Sep 13 00:03:52.014498 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Sep 13 00:03:52.014534 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 12 23:05:37 -00 2025 Sep 13 00:03:52.014556 kernel: efi: EFI v2.70 by EDK II Sep 13 00:03:52.014572 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Sep 13 00:03:52.014586 kernel: ACPI: Early table checksum verification disabled Sep 13 00:03:52.014600 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Sep 13 00:03:52.014617 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Sep 13 00:03:52.014631 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Sep 13 00:03:52.014646 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Sep 13 00:03:52.014710 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Sep 13 00:03:52.014733 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Sep 13 00:03:52.014748 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Sep 13 00:03:52.014762 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Sep 13 00:03:52.014778 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Sep 13 00:03:52.014795 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Sep 13 00:03:52.014815 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Sep 13 00:03:52.014830 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Sep 13 00:03:52.014845 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Sep 13 00:03:52.014860 kernel: printk: bootconsole [uart0] enabled Sep 13 00:03:52.014874 kernel: NUMA: Failed to initialise from firmware Sep 13 00:03:52.014890 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Sep 13 00:03:52.014905 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Sep 13 00:03:52.014920 kernel: Zone ranges: Sep 13 00:03:52.014935 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Sep 13 00:03:52.014949 kernel: DMA32 empty Sep 13 00:03:52.014964 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Sep 13 00:03:52.014983 kernel: Movable zone start for each node Sep 13 00:03:52.014997 kernel: Early memory node ranges Sep 13 00:03:52.015012 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Sep 13 00:03:52.015027 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Sep 13 00:03:52.015041 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Sep 13 00:03:52.015056 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Sep 13 00:03:52.015071 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Sep 13 00:03:52.015085 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Sep 13 00:03:52.015100 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Sep 13 00:03:52.015115 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Sep 13 00:03:52.015129 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Sep 13 00:03:52.015144 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Sep 13 00:03:52.015162 kernel: psci: probing for conduit method from ACPI. Sep 13 00:03:52.015177 kernel: psci: PSCIv1.0 detected in firmware. Sep 13 00:03:52.015198 kernel: psci: Using standard PSCI v0.2 function IDs Sep 13 00:03:52.015215 kernel: psci: Trusted OS migration not required Sep 13 00:03:52.015230 kernel: psci: SMC Calling Convention v1.1 Sep 13 00:03:52.015249 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Sep 13 00:03:52.015265 kernel: ACPI: SRAT not present Sep 13 00:03:52.015281 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Sep 13 00:03:52.015296 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Sep 13 00:03:52.015312 kernel: pcpu-alloc: [0] 0 [0] 1 Sep 13 00:03:52.015328 kernel: Detected PIPT I-cache on CPU0 Sep 13 00:03:52.015343 kernel: CPU features: detected: GIC system register CPU interface Sep 13 00:03:52.015358 kernel: CPU features: detected: Spectre-v2 Sep 13 00:03:52.015374 kernel: CPU features: detected: Spectre-v3a Sep 13 00:03:52.015389 kernel: CPU features: detected: Spectre-BHB Sep 13 00:03:52.015404 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 13 00:03:52.015424 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 13 00:03:52.015439 kernel: CPU features: detected: ARM erratum 1742098 Sep 13 00:03:52.015455 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Sep 13 00:03:52.015470 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Sep 13 00:03:52.015506 kernel: Policy zone: Normal Sep 13 00:03:52.015525 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 00:03:52.015542 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 13 00:03:52.015557 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 13 00:03:52.015573 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 13 00:03:52.015588 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 13 00:03:52.015609 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Sep 13 00:03:52.015626 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Sep 13 00:03:52.015642 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 13 00:03:52.015677 kernel: trace event string verifier disabled Sep 13 00:03:52.015695 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 13 00:03:52.015711 kernel: rcu: RCU event tracing is enabled. Sep 13 00:03:52.015727 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 13 00:03:52.015743 kernel: Trampoline variant of Tasks RCU enabled. Sep 13 00:03:52.015759 kernel: Tracing variant of Tasks RCU enabled. Sep 13 00:03:52.015774 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 13 00:03:52.015790 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 13 00:03:52.015805 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 13 00:03:52.015826 kernel: GICv3: 96 SPIs implemented Sep 13 00:03:52.015841 kernel: GICv3: 0 Extended SPIs implemented Sep 13 00:03:52.015856 kernel: GICv3: Distributor has no Range Selector support Sep 13 00:03:52.015872 kernel: Root IRQ handler: gic_handle_irq Sep 13 00:03:52.015887 kernel: GICv3: 16 PPIs implemented Sep 13 00:03:52.015902 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Sep 13 00:03:52.015918 kernel: ACPI: SRAT not present Sep 13 00:03:52.015933 kernel: ITS [mem 0x10080000-0x1009ffff] Sep 13 00:03:52.015948 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Sep 13 00:03:52.015964 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Sep 13 00:03:52.015979 kernel: GICv3: using LPI property table @0x00000004000b0000 Sep 13 00:03:52.015999 kernel: ITS: Using hypervisor restricted LPI range [128] Sep 13 00:03:52.016014 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Sep 13 00:03:52.016030 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Sep 13 00:03:52.016045 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Sep 13 00:03:52.016061 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Sep 13 00:03:52.016077 kernel: Console: colour dummy device 80x25 Sep 13 00:03:52.016093 kernel: printk: console [tty1] enabled Sep 13 00:03:52.016108 kernel: ACPI: Core revision 20210730 Sep 13 00:03:52.016125 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Sep 13 00:03:52.016141 kernel: pid_max: default: 32768 minimum: 301 Sep 13 00:03:52.016161 kernel: LSM: Security Framework initializing Sep 13 00:03:52.016177 kernel: SELinux: Initializing. Sep 13 00:03:52.016193 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 00:03:52.016209 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 00:03:52.016225 kernel: rcu: Hierarchical SRCU implementation. Sep 13 00:03:52.016240 kernel: Platform MSI: ITS@0x10080000 domain created Sep 13 00:03:52.016256 kernel: PCI/MSI: ITS@0x10080000 domain created Sep 13 00:03:52.016272 kernel: Remapping and enabling EFI services. Sep 13 00:03:52.016287 kernel: smp: Bringing up secondary CPUs ... Sep 13 00:03:52.016303 kernel: Detected PIPT I-cache on CPU1 Sep 13 00:03:52.016323 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Sep 13 00:03:52.016339 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Sep 13 00:03:52.016355 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Sep 13 00:03:52.016370 kernel: smp: Brought up 1 node, 2 CPUs Sep 13 00:03:52.016386 kernel: SMP: Total of 2 processors activated. Sep 13 00:03:52.016402 kernel: CPU features: detected: 32-bit EL0 Support Sep 13 00:03:52.016417 kernel: CPU features: detected: 32-bit EL1 Support Sep 13 00:03:52.016433 kernel: CPU features: detected: CRC32 instructions Sep 13 00:03:52.016449 kernel: CPU: All CPU(s) started at EL1 Sep 13 00:03:52.016468 kernel: alternatives: patching kernel code Sep 13 00:03:52.016484 kernel: devtmpfs: initialized Sep 13 00:03:52.016510 kernel: KASLR disabled due to lack of seed Sep 13 00:03:52.016531 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 13 00:03:52.016547 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 13 00:03:52.016563 kernel: pinctrl core: initialized pinctrl subsystem Sep 13 00:03:52.016579 kernel: SMBIOS 3.0.0 present. Sep 13 00:03:52.016595 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Sep 13 00:03:52.016612 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 13 00:03:52.016628 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 13 00:03:52.016646 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 13 00:03:52.016686 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 13 00:03:52.016704 kernel: audit: initializing netlink subsys (disabled) Sep 13 00:03:52.016720 kernel: audit: type=2000 audit(0.294:1): state=initialized audit_enabled=0 res=1 Sep 13 00:03:52.016737 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 13 00:03:52.016753 kernel: cpuidle: using governor menu Sep 13 00:03:52.016774 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 13 00:03:52.016790 kernel: ASID allocator initialised with 32768 entries Sep 13 00:03:52.016807 kernel: ACPI: bus type PCI registered Sep 13 00:03:52.016823 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 13 00:03:52.016839 kernel: Serial: AMBA PL011 UART driver Sep 13 00:03:52.016856 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 13 00:03:52.016872 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 13 00:03:52.016889 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 13 00:03:52.016905 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 13 00:03:52.016925 kernel: cryptd: max_cpu_qlen set to 1000 Sep 13 00:03:52.016942 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 13 00:03:52.016958 kernel: ACPI: Added _OSI(Module Device) Sep 13 00:03:52.016974 kernel: ACPI: Added _OSI(Processor Device) Sep 13 00:03:52.016991 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 13 00:03:52.017007 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 13 00:03:52.017023 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 13 00:03:52.017040 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 13 00:03:52.017057 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 13 00:03:52.017073 kernel: ACPI: Interpreter enabled Sep 13 00:03:52.017093 kernel: ACPI: Using GIC for interrupt routing Sep 13 00:03:52.017110 kernel: ACPI: MCFG table detected, 1 entries Sep 13 