705): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:13:59.823000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018adac0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:59.943320 kernel: audit: type=1300 audit(1757733239.823:1705): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018adac0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:13:59.823000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.154909 kernel: audit: type=1400 audit(1757733239.823:1706): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.154985 kernel: audit: type=1327 audit(1757733239.823:1705): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:59.823000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:59.823000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d1d080 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:14:00.367291 kernel: audit: type=1300 audit(1757733239.823:1706): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d1d080 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:14:00.367323 kernel: audit: type=1327 audit(1757733239.823:1706): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:13:59.823000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:14:00.426722 systemd[1]: Started sshd@27-86.109.11.213:22-139.178.89.65:53630.service. Sep 13 03:14:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.551986 kernel: audit: type=1400 audit(1757733240.068:1707): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.552031 kernel: audit: type=1300 audit(1757733240.068:1707): arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c011a3bf80 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:14:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c011a3bf80 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:14:00.583979 sshd[9093]: Accepted publickey for core from 139.178.89.65 port 53630 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:14:00.584847 sshd[9093]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:14:00.587221 systemd-logind[1566]: New session 27 of user core. Sep 13 03:14:00.587847 systemd[1]: Started session-27.scope. Sep 13 03:14:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:14:00.663196 sshd[9093]: pam_unix(sshd:session): session closed for user core Sep 13 03:14:00.664668 systemd[1]: sshd@27-86.109.11.213:22-139.178.89.65:53630.service: Deactivated successfully. Sep 13 03:14:00.665120 systemd[1]: session-27.scope: Deactivated successfully. Sep 13 03:14:00.665467 systemd-logind[1566]: Session 27 logged out. Waiting for processes to exit. Sep 13 03:14:00.665921 systemd-logind[1566]: Removed session 27. Sep 13 03:14:00.744107 kernel: audit: type=1327 audit(1757733240.068:1707): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:14:00.744147 kernel: audit: type=1400 audit(1757733240.068:1708): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sdb9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c010452600 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:14:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:14:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sdb9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c010452630 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:14:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:14:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c014c94ba0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:14:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:14:00.068000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.068000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c00f8711c0 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:14:00.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:14:00.072000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sdb9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:00.072000 audit[2340]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c006777230 a2=fc6 a3=0 items=0 ppid=2195 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c282,c402 key=(null) Sep 13 03:14:00.072000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D38362E3130392E31312E323133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 03:14:00.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-86.109.11.213:22-139.178.89.65:53630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:14:00.582000 audit[9093]: USER_ACCT pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:00.583000 audit[9093]: CRED_ACQ pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:00.583000 audit[9093]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedf000980 a2=3 a3=0 items=0 ppid=1 pid=9093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:14:00.583000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:14:00.588000 audit[9093]: USER_START pid=9093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:00.589000 audit[9095]: CRED_ACQ pid=9095 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:00.662000 audit[9093]: USER_END pid=9093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:00.662000 audit[9093]: CRED_DISP pid=9093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:00.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-86.109.11.213:22-139.178.89.65:53630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:14:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012146a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:14:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:14:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001a81de0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:14:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:14:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003989020 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:14:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:14:03.949000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sdb9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 03:14:03.949000 audit[2338]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018adee0 a2=fc6 a3=0 items=0 ppid=2180 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c497 key=(null) Sep 13 03:14:03.949000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 03:14:05.675455 systemd[1]: Started sshd@28-86.109.11.213:22-139.178.89.65:53644.service. Sep 13 03:14:05.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-86.109.11.213:22-139.178.89.65:53644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:14:05.703245 kernel: kauditd_printk_skb: 37 callbacks suppressed Sep 13 03:14:05.703325 kernel: audit: type=1130 audit(1757733245.674:1726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-86.109.11.213:22-139.178.89.65:53644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 03:14:05.824000 audit[9120]: USER_ACCT pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:05.826321 sshd[9120]: Accepted publickey for core from 139.178.89.65 port 53644 ssh2: RSA SHA256:15Pf5MnBfNfTaeaPmy9emWuYdL8kT0eozLYFtmjGU1E Sep 13 03:14:05.827588 sshd[9120]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 03:14:05.830077 systemd-logind[1566]: New session 28 of user core. Sep 13 03:14:05.830703 systemd[1]: Started session-28.scope. Sep 13 03:14:05.912383 sshd[9120]: pam_unix(sshd:session): session closed for user core Sep 13 03:14:05.913844 systemd[1]: sshd@28-86.109.11.213:22-139.178.89.65:53644.service: Deactivated successfully. Sep 13 03:14:05.914299 systemd[1]: session-28.scope: Deactivated successfully. Sep 13 03:14:05.914603 systemd-logind[1566]: Session 28 logged out. Waiting for processes to exit. Sep 13 03:14:05.914966 systemd-logind[1566]: Removed session 28. Sep 13 03:14:05.826000 audit[9120]: CRED_ACQ pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:06.010614 kernel: audit: type=1101 audit(1757733245.824:1727): pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:06.010654 kernel: audit: type=1103 audit(1757733245.826:1728): pid=9120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:06.010671 kernel: audit: type=1006 audit(1757733245.826:1729): pid=9120 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 13 03:14:05.826000 audit[9120]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe87d746f0 a2=3 a3=0 items=0 ppid=1 pid=9120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:14:06.161344 kernel: audit: type=1300 audit(1757733245.826:1729): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe87d746f0 a2=3 a3=0 items=0 ppid=1 pid=9120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 03:14:06.161398 kernel: audit: type=1327 audit(1757733245.826:1729): proctitle=737368643A20636F7265205B707269765D Sep 13 03:14:05.826000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 03:14:06.192204 kernel: audit: type=1105 audit(1757733245.831:1730): pid=9120 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:05.831000 audit[9120]: USER_START pid=9120 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:06.287344 kernel: audit: type=1103 audit(1757733245.832:1731): pid=9122 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:05.832000 audit[9122]: CRED_ACQ pid=9122 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:06.376687 kernel: audit: type=1106 audit(1757733245.911:1732): pid=9120 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:05.911000 audit[9120]: USER_END pid=9120 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:06.472338 kernel: audit: type=1104 audit(1757733245.911:1733): pid=9120 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:05.911000 audit[9120]: CRED_DISP pid=9120 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 03:14:05.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-86.109.11.213:22-139.178.89.65:53644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'