00:03:52.017127 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Sep 13 00:03:52.017394 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 13 00:03:52.017592 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Sep 13 00:03:52.019859 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Sep 13 00:03:52.020064 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Sep 13 00:03:52.020266 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Sep 13 00:03:52.020290 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Sep 13 00:03:52.020308 kernel: acpiphp: Slot [1] registered Sep 13 00:03:52.020325 kernel: acpiphp: Slot [2] registered Sep 13 00:03:52.020342 kernel: acpiphp: Slot [3] registered Sep 13 00:03:52.020358 kernel: acpiphp: Slot [4] registered Sep 13 00:03:52.020375 kernel: acpiphp: Slot [5] registered Sep 13 00:03:52.020391 kernel: acpiphp: Slot [6] registered Sep 13 00:03:52.020407 kernel: acpiphp: Slot [7] registered Sep 13 00:03:52.020428 kernel: acpiphp: Slot [8] registered Sep 13 00:03:52.020445 kernel: acpiphp: Slot [9] registered Sep 13 00:03:52.020461 kernel: acpiphp: Slot [10] registered Sep 13 00:03:52.020478 kernel: acpiphp: Slot [11] registered Sep 13 00:03:52.020495 kernel: acpiphp: Slot [12] registered Sep 13 00:03:52.020511 kernel: acpiphp: Slot [13] registered Sep 13 00:03:52.020527 kernel: acpiphp: Slot [14] registered Sep 13 00:03:52.020543 kernel: acpiphp: Slot [15] registered Sep 13 00:03:52.020560 kernel: acpiphp: Slot [16] registered Sep 13 00:03:52.020580 kernel: acpiphp: Slot [17] registered Sep 13 00:03:52.020596 kernel: acpiphp: Slot [18] registered Sep 13 00:03:52.020613 kernel: acpiphp: Slot [19] registered Sep 13 00:03:52.020629 kernel: acpiphp: Slot [20] registered Sep 13 00:03:52.020645 kernel: acpiphp: Slot [21] registered Sep 13 00:03:52.020693 kernel: acpiphp: Slot [22] registered Sep 13 00:03:52.020711 kernel: acpiphp: Slot [23] registered Sep 13 00:03:52.020727 kernel: acpiphp: Slot [24] registered Sep 13 00:03:52.020744 kernel: acpiphp: Slot [25] registered Sep 13 00:03:52.020761 kernel: acpiphp: Slot [26] registered Sep 13 00:03:52.020782 kernel: acpiphp: Slot [27] registered Sep 13 00:03:52.020799 kernel: acpiphp: Slot [28] registered Sep 13 00:03:52.020815 kernel: acpiphp: Slot [29] registered Sep 13 00:03:52.020831 kernel: acpiphp: Slot [30] registered Sep 13 00:03:52.020847 kernel: acpiphp: Slot [31] registered Sep 13 00:03:52.020864 kernel: PCI host bridge to bus 0000:00 Sep 13 00:03:52.021061 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Sep 13 00:03:52.021240 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Sep 13 00:03:52.021421 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Sep 13 00:03:52.021594 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Sep 13 00:03:52.023140 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Sep 13 00:03:52.023409 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Sep 13 00:03:52.023633 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Sep 13 00:03:52.023868 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Sep 13 00:03:52.024073 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Sep 13 00:03:52.024269 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 13 00:03:52.024478 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Sep 13 00:03:52.024693 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Sep 13 00:03:52.024893 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Sep 13 00:03:52.025087 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Sep 13 00:03:52.035881 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 13 00:03:52.036141 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Sep 13 00:03:52.036383 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Sep 13 00:03:52.036607 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Sep 13 00:03:52.036841 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Sep 13 00:03:52.037074 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Sep 13 00:03:52.037292 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Sep 13 00:03:52.037512 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Sep 13 00:03:52.037737 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Sep 13 00:03:52.037772 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Sep 13 00:03:52.037791 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Sep 13 00:03:52.037809 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Sep 13 00:03:52.037835 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Sep 13 00:03:52.037856 kernel: iommu: Default domain type: Translated Sep 13 00:03:52.037873 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 13 00:03:52.037900 kernel: vgaarb: loaded Sep 13 00:03:52.037920 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 13 00:03:52.037943 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 13 00:03:52.037970 kernel: PTP clock support registered Sep 13 00:03:52.037990 kernel: Registered efivars operations Sep 13 00:03:52.038008 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 13 00:03:52.038024 kernel: VFS: Disk quotas dquot_6.6.0 Sep 13 00:03:52.038041 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 13 00:03:52.038057 kernel: pnp: PnP ACPI init Sep 13 00:03:52.038263 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Sep 13 00:03:52.038293 kernel: pnp: PnP ACPI: found 1 devices Sep 13 00:03:52.038311 kernel: NET: Registered PF_INET protocol family Sep 13 00:03:52.038328 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 13 00:03:52.038345 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 13 00:03:52.038362 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 13 00:03:52.038379 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 13 00:03:52.038396 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 13 00:03:52.038413 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 13 00:03:52.038430 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 00:03:52.038451 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 00:03:52.038468 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 13 00:03:52.038484 kernel: PCI: CLS 0 bytes, default 64 Sep 13 00:03:52.038501 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Sep 13 00:03:52.038517 kernel: kvm [1]: HYP mode not available Sep 13 00:03:52.038534 kernel: Initialise system trusted keyrings Sep 13 00:03:52.038551 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 13 00:03:52.038568 kernel: Key type asymmetric registered Sep 13 00:03:52.038584 kernel: Asymmetric key parser 'x509' registered Sep 13 00:03:52.038605 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 13 00:03:52.038622 kernel: io scheduler mq-deadline registered Sep 13 00:03:52.038639 kernel: io scheduler kyber registered Sep 13 00:03:52.038706 kernel: io scheduler bfq registered Sep 13 00:03:52.038915 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Sep 13 00:03:52.038940 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Sep 13 00:03:52.038957 kernel: ACPI: button: Power Button [PWRB] Sep 13 00:03:52.038974 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Sep 13 00:03:52.038991 kernel: ACPI: button: Sleep Button [SLPB] Sep 13 00:03:52.039013 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 13 00:03:52.039030 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Sep 13 00:03:52.039230 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Sep 13 00:03:52.039254 kernel: printk: console [ttyS0] disabled Sep 13 00:03:52.039271 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Sep 13 00:03:52.039287 kernel: printk: console [ttyS0] enabled Sep 13 00:03:52.039304 kernel: printk: bootconsole [uart0] disabled Sep 13 00:03:52.039320 kernel: thunder_xcv, ver 1.0 Sep 13 00:03:52.039337 kernel: thunder_bgx, ver 1.0 Sep 13 00:03:52.039358 kernel: nicpf, ver 1.0 Sep 13 00:03:52.039374 kernel: nicvf, ver 1.0 Sep 13 00:03:52.039608 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 13 00:03:52.055802 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-13T00:03:51 UTC (1757721831) Sep 13 00:03:52.055849 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 13 00:03:52.055868 kernel: NET: Registered PF_INET6 protocol family Sep 13 00:03:52.055885 kernel: Segment Routing with IPv6 Sep 13 00:03:52.055902 kernel: In-situ OAM (IOAM) with IPv6 Sep 13 00:03:52.055929 kernel: NET: Registered PF_PACKET protocol family Sep 13 00:03:52.055945 kernel: Key type dns_resolver registered Sep 13 00:03:52.055962 kernel: registered taskstats version 1 Sep 13 00:03:52.055979 kernel: Loading compiled-in X.509 certificates Sep 13 00:03:52.055997 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 47ac98e9306f36eebe4291d409359a5a5d0c2b9c' Sep 13 00:03:52.056013 kernel: Key type .fscrypt registered Sep 13 00:03:52.056030 kernel: Key type fscrypt-provisioning registered Sep 13 00:03:52.056046 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 13 00:03:52.056063 kernel: ima: Allocated hash algorithm: sha1 Sep 13 00:03:52.056083 kernel: ima: No architecture policies found Sep 13 00:03:52.056100 kernel: clk: Disabling unused clocks Sep 13 00:03:52.056116 kernel: Freeing unused kernel memory: 36416K Sep 13 00:03:52.056132 kernel: Run /init as init process Sep 13 00:03:52.056149 kernel: with arguments: Sep 13 00:03:52.056166 kernel: /init Sep 13 00:03:52.056182 kernel: with environment: Sep 13 00:03:52.056199 kernel: HOME=/ Sep 13 00:03:52.056215 kernel: TERM=linux Sep 13 00:03:52.056236 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 13 00:03:52.056273 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 00:03:52.056301 systemd[1]: Detected virtualization amazon. Sep 13 00:03:52.056320 systemd[1]: Detected architecture arm64. Sep 13 00:03:52.056338 systemd[1]: Running in initrd. Sep 13 00:03:52.056356 systemd[1]: No hostname configured, using default hostname. Sep 13 00:03:52.056374 systemd[1]: Hostname set to . Sep 13 00:03:52.056398 systemd[1]: Initializing machine ID from VM UUID. Sep 13 00:03:52.056416 systemd[1]: Queued start job for default target initrd.target. Sep 13 00:03:52.056434 systemd[1]: Started systemd-ask-password-console.path. Sep 13 00:03:52.056452 systemd[1]: Reached target cryptsetup.target. Sep 13 00:03:52.056469 systemd[1]: Reached target paths.target. Sep 13 00:03:52.056487 systemd[1]: Reached target slices.target. Sep 13 00:03:52.056504 systemd[1]: Reached target swap.target. Sep 13 00:03:52.056522 systemd[1]: Reached target timers.target. Sep 13 00:03:52.056545 systemd[1]: Listening on iscsid.socket. Sep 13 00:03:52.056563 systemd[1]: Listening on iscsiuio.socket. Sep 13 00:03:52.056581 systemd[1]: Listening on systemd-journald-audit.socket. Sep 13 00:03:52.056599 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 13 00:03:52.056617 systemd[1]: Listening on systemd-journald.socket. Sep 13 00:03:52.056634 systemd[1]: Listening on systemd-networkd.socket. Sep 13 00:03:52.056672 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 00:03:52.056695 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 00:03:52.056719 systemd[1]: Reached target sockets.target. Sep 13 00:03:52.056737 systemd[1]: Starting kmod-static-nodes.service... Sep 13 00:03:52.056755 systemd[1]: Finished network-cleanup.service. Sep 13 00:03:52.056773 systemd[1]: Starting systemd-fsck-usr.service... Sep 13 00:03:52.056791 systemd[1]: Starting systemd-journald.service... Sep 13 00:03:52.056809 systemd[1]: Starting systemd-modules-load.service... Sep 13 00:03:52.056828 systemd[1]: Starting systemd-resolved.service... Sep 13 00:03:52.056845 systemd[1]: Starting systemd-vconsole-setup.service... Sep 13 00:03:52.056864 systemd[1]: Finished kmod-static-nodes.service. Sep 13 00:03:52.056886 systemd[1]: Finished systemd-fsck-usr.service. Sep 13 00:03:52.056904 systemd[1]: Finished systemd-vconsole-setup.service. Sep 13 00:03:52.056923 kernel: audit: type=1130 audit(1757721832.003:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.056941 systemd[1]: Starting dracut-cmdline-ask.service... Sep 13 00:03:52.056959 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 00:03:52.056981 systemd-journald[310]: Journal started Sep 13 00:03:52.057072 systemd-journald[310]: Runtime Journal (/run/log/journal/ec2709168ec806cfe8f3c7ee1e495521) is 8.0M, max 75.4M, 67.4M free. Sep 13 00:03:52.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:51.970726 systemd-modules-load[311]: Inserted module 'overlay' Sep 13 00:03:52.063098 systemd[1]: Started systemd-journald.service. Sep 13 00:03:52.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.068908 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 00:03:52.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.099759 kernel: audit: type=1130 audit(1757721832.066:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.099822 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 13 00:03:52.099849 kernel: audit: type=1130 audit(1757721832.078:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.099630 systemd-resolved[312]: Positive Trust Anchors: Sep 13 00:03:52.099668 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 00:03:52.107053 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 00:03:52.109583 systemd-modules-load[311]: Inserted module 'br_netfilter' Sep 13 00:03:52.110384 kernel: Bridge firewalling registered Sep 13 00:03:52.146066 systemd[1]: Finished dracut-cmdline-ask.service. Sep 13 00:03:52.155378 kernel: SCSI subsystem initialized Sep 13 00:03:52.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.162793 systemd[1]: Starting dracut-cmdline.service... Sep 13 00:03:52.168806 kernel: audit: type=1130 audit(1757721832.154:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.181361 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 13 00:03:52.181446 kernel: device-mapper: uevent: version 1.0.3 Sep 13 00:03:52.185187 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 13 00:03:52.194104 systemd-modules-load[311]: Inserted module 'dm_multipath' Sep 13 00:03:52.195626 systemd[1]: Finished systemd-modules-load.service. Sep 13 00:03:52.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.218989 systemd[1]: Starting systemd-sysctl.service... Sep 13 00:03:52.220847 kernel: audit: type=1130 audit(1757721832.202:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.233219 dracut-cmdline[328]: dracut-dracut-053 Sep 13 00:03:52.241170 dracut-cmdline[328]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 00:03:52.263872 systemd[1]: Finished systemd-sysctl.service. Sep 13 00:03:52.275539 kernel: audit: type=1130 audit(1757721832.264:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.371686 kernel: Loading iSCSI transport class v2.0-870. Sep 13 00:03:52.392696 kernel: iscsi: registered transport (tcp) Sep 13 00:03:52.420484 kernel: iscsi: registered transport (qla4xxx) Sep 13 00:03:52.420565 kernel: QLogic iSCSI HBA Driver Sep 13 00:03:52.598696 kernel: random: crng init done Sep 13 00:03:52.598748 systemd-resolved[312]: Defaulting to hostname 'linux'. Sep 13 00:03:52.600690 systemd[1]: Started systemd-resolved.service. Sep 13 00:03:52.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.606238 systemd[1]: Reached target nss-lookup.target. Sep 13 00:03:52.616998 kernel: audit: type=1130 audit(1757721832.605:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.624384 systemd[1]: Finished dracut-cmdline.service. Sep 13 00:03:52.636432 kernel: audit: type=1130 audit(1757721832.625:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:52.627897 systemd[1]: Starting dracut-pre-udev.service... Sep 13 00:03:52.695689 kernel: raid6: neonx8 gen() 6212 MB/s Sep 13 00:03:52.713682 kernel: raid6: neonx8 xor() 4756 MB/s Sep 13 00:03:52.731680 kernel: raid6: neonx4 gen() 6461 MB/s Sep 13 00:03:52.749684 kernel: raid6: neonx4 xor() 4916 MB/s Sep 13 00:03:52.767683 kernel: raid6: neonx2 gen() 5714 MB/s Sep 13 00:03:52.785684 kernel: raid6: neonx2 xor() 4538 MB/s Sep 13 00:03:52.803683 kernel: raid6: neonx1 gen() 4444 MB/s Sep 13 00:03:52.821684 kernel: raid6: neonx1 xor() 3678 MB/s Sep 13 00:03:52.839683 kernel: raid6: int64x8 gen() 3405 MB/s Sep 13 00:03:52.858686 kernel: raid6: int64x8 xor() 2076 MB/s Sep 13 00:03:52.876684 kernel: raid6: int64x4 gen() 3780 MB/s Sep 13 00:03:52.894684 kernel: raid6: int64x4 xor() 2167 MB/s Sep 13 00:03:52.912684 kernel: raid6: int64x2 gen() 3553 MB/s Sep 13 00:03:52.930685 kernel: raid6: int64x2 xor() 1947 MB/s Sep 13 00:03:52.948684 kernel: raid6: int64x1 gen() 2761 MB/s Sep 13 00:03:52.968154 kernel: raid6: int64x1 xor() 1450 MB/s Sep 13 00:03:52.968190 kernel: raid6: using algorithm neonx4 gen() 6461 MB/s Sep 13 00:03:52.968215 kernel: raid6: .... xor() 4916 MB/s, rmw enabled Sep 13 00:03:52.969936 kernel: raid6: using neon recovery algorithm Sep 13 00:03:52.988691 kernel: xor: measuring software checksum speed Sep 13 00:03:52.988758 kernel: 8regs : 8765 MB/sec Sep 13 00:03:52.992289 kernel: 32regs : 11079 MB/sec Sep 13 00:03:52.994267 kernel: arm64_neon : 9565 MB/sec Sep 13 00:03:52.994297 kernel: xor: using function: 32regs (11079 MB/sec) Sep 13 00:03:53.092740 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 13 00:03:53.110852 systemd[1]: Finished dracut-pre-udev.service. Sep 13 00:03:53.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:53.119000 audit: BPF prog-id=7 op=LOAD Sep 13 00:03:53.121687 kernel: audit: type=1130 audit(1757721833.111:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:53.119000 audit: BPF prog-id=8 op=LOAD Sep 13 00:03:53.122366 systemd[1]: Starting systemd-udevd.service... Sep 13 00:03:53.151852 systemd-udevd[509]: Using default interface naming scheme 'v252'. Sep 13 00:03:53.162970 systemd[1]: Started systemd-udevd.service. Sep 13 00:03:53.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:53.169131 systemd[1]: Starting dracut-pre-trigger.service... Sep 13 00:03:53.199620 dracut-pre-trigger[519]: rd.md=0: removing MD RAID activation Sep 13 00:03:53.262031 systemd[1]: Finished dracut-pre-trigger.service. Sep 13 00:03:53.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:53.266984 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 00:03:53.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:53.366260 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 00:03:53.472966 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Sep 13 00:03:53.473034 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Sep 13 00:03:53.491643 kernel: ena 0000:00:05.0: ENA device version: 0.10 Sep 13 00:03:53.491912 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Sep 13 00:03:53.492120 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:d2:bb:a2:03:35 Sep 13 00:03:53.495840 (udev-worker)[565]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:03:53.519035 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Sep 13 00:03:53.519092 kernel: nvme nvme0: pci function 0000:00:04.0 Sep 13 00:03:53.528693 kernel: nvme nvme0: 2/0/0 default/read/poll queues Sep 13 00:03:53.537030 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 13 00:03:53.537084 kernel: GPT:9289727 != 16777215 Sep 13 00:03:53.537109 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 13 00:03:53.539212 kernel: GPT:9289727 != 16777215 Sep 13 00:03:53.540502 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 13 00:03:53.543906 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 00:03:53.620698 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (563) Sep 13 00:03:53.689432 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 13 00:03:53.738610 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 00:03:53.751150 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 13 00:03:53.755340 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 13 00:03:53.770451 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 13 00:03:53.775817 systemd[1]: Starting disk-uuid.service... Sep 13 00:03:53.786511 disk-uuid[662]: Primary Header is updated. Sep 13 00:03:53.786511 disk-uuid[662]: Secondary Entries is updated. Sep 13 00:03:53.786511 disk-uuid[662]: Secondary Header is updated. Sep 13 00:03:53.795677 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 00:03:53.802685 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 00:03:53.811691 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 00:03:54.814702 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 00:03:54.815479 disk-uuid[663]: The operation has completed successfully. Sep 13 00:03:54.981354 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 13 00:03:54.981950 systemd[1]: Finished disk-uuid.service. Sep 13 00:03:54.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:54.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.007963 systemd[1]: Starting verity-setup.service... Sep 13 00:03:55.046704 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 13 00:03:55.139968 systemd[1]: Found device dev-mapper-usr.device. Sep 13 00:03:55.146205 systemd[1]: Mounting sysusr-usr.mount... Sep 13 00:03:55.152602 systemd[1]: Finished verity-setup.service. Sep 13 00:03:55.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.241692 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 13 00:03:55.242696 systemd[1]: Mounted sysusr-usr.mount. Sep 13 00:03:55.245947 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 13 00:03:55.250167 systemd[1]: Starting ignition-setup.service... Sep 13 00:03:55.258539 systemd[1]: Starting parse-ip-for-networkd.service... Sep 13 00:03:55.290117 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:03:55.290187 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 00:03:55.292742 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 00:03:55.326704 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 00:03:55.344748 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 13 00:03:55.372856 systemd[1]: Finished ignition-setup.service. Sep 13 00:03:55.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.377802 systemd[1]: Starting ignition-fetch-offline.service... Sep 13 00:03:55.408111 systemd[1]: Finished parse-ip-for-networkd.service. Sep 13 00:03:55.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.414000 audit: BPF prog-id=9 op=LOAD Sep 13 00:03:55.416525 systemd[1]: Starting systemd-networkd.service... Sep 13 00:03:55.465208 systemd-networkd[1175]: lo: Link UP Sep 13 00:03:55.465231 systemd-networkd[1175]: lo: Gained carrier Sep 13 00:03:55.469092 systemd-networkd[1175]: Enumeration completed Sep 13 00:03:55.469591 systemd-networkd[1175]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 00:03:55.470259 systemd[1]: Started systemd-networkd.service. Sep 13 00:03:55.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.478865 systemd[1]: Reached target network.target. Sep 13 00:03:55.482841 systemd[1]: Starting iscsiuio.service... Sep 13 00:03:55.492721 systemd-networkd[1175]: eth0: Link UP Sep 13 00:03:55.494520 systemd-networkd[1175]: eth0: Gained carrier Sep 13 00:03:55.503528 systemd[1]: Started iscsiuio.service. Sep 13 00:03:55.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.506840 systemd[1]: Starting iscsid.service... Sep 13 00:03:55.518274 iscsid[1180]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 13 00:03:55.518274 iscsid[1180]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 13 00:03:55.518274 iscsid[1180]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 13 00:03:55.518274 iscsid[1180]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 13 00:03:55.518274 iscsid[1180]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 13 00:03:55.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.544412 iscsid[1180]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 13 00:03:55.535027 systemd[1]: Started iscsid.service. Sep 13 00:03:55.544931 systemd-networkd[1175]: eth0: DHCPv4 address 172.31.27.41/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 13 00:03:55.548189 systemd[1]: Starting dracut-initqueue.service... Sep 13 00:03:55.577644 systemd[1]: Finished dracut-initqueue.service. Sep 13 00:03:55.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:55.579693 systemd[1]: Reached target remote-fs-pre.target. Sep 13 00:03:55.581610 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 00:03:55.583645 systemd[1]: Reached target remote-fs.target. Sep 13 00:03:55.595005 systemd[1]: Starting dracut-pre-mount.service... Sep 13 00:03:55.614200 systemd[1]: Finished dracut-pre-mount.service. Sep 13 00:03:55.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.253622 ignition[1158]: Ignition 2.14.0 Sep 13 00:03:56.253685 ignition[1158]: Stage: fetch-offline Sep 13 00:03:56.255574 ignition[1158]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:03:56.256991 ignition[1158]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:03:56.285440 ignition[1158]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:03:56.286518 ignition[1158]: Ignition finished successfully Sep 13 00:03:56.293163 systemd[1]: Finished ignition-fetch-offline.service. Sep 13 00:03:56.306198 kernel: kauditd_printk_skb: 16 callbacks suppressed Sep 13 00:03:56.306285 kernel: audit: type=1130 audit(1757721836.297:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.300709 systemd[1]: Starting ignition-fetch.service... Sep 13 00:03:56.317963 ignition[1199]: Ignition 2.14.0 Sep 13 00:03:56.317990 ignition[1199]: Stage: fetch Sep 13 00:03:56.318291 ignition[1199]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:03:56.318348 ignition[1199]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:03:56.336707 ignition[1199]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:03:56.339422 ignition[1199]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:03:56.352719 ignition[1199]: INFO : PUT result: OK Sep 13 00:03:56.357077 ignition[1199]: DEBUG : parsed url from cmdline: "" Sep 13 00:03:56.357077 ignition[1199]: INFO : no config URL provided Sep 13 00:03:56.357077 ignition[1199]: INFO : reading system config file "/usr/lib/ignition/user.ign" Sep 13 00:03:56.357077 ignition[1199]: INFO : no config at "/usr/lib/ignition/user.ign" Sep 13 00:03:56.357077 ignition[1199]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:03:56.368762 ignition[1199]: INFO : PUT result: OK Sep 13 00:03:56.368762 ignition[1199]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Sep 13 00:03:56.374404 ignition[1199]: INFO : GET result: OK Sep 13 00:03:56.374404 ignition[1199]: DEBUG : parsing config with SHA512: 74016f1cd9decbcbed5dcb1e4c67180848d85d8662dc62c57d92ba40007c28e672a396dcfb3f37381f2ec3456cbfa8a523a49f14e5324a23758351187089178b Sep 13 00:03:56.380900 unknown[1199]: fetched base config from "system" Sep 13 00:03:56.380923 unknown[1199]: fetched base config from "system" Sep 13 00:03:56.380939 unknown[1199]: fetched user config from "aws" Sep 13 00:03:56.390464 ignition[1199]: fetch: fetch complete Sep 13 00:03:56.390480 ignition[1199]: fetch: fetch passed Sep 13 00:03:56.399892 ignition[1199]: Ignition finished successfully Sep 13 00:03:56.404029 systemd[1]: Finished ignition-fetch.service. Sep 13 00:03:56.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.408893 systemd[1]: Starting ignition-kargs.service... Sep 13 00:03:56.418055 kernel: audit: type=1130 audit(1757721836.405:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.432433 ignition[1205]: Ignition 2.14.0 Sep 13 00:03:56.432463 ignition[1205]: Stage: kargs Sep 13 00:03:56.432812 ignition[1205]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:03:56.432866 ignition[1205]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:03:56.447120 ignition[1205]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:03:56.449864 ignition[1205]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:03:56.453441 ignition[1205]: INFO : PUT result: OK Sep 13 00:03:56.459483 ignition[1205]: kargs: kargs passed Sep 13 00:03:56.459600 ignition[1205]: Ignition finished successfully Sep 13 00:03:56.463450 systemd[1]: Finished ignition-kargs.service. Sep 13 00:03:56.480999 kernel: audit: type=1130 audit(1757721836.461:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.468929 systemd[1]: Starting ignition-disks.service... Sep 13 00:03:56.490371 ignition[1211]: Ignition 2.14.0 Sep 13 00:03:56.490400 ignition[1211]: Stage: disks Sep 13 00:03:56.490751 ignition[1211]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:03:56.490804 ignition[1211]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:03:56.511742 ignition[1211]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:03:56.514801 ignition[1211]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:03:56.517524 ignition[1211]: INFO : PUT result: OK Sep 13 00:03:56.523700 ignition[1211]: disks: disks passed Sep 13 00:03:56.523807 ignition[1211]: Ignition finished successfully Sep 13 00:03:56.528372 systemd[1]: Finished ignition-disks.service. Sep 13 00:03:56.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.532032 systemd[1]: Reached target initrd-root-device.target. Sep 13 00:03:56.559352 kernel: audit: type=1130 audit(1757721836.530:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.542159 systemd[1]: Reached target local-fs-pre.target. Sep 13 00:03:56.544062 systemd[1]: Reached target local-fs.target. Sep 13 00:03:56.545908 systemd[1]: Reached target sysinit.target. Sep 13 00:03:56.547706 systemd[1]: Reached target basic.target. Sep 13 00:03:56.550953 systemd[1]: Starting systemd-fsck-root.service... Sep 13 00:03:56.595537 systemd-fsck[1219]: ROOT: clean, 629/553520 files, 56027/553472 blocks Sep 13 00:03:56.605539 systemd[1]: Finished systemd-fsck-root.service. Sep 13 00:03:56.617117 kernel: audit: type=1130 audit(1757721836.606:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:56.609073 systemd[1]: Mounting sysroot.mount... Sep 13 00:03:56.635680 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 13 00:03:56.636881 systemd[1]: Mounted sysroot.mount. Sep 13 00:03:56.638939 systemd-networkd[1175]: eth0: Gained IPv6LL Sep 13 00:03:56.640496 systemd[1]: Reached target initrd-root-fs.target. Sep 13 00:03:56.655383 systemd[1]: Mounting sysroot-usr.mount... Sep 13 00:03:56.661909 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 13 00:03:56.662019 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 13 00:03:56.662078 systemd[1]: Reached target ignition-diskful.target. Sep 13 00:03:56.676744 systemd[1]: Mounted sysroot-usr.mount. Sep 13 00:03:56.703592 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 00:03:56.708830 systemd[1]: Starting initrd-setup-root.service... Sep 13 00:03:56.727879 initrd-setup-root[1241]: cut: /sysroot/etc/passwd: No such file or directory Sep 13 00:03:56.736698 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1236) Sep 13 00:03:56.743844 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:03:56.743908 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 00:03:56.746028 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 00:03:56.748800 initrd-setup-root[1252]: cut: /sysroot/etc/group: No such file or directory Sep 13 00:03:56.766994 initrd-setup-root[1273]: cut: /sysroot/etc/shadow: No such file or directory Sep 13 00:03:56.777693 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 00:03:56.778496 initrd-setup-root[1283]: cut: /sysroot/etc/gshadow: No such file or directory Sep 13 00:03:56.790070 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 00:03:57.019806 systemd[1]: Finished initrd-setup-root.service. Sep 13 00:03:57.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:57.021515 systemd[1]: Starting ignition-mount.service... Sep 13 00:03:57.036598 systemd[1]: Starting sysroot-boot.service... Sep 13 00:03:57.043154 kernel: audit: type=1130 audit(1757721837.018:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:57.051861 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 13 00:03:57.054271 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 13 00:03:57.083405 ignition[1302]: INFO : Ignition 2.14.0 Sep 13 00:03:57.083405 ignition[1302]: INFO : Stage: mount Sep 13 00:03:57.087574 ignition[1302]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:03:57.087574 ignition[1302]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:03:57.105964 systemd[1]: Finished sysroot-boot.service. Sep 13 00:03:57.120683 kernel: audit: type=1130 audit(1757721837.108:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:57.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:57.120826 ignition[1302]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:03:57.123867 ignition[1302]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:03:57.128307 ignition[1302]: INFO : PUT result: OK Sep 13 00:03:57.135623 ignition[1302]: INFO : mount: mount passed Sep 13 00:03:57.138320 ignition[1302]: INFO : Ignition finished successfully Sep 13 00:03:57.140619 systemd[1]: Finished ignition-mount.service. Sep 13 00:03:57.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:57.148175 systemd[1]: Starting ignition-files.service... Sep 13 00:03:57.151679 kernel: audit: type=1130 audit(1757721837.142:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:57.162706 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 00:03:57.183708 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1312) Sep 13 00:03:57.191335 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:03:57.191396 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 00:03:57.191420 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 00:03:57.210701 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 00:03:57.215785 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 00:03:57.235497 ignition[1331]: INFO : Ignition 2.14.0 Sep 13 00:03:57.235497 ignition[1331]: INFO : Stage: files Sep 13 00:03:57.242772 ignition[1331]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:03:57.242772 ignition[1331]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:03:57.258682 ignition[1331]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:03:57.262091 ignition[1331]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:03:57.265811 ignition[1331]: INFO : PUT result: OK Sep 13 00:03:57.272811 ignition[1331]: DEBUG : files: compiled without relabeling support, skipping Sep 13 00:03:57.276954 ignition[1331]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 13 00:03:57.276954 ignition[1331]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 13 00:03:57.312052 ignition[1331]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 13 00:03:57.315175 ignition[1331]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 13 00:03:57.317993 ignition[1331]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 13 00:03:57.317173 unknown[1331]: wrote ssh authorized keys file for user: core Sep 13 00:03:57.323269 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 13 00:03:57.323269 ignition[1331]: INFO : GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Sep 13 00:03:57.416930 ignition[1331]: INFO : GET result: OK Sep 13 00:03:57.696714 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 13 00:03:57.701378 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 13 00:03:57.701378 ignition[1331]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:03:57.718033 ignition[1331]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3533360214" Sep 13 00:03:57.721870 ignition[1331]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3533360214": device or resource busy Sep 13 00:03:57.721870 ignition[1331]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3533360214", trying btrfs: device or resource busy Sep 13 00:03:57.721870 ignition[1331]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3533360214" Sep 13 00:03:57.721870 ignition[1331]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3533360214" Sep 13 00:03:57.744488 ignition[1331]: INFO : op(3): [started] unmounting "/mnt/oem3533360214" Sep 13 00:03:57.746948 ignition[1331]: INFO : op(3): [finished] unmounting "/mnt/oem3533360214" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 00:03:57.746948 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 00:03:57.779633 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 00:03:57.779633 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 00:03:57.779633 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 00:03:57.779633 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 00:03:57.779633 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 00:03:57.779633 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 13 00:03:57.779633 ignition[1331]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:03:57.809352 systemd[1]: mnt-oem3533360214.mount: Deactivated successfully. Sep 13 00:03:57.821843 ignition[1331]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3525051303" Sep 13 00:03:57.824977 ignition[1331]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3525051303": device or resource busy Sep 13 00:03:57.824977 ignition[1331]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3525051303", trying btrfs: device or resource busy Sep 13 00:03:57.824977 ignition[1331]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3525051303" Sep 13 00:03:57.824977 ignition[1331]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3525051303" Sep 13 00:03:57.844996 ignition[1331]: INFO : op(6): [started] unmounting "/mnt/oem3525051303" Sep 13 00:03:57.844996 ignition[1331]: INFO : op(6): [finished] unmounting "/mnt/oem3525051303" Sep 13 00:03:57.844996 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 13 00:03:57.844996 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 13 00:03:57.844996 ignition[1331]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:03:57.854457 systemd[1]: mnt-oem3525051303.mount: Deactivated successfully. Sep 13 00:03:57.880582 ignition[1331]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2053809328" Sep 13 00:03:57.883761 ignition[1331]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2053809328": device or resource busy Sep 13 00:03:57.887456 ignition[1331]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2053809328", trying btrfs: device or resource busy Sep 13 00:03:57.891302 ignition[1331]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2053809328" Sep 13 00:03:57.894480 ignition[1331]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2053809328" Sep 13 00:03:57.897746 ignition[1331]: INFO : op(9): [started] unmounting "/mnt/oem2053809328" Sep 13 00:03:57.900272 ignition[1331]: INFO : op(9): [finished] unmounting "/mnt/oem2053809328" Sep 13 00:03:57.900272 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 13 00:03:57.906569 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 00:03:57.910723 ignition[1331]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:03:57.923810 ignition[1331]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem748922959" Sep 13 00:03:57.926925 ignition[1331]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem748922959": device or resource busy Sep 13 00:03:57.926925 ignition[1331]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem748922959", trying btrfs: device or resource busy Sep 13 00:03:57.926925 ignition[1331]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem748922959" Sep 13 00:03:57.938260 ignition[1331]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem748922959" Sep 13 00:03:57.938260 ignition[1331]: INFO : op(c): [started] unmounting "/mnt/oem748922959" Sep 13 00:03:57.938260 ignition[1331]: INFO : op(c): [finished] unmounting "/mnt/oem748922959" Sep 13 00:03:57.938260 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 00:03:57.938260 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 00:03:57.938260 ignition[1331]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Sep 13 00:03:58.384225 ignition[1331]: INFO : GET result: OK Sep 13 00:03:59.028074 ignition[1331]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 00:03:59.028074 ignition[1331]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Sep 13 00:03:59.028074 ignition[1331]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(12): [started] processing unit "nvidia.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(12): [finished] processing unit "nvidia.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Sep 13 00:03:59.040116 ignition[1331]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Sep 13 00:03:59.069911 ignition[1331]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Sep 13 00:03:59.113020 ignition[1331]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 13 00:03:59.113020 ignition[1331]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 13 00:03:59.113020 ignition[1331]: INFO : files: files passed Sep 13 00:03:59.113020 ignition[1331]: INFO : Ignition finished successfully Sep 13 00:03:59.126523 systemd[1]: Finished ignition-files.service. Sep 13 00:03:59.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.140700 kernel: audit: type=1130 audit(1757721839.129:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.141496 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 13 00:03:59.146683 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 13 00:03:59.149111 systemd[1]: Starting ignition-quench.service... Sep 13 00:03:59.159673 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 13 00:03:59.160089 systemd[1]: Finished ignition-quench.service. Sep 13 00:03:59.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.175708 kernel: audit: type=1130 audit(1757721839.164:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.181106 initrd-setup-root-after-ignition[1356]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 13 00:03:59.186179 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 13 00:03:59.191299 systemd[1]: Reached target ignition-complete.target. Sep 13 00:03:59.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.196835 systemd[1]: Starting initrd-parse-etc.service... Sep 13 00:03:59.227189 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 13 00:03:59.227740 systemd[1]: Finished initrd-parse-etc.service. Sep 13 00:03:59.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.231697 systemd[1]: Reached target initrd-fs.target. Sep 13 00:03:59.233593 systemd[1]: Reached target initrd.target. Sep 13 00:03:59.235392 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 13 00:03:59.236902 systemd[1]: Starting dracut-pre-pivot.service... Sep 13 00:03:59.267284 systemd[1]: Finished dracut-pre-pivot.service. Sep 13 00:03:59.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.272460 systemd[1]: Starting initrd-cleanup.service... Sep 13 00:03:59.295608 systemd[1]: Stopped target nss-lookup.target. Sep 13 00:03:59.299523 systemd[1]: Stopped target remote-cryptsetup.target. Sep 13 00:03:59.303748 systemd[1]: Stopped target timers.target. Sep 13 00:03:59.307077 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 13 00:03:59.309344 systemd[1]: Stopped dracut-pre-pivot.service. Sep 13 00:03:59.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.313224 systemd[1]: Stopped target initrd.target. Sep 13 00:03:59.316595 systemd[1]: Stopped target basic.target. Sep 13 00:03:59.319953 systemd[1]: Stopped target ignition-complete.target. Sep 13 00:03:59.323857 systemd[1]: Stopped target ignition-diskful.target. Sep 13 00:03:59.327683 systemd[1]: Stopped target initrd-root-device.target. Sep 13 00:03:59.331479 systemd[1]: Stopped target remote-fs.target. Sep 13 00:03:59.334872 systemd[1]: Stopped target remote-fs-pre.target. Sep 13 00:03:59.341596 systemd[1]: Stopped target sysinit.target. Sep 13 00:03:59.345030 systemd[1]: Stopped target local-fs.target. Sep 13 00:03:59.348499 systemd[1]: Stopped target local-fs-pre.target. Sep 13 00:03:59.352179 systemd[1]: Stopped target swap.target. Sep 13 00:03:59.355587 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 13 00:03:59.357839 systemd[1]: Stopped dracut-pre-mount.service. Sep 13 00:03:59.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.361770 systemd[1]: Stopped target cryptsetup.target. Sep 13 00:03:59.365570 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 13 00:03:59.367902 systemd[1]: Stopped dracut-initqueue.service. Sep 13 00:03:59.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.371833 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 13 00:03:59.374483 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 13 00:03:59.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.379116 systemd[1]: ignition-files.service: Deactivated successfully. Sep 13 00:03:59.379390 systemd[1]: Stopped ignition-files.service. Sep 13 00:03:59.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.387195 systemd[1]: Stopping ignition-mount.service... Sep 13 00:03:59.403794 ignition[1369]: INFO : Ignition 2.14.0 Sep 13 00:03:59.403794 ignition[1369]: INFO : Stage: umount Sep 13 00:03:59.403794 ignition[1369]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:03:59.403794 ignition[1369]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:03:59.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.407891 systemd[1]: Stopping iscsiuio.service... Sep 13 00:03:59.415602 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 13 00:03:59.416089 systemd[1]: Stopped kmod-static-nodes.service. Sep 13 00:03:59.433804 systemd[1]: Stopping sysroot-boot.service... Sep 13 00:03:59.441752 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 13 00:03:59.442256 systemd[1]: Stopped systemd-udev-trigger.service. Sep 13 00:03:59.451841 ignition[1369]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:03:59.451841 ignition[1369]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:03:59.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.454769 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 13 00:03:59.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.469602 ignition[1369]: INFO : PUT result: OK Sep 13 00:03:59.455102 systemd[1]: Stopped dracut-pre-trigger.service. Sep 13 00:03:59.466873 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 13 00:03:59.469783 systemd[1]: Stopped iscsiuio.service. Sep 13 00:03:59.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.485106 ignition[1369]: INFO : umount: umount passed Sep 13 00:03:59.485106 ignition[1369]: INFO : Ignition finished successfully Sep 13 00:03:59.493866 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 13 00:03:59.496543 systemd[1]: Finished initrd-cleanup.service. Sep 13 00:03:59.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.501262 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 13 00:03:59.502542 systemd[1]: Stopped ignition-mount.service. Sep 13 00:03:59.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.507525 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 13 00:03:59.508198 systemd[1]: Stopped ignition-disks.service. Sep 13 00:03:59.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.513599 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 13 00:03:59.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.513733 systemd[1]: Stopped ignition-kargs.service. Sep 13 00:03:59.519475 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 13 00:03:59.521029 systemd[1]: Stopped ignition-fetch.service. Sep 13 00:03:59.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.529034 systemd[1]: Stopped target network.target. Sep 13 00:03:59.529177 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 13 00:03:59.535582 systemd[1]: Stopped ignition-fetch-offline.service. Sep 13 00:03:59.539872 systemd[1]: Stopped target paths.target. Sep 13 00:03:59.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.545605 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 13 00:03:59.551765 systemd[1]: Stopped systemd-ask-password-console.path. Sep 13 00:03:59.555496 systemd[1]: Stopped target slices.target. Sep 13 00:03:59.557212 systemd[1]: Stopped target sockets.target. Sep 13 00:03:59.561856 systemd[1]: iscsid.socket: Deactivated successfully. Sep 13 00:03:59.561945 systemd[1]: Closed iscsid.socket. Sep 13 00:03:59.565753 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 13 00:03:59.567153 systemd[1]: Closed iscsiuio.socket. Sep 13 00:03:59.568828 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 13 00:03:59.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.570676 systemd[1]: Stopped ignition-setup.service. Sep 13 00:03:59.575998 systemd[1]: Stopping systemd-networkd.service... Sep 13 00:03:59.581103 systemd[1]: Stopping systemd-resolved.service... Sep 13 00:03:59.583776 systemd-networkd[1175]: eth0: DHCPv6 lease lost Sep 13 00:03:59.589261 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 13 00:03:59.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.590377 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 13 00:03:59.590602 systemd[1]: Stopped systemd-networkd.service. Sep 13 00:03:59.596941 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 13 00:03:59.598711 systemd[1]: Stopped systemd-resolved.service. Sep 13 00:03:59.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.604876 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 13 00:03:59.607018 systemd[1]: Stopped sysroot-boot.service. Sep 13 00:03:59.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.608000 audit: BPF prog-id=9 op=UNLOAD Sep 13 00:03:59.608000 audit: BPF prog-id=6 op=UNLOAD Sep 13 00:03:59.610561 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 13 00:03:59.610716 systemd[1]: Closed systemd-networkd.socket. Sep 13 00:03:59.614392 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 13 00:03:59.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.614594 systemd[1]: Stopped initrd-setup-root.service. Sep 13 00:03:59.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.619192 systemd[1]: Stopping network-cleanup.service... Sep 13 00:03:59.622584 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 13 00:03:59.622732 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 13 00:03:59.626026 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 13 00:03:59.626872 systemd[1]: Stopped systemd-sysctl.service. Sep 13 00:03:59.628943 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 13 00:03:59.630187 systemd[1]: Stopped systemd-modules-load.service. Sep 13 00:03:59.633015 systemd[1]: Stopping systemd-udevd.service... Sep 13 00:03:59.659436 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 13 00:03:59.660563 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 13 00:03:59.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.660915 systemd[1]: Stopped systemd-udevd.service. Sep 13 00:03:59.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.666052 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 13 00:03:59.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.666169 systemd[1]: Closed systemd-udevd-control.socket. Sep 13 00:03:59.672156 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 13 00:03:59.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:03:59.672252 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 13 00:03:59.674196 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 13 00:03:59.674301 systemd[1]: Stopped dracut-pre-udev.service. Sep 13 00:03:59.680004 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 13 00:03:59.680120 systemd[1]: Stopped dracut-cmdline.service. Sep 13 00:03:59.683428 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 13 00:03:59.683542 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 13 00:03:59.687611 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 13 00:03:59.699888 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 13 00:03:59.700023 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 13 00:03:59.705091 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 13 00:03:59.705339 systemd[1]: Stopped network-cleanup.service. Sep 13 00:03:59.706456 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 13 00:03:59.706684 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 13 00:03:59.707283 systemd[1]: Reached target initrd-switch-root.target. Sep 13 00:03:59.716424 systemd[1]: Starting initrd-switch-root.service... Sep 13 00:03:59.758944 systemd[1]: Switching root. Sep 13 00:03:59.788395 iscsid[1180]: iscsid shutting down. Sep 13 00:03:59.790118 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Sep 13 00:03:59.790203 systemd-journald[310]: Journal stopped Sep 13 00:04:06.015707 kernel: SELinux: Class mctp_socket not defined in policy. Sep 13 00:04:06.015817 kernel: SELinux: Class anon_inode not defined in policy. Sep 13 00:04:06.015854 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 13 00:04:06.015886 kernel: SELinux: policy capability network_peer_controls=1 Sep 13 00:04:06.015924 kernel: SELinux: policy capability open_perms=1 Sep 13 00:04:06.015955 kernel: SELinux: policy capability extended_socket_class=1 Sep 13 00:04:06.015984 kernel: SELinux: policy capability always_check_network=0 Sep 13 00:04:06.016015 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 13 00:04:06.016054 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 13 00:04:06.016090 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 13 00:04:06.016124 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 13 00:04:06.016160 systemd[1]: Successfully loaded SELinux policy in 138.404ms. Sep 13 00:04:06.016219 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 23.058ms. Sep 13 00:04:06.016253 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 00:04:06.016285 systemd[1]: Detected virtualization amazon. Sep 13 00:04:06.016319 systemd[1]: Detected architecture arm64. Sep 13 00:04:06.016349 systemd[1]: Detected first boot. Sep 13 00:04:06.016381 systemd[1]: Initializing machine ID from VM UUID. Sep 13 00:04:06.016414 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 13 00:04:06.016448 systemd[1]: Populated /etc with preset unit settings. Sep 13 00:04:06.016481 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:04:06.016516 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:04:06.016551 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:04:06.016585 kernel: kauditd_printk_skb: 55 callbacks suppressed Sep 13 00:04:06.016617 kernel: audit: type=1334 audit(1757721845.561:85): prog-id=12 op=LOAD Sep 13 00:04:06.016669 kernel: audit: type=1334 audit(1757721845.564:86): prog-id=3 op=UNLOAD Sep 13 00:04:06.016711 kernel: audit: type=1334 audit(1757721845.566:87): prog-id=13 op=LOAD Sep 13 00:04:06.016742 kernel: audit: type=1334 audit(1757721845.569:88): prog-id=14 op=LOAD Sep 13 00:04:06.016774 systemd[1]: iscsid.service: Deactivated successfully. Sep 13 00:04:06.016803 kernel: audit: type=1334 audit(1757721845.569:89): prog-id=4 op=UNLOAD Sep 13 00:04:06.016840 systemd[1]: Stopped iscsid.service. Sep 13 00:04:06.016871 kernel: audit: type=1334 audit(1757721845.569:90): prog-id=5 op=UNLOAD Sep 13 00:04:06.016901 kernel: audit: type=1131 audit(1757721845.572:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.016933 kernel: audit: type=1334 audit(1757721845.582:92): prog-id=12 op=UNLOAD Sep 13 00:04:06.016965 kernel: audit: type=1131 audit(1757721845.598:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.016996 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 13 00:04:06.017029 systemd[1]: Stopped initrd-switch-root.service. Sep 13 00:04:06.017061 kernel: audit: type=1130 audit(1757721845.615:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.017090 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 13 00:04:06.017123 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 13 00:04:06.017156 systemd[1]: Created slice system-addon\x2drun.slice. Sep 13 00:04:06.017190 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Sep 13 00:04:06.017221 systemd[1]: Created slice system-getty.slice. Sep 13 00:04:06.017252 systemd[1]: Created slice system-modprobe.slice. Sep 13 00:04:06.017282 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 13 00:04:06.017313 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 13 00:04:06.017345 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 13 00:04:06.017381 systemd[1]: Created slice user.slice. Sep 13 00:04:06.017411 systemd[1]: Started systemd-ask-password-console.path. Sep 13 00:04:06.017443 systemd[1]: Started systemd-ask-password-wall.path. Sep 13 00:04:06.017480 systemd[1]: Set up automount boot.automount. Sep 13 00:04:06.017516 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 13 00:04:06.017548 systemd[1]: Stopped target initrd-switch-root.target. Sep 13 00:04:06.017577 systemd[1]: Stopped target initrd-fs.target. Sep 13 00:04:06.017609 systemd[1]: Stopped target initrd-root-fs.target. Sep 13 00:04:06.017641 systemd[1]: Reached target integritysetup.target. Sep 13 00:04:06.017735 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 00:04:06.017769 systemd[1]: Reached target remote-fs.target. Sep 13 00:04:06.017801 systemd[1]: Reached target slices.target. Sep 13 00:04:06.017838 systemd[1]: Reached target swap.target. Sep 13 00:04:06.017867 systemd[1]: Reached target torcx.target. Sep 13 00:04:06.017897 systemd[1]: Reached target veritysetup.target. Sep 13 00:04:06.017929 systemd[1]: Listening on systemd-coredump.socket. Sep 13 00:04:06.017960 systemd[1]: Listening on systemd-initctl.socket. Sep 13 00:04:06.017992 systemd[1]: Listening on systemd-networkd.socket. Sep 13 00:04:06.018022 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 00:04:06.018054 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 00:04:06.018083 systemd[1]: Listening on systemd-userdbd.socket. Sep 13 00:04:06.018116 systemd[1]: Mounting dev-hugepages.mount... Sep 13 00:04:06.018148 systemd[1]: Mounting dev-mqueue.mount... Sep 13 00:04:06.018179 systemd[1]: Mounting media.mount... Sep 13 00:04:06.018212 systemd[1]: Mounting sys-kernel-debug.mount... Sep 13 00:04:06.018242 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 13 00:04:06.018272 systemd[1]: Mounting tmp.mount... Sep 13 00:04:06.018302 systemd[1]: Starting flatcar-tmpfiles.service... Sep 13 00:04:06.018332 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:04:06.018365 systemd[1]: Starting kmod-static-nodes.service... Sep 13 00:04:06.018396 systemd[1]: Starting modprobe@configfs.service... Sep 13 00:04:06.018430 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:04:06.018459 systemd[1]: Starting modprobe@drm.service... Sep 13 00:04:06.018493 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:04:06.018532 systemd[1]: Starting modprobe@fuse.service... Sep 13 00:04:06.018562 systemd[1]: Starting modprobe@loop.service... Sep 13 00:04:06.018593 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 13 00:04:06.018623 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 13 00:04:06.018681 systemd[1]: Stopped systemd-fsck-root.service. Sep 13 00:04:06.018729 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 13 00:04:06.018759 systemd[1]: Stopped systemd-fsck-usr.service. Sep 13 00:04:06.018788 systemd[1]: Stopped systemd-journald.service. Sep 13 00:04:06.018817 systemd[1]: Starting systemd-journald.service... Sep 13 00:04:06.018849 systemd[1]: Starting systemd-modules-load.service... Sep 13 00:04:06.018881 systemd[1]: Starting systemd-network-generator.service... Sep 13 00:04:06.018911 systemd[1]: Starting systemd-remount-fs.service... Sep 13 00:04:06.018940 kernel: fuse: init (API version 7.34) Sep 13 00:04:06.018968 kernel: loop: module loaded Sep 13 00:04:06.018997 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 00:04:06.019031 systemd[1]: verity-setup.service: Deactivated successfully. Sep 13 00:04:06.019060 systemd[1]: Stopped verity-setup.service. Sep 13 00:04:06.019090 systemd[1]: Mounted dev-hugepages.mount. Sep 13 00:04:06.019119 systemd[1]: Mounted dev-mqueue.mount. Sep 13 00:04:06.019150 systemd[1]: Mounted media.mount. Sep 13 00:04:06.019183 systemd[1]: Mounted sys-kernel-debug.mount. Sep 13 00:04:06.019212 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 13 00:04:06.019242 systemd[1]: Mounted tmp.mount. Sep 13 00:04:06.019273 systemd-journald[1482]: Journal started Sep 13 00:04:06.019398 systemd-journald[1482]: Runtime Journal (/run/log/journal/ec2709168ec806cfe8f3c7ee1e495521) is 8.0M, max 75.4M, 67.4M free. Sep 13 00:04:00.763000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 13 00:04:00.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 00:04:00.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 00:04:06.033145 systemd[1]: Started systemd-journald.service. Sep 13 00:04:00.968000 audit: BPF prog-id=10 op=LOAD Sep 13 00:04:00.968000 audit: BPF prog-id=10 op=UNLOAD Sep 13 00:04:00.968000 audit: BPF prog-id=11 op=LOAD Sep 13 00:04:00.968000 audit: BPF prog-id=11 op=UNLOAD Sep 13 00:04:01.227000 audit[1402]: AVC avc: denied { associate } for pid=1402 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 00:04:01.227000 audit[1402]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458b4 a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1385 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:01.227000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 00:04:01.232000 audit[1402]: AVC avc: denied { associate } for pid=1402 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 13 00:04:01.232000 audit[1402]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145989 a2=1ed a3=0 items=2 ppid=1385 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:01.232000 audit: CWD cwd="/" Sep 13 00:04:01.232000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:04:01.232000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:04:01.232000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 00:04:05.561000 audit: BPF prog-id=12 op=LOAD Sep 13 00:04:05.564000 audit: BPF prog-id=3 op=UNLOAD Sep 13 00:04:05.566000 audit: BPF prog-id=13 op=LOAD Sep 13 00:04:05.569000 audit: BPF prog-id=14 op=LOAD Sep 13 00:04:05.569000 audit: BPF prog-id=4 op=UNLOAD Sep 13 00:04:05.569000 audit: BPF prog-id=5 op=UNLOAD Sep 13 00:04:05.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.582000 audit: BPF prog-id=12 op=UNLOAD Sep 13 00:04:05.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:05.909000 audit: BPF prog-id=15 op=LOAD Sep 13 00:04:05.909000 audit: BPF prog-id=16 op=LOAD Sep 13 00:04:05.910000 audit: BPF prog-id=17 op=LOAD Sep 13 00:04:05.910000 audit: BPF prog-id=13 op=UNLOAD Sep 13 00:04:05.910000 audit: BPF prog-id=14 op=UNLOAD Sep 13 00:04:05.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.009000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 13 00:04:06.009000 audit[1482]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffc8bc0650 a2=4000 a3=1 items=0 ppid=1 pid=1482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:06.009000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 13 00:04:06.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:01.216103 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:04:05.558647 systemd[1]: Queued start job for default target multi-user.target. Sep 13 00:04:01.217320 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 00:04:05.558716 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Sep 13 00:04:01.217372 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 00:04:05.573349 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 13 00:04:01.217442 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 13 00:04:06.029187 systemd[1]: Finished kmod-static-nodes.service. Sep 13 00:04:01.217468 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 13 00:04:06.034132 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 13 00:04:01.217540 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 13 00:04:06.036352 systemd[1]: Finished modprobe@configfs.service. Sep 13 00:04:01.217571 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 13 00:04:06.040624 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:04:01.218013 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 13 00:04:06.040939 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:04:01.218094 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 00:04:01.218130 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 00:04:01.227794 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 13 00:04:01.227887 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 13 00:04:01.227939 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 13 00:04:01.227980 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 13 00:04:06.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:01.228034 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 13 00:04:06.046423 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 00:04:01.228073 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:01Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 13 00:04:04.672877 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:04Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:04:04.673431 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:04Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:04:04.673761 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:04Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:04:04.674256 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:04Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:04:04.674384 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:04Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 13 00:04:04.674544 /usr/lib/systemd/system-generators/torcx-generator[1402]: time="2025-09-13T00:04:04Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 13 00:04:06.049901 systemd[1]: Finished modprobe@drm.service. Sep 13 00:04:06.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.055795 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:04:06.056152 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:04:06.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.062001 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 13 00:04:06.062311 systemd[1]: Finished modprobe@fuse.service. Sep 13 00:04:06.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.064975 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:04:06.065300 systemd[1]: Finished modprobe@loop.service. Sep 13 00:04:06.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.072263 systemd[1]: Finished systemd-modules-load.service. Sep 13 00:04:06.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.074991 systemd[1]: Finished systemd-network-generator.service. Sep 13 00:04:06.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.077638 systemd[1]: Finished systemd-remount-fs.service. Sep 13 00:04:06.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.081052 systemd[1]: Reached target network-pre.target. Sep 13 00:04:06.085885 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 13 00:04:06.094684 systemd[1]: Mounting sys-kernel-config.mount... Sep 13 00:04:06.096467 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 13 00:04:06.102738 systemd[1]: Starting systemd-hwdb-update.service... Sep 13 00:04:06.107035 systemd[1]: Starting systemd-journal-flush.service... Sep 13 00:04:06.109085 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:04:06.111574 systemd[1]: Starting systemd-random-seed.service... Sep 13 00:04:06.113560 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:04:06.115889 systemd[1]: Starting systemd-sysctl.service... Sep 13 00:04:06.120904 systemd[1]: Finished flatcar-tmpfiles.service. Sep 13 00:04:06.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.130962 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 13 00:04:06.133237 systemd[1]: Mounted sys-kernel-config.mount. Sep 13 00:04:06.137633 systemd[1]: Starting systemd-sysusers.service... Sep 13 00:04:06.161621 systemd-journald[1482]: Time spent on flushing to /var/log/journal/ec2709168ec806cfe8f3c7ee1e495521 is 39.987ms for 1129 entries. Sep 13 00:04:06.161621 systemd-journald[1482]: System Journal (/var/log/journal/ec2709168ec806cfe8f3c7ee1e495521) is 8.0M, max 195.6M, 187.6M free. Sep 13 00:04:06.224436 systemd-journald[1482]: Received client request to flush runtime journal. Sep 13 00:04:06.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.176171 systemd[1]: Finished systemd-random-seed.service. Sep 13 00:04:06.178526 systemd[1]: Reached target first-boot-complete.target. Sep 13 00:04:06.202059 systemd[1]: Finished systemd-sysctl.service. Sep 13 00:04:06.226174 systemd[1]: Finished systemd-journal-flush.service. Sep 13 00:04:06.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.283232 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 00:04:06.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:06.288109 systemd[1]: Starting systemd-udev-settle.service... Sep 13 00:04:06.306984 udevadm[1521]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 13 00:04:06.368082 systemd[1]: Finished systemd-sysusers.service. Sep 13 00:04:06.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.062021 systemd[1]: Finished systemd-hwdb-update.service. Sep 13 00:04:07.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.065000 audit: BPF prog-id=18 op=LOAD Sep 13 00:04:07.065000 audit: BPF prog-id=19 op=LOAD Sep 13 00:04:07.065000 audit: BPF prog-id=7 op=UNLOAD Sep 13 00:04:07.065000 audit: BPF prog-id=8 op=UNLOAD Sep 13 00:04:07.068818 systemd[1]: Starting systemd-udevd.service... Sep 13 00:04:07.108076 systemd-udevd[1522]: Using default interface naming scheme 'v252'. Sep 13 00:04:07.165443 systemd[1]: Started systemd-udevd.service. Sep 13 00:04:07.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.167000 audit: BPF prog-id=20 op=LOAD Sep 13 00:04:07.173063 systemd[1]: Starting systemd-networkd.service... Sep 13 00:04:07.182000 audit: BPF prog-id=21 op=LOAD Sep 13 00:04:07.183000 audit: BPF prog-id=22 op=LOAD Sep 13 00:04:07.183000 audit: BPF prog-id=23 op=LOAD Sep 13 00:04:07.186287 systemd[1]: Starting systemd-userdbd.service... Sep 13 00:04:07.273613 (udev-worker)[1534]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:04:07.294846 systemd[1]: Started systemd-userdbd.service. Sep 13 00:04:07.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.300084 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 13 00:04:07.503445 systemd-networkd[1528]: lo: Link UP Sep 13 00:04:07.503989 systemd-networkd[1528]: lo: Gained carrier Sep 13 00:04:07.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.505006 systemd-networkd[1528]: Enumeration completed Sep 13 00:04:07.505204 systemd[1]: Started systemd-networkd.service. Sep 13 00:04:07.509521 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 13 00:04:07.512886 systemd-networkd[1528]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 00:04:07.519701 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:04:07.520322 systemd-networkd[1528]: eth0: Link UP Sep 13 00:04:07.521005 systemd-networkd[1528]: eth0: Gained carrier Sep 13 00:04:07.531967 systemd-networkd[1528]: eth0: DHCPv4 address 172.31.27.41/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 13 00:04:07.678573 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 00:04:07.681703 systemd[1]: Finished systemd-udev-settle.service. Sep 13 00:04:07.686229 systemd[1]: Starting lvm2-activation-early.service... Sep 13 00:04:07.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.749012 lvm[1641]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 00:04:07.788427 systemd[1]: Finished lvm2-activation-early.service. Sep 13 00:04:07.790672 systemd[1]: Reached target cryptsetup.target. Sep 13 00:04:07.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.795055 systemd[1]: Starting lvm2-activation.service... Sep 13 00:04:07.803842 lvm[1642]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 00:04:07.839530 systemd[1]: Finished lvm2-activation.service. Sep 13 00:04:07.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.841985 systemd[1]: Reached target local-fs-pre.target. Sep 13 00:04:07.844063 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 13 00:04:07.844127 systemd[1]: Reached target local-fs.target. Sep 13 00:04:07.846327 systemd[1]: Reached target machines.target. Sep 13 00:04:07.850906 systemd[1]: Starting ldconfig.service... Sep 13 00:04:07.854129 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:04:07.854272 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:04:07.857057 systemd[1]: Starting systemd-boot-update.service... Sep 13 00:04:07.862295 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 13 00:04:07.872034 systemd[1]: Starting systemd-machine-id-commit.service... Sep 13 00:04:07.879094 systemd[1]: Starting systemd-sysext.service... Sep 13 00:04:07.881590 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1644 (bootctl) Sep 13 00:04:07.884422 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 13 00:04:07.931112 systemd[1]: Unmounting usr-share-oem.mount... Sep 13 00:04:07.935893 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 13 00:04:07.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:07.949970 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 13 00:04:07.950467 systemd[1]: Unmounted usr-share-oem.mount. Sep 13 00:04:07.977714 kernel: loop0: detected capacity change from 0 to 207008 Sep 13 00:04:08.069285 systemd-fsck[1655]: fsck.fat 4.2 (2021-01-31) Sep 13 00:04:08.069285 systemd-fsck[1655]: /dev/nvme0n1p1: 236 files, 117310/258078 clusters Sep 13 00:04:08.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.072828 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 13 00:04:08.078508 systemd[1]: Mounting boot.mount... Sep 13 00:04:08.119426 systemd[1]: Mounted boot.mount. Sep 13 00:04:08.164962 systemd[1]: Finished systemd-boot-update.service. Sep 13 00:04:08.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.180703 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 13 00:04:08.216700 kernel: loop1: detected capacity change from 0 to 207008 Sep 13 00:04:08.238397 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 13 00:04:08.239521 systemd[1]: Finished systemd-machine-id-commit.service. Sep 13 00:04:08.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.250147 (sd-sysext)[1670]: Using extensions 'kubernetes'. Sep 13 00:04:08.251599 (sd-sysext)[1670]: Merged extensions into '/usr'. Sep 13 00:04:08.294109 systemd[1]: Mounting usr-share-oem.mount... Sep 13 00:04:08.296192 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:04:08.299175 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:04:08.305896 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:04:08.312901 systemd[1]: Starting modprobe@loop.service... Sep 13 00:04:08.314923 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:04:08.315290 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:04:08.321425 systemd[1]: Mounted usr-share-oem.mount. Sep 13 00:04:08.324608 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:04:08.324956 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:04:08.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.327821 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:04:08.328103 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:04:08.331008 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:04:08.331266 systemd[1]: Finished modprobe@loop.service. Sep 13 00:04:08.334045 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:04:08.334278 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:04:08.339160 systemd[1]: Finished systemd-sysext.service. Sep 13 00:04:08.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.344084 systemd[1]: Starting ensure-sysext.service... Sep 13 00:04:08.349232 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 13 00:04:08.362933 systemd[1]: Reloading. Sep 13 00:04:08.421523 systemd-tmpfiles[1677]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 13 00:04:08.447753 systemd-tmpfiles[1677]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 13 00:04:08.487307 systemd-tmpfiles[1677]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 13 00:04:08.498043 /usr/lib/systemd/system-generators/torcx-generator[1696]: time="2025-09-13T00:04:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:04:08.498108 /usr/lib/systemd/system-generators/torcx-generator[1696]: time="2025-09-13T00:04:08Z" level=info msg="torcx already run" Sep 13 00:04:08.701925 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:04:08.702266 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:04:08.734784 systemd-networkd[1528]: eth0: Gained IPv6LL Sep 13 00:04:08.748156 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:04:08.900000 audit: BPF prog-id=24 op=LOAD Sep 13 00:04:08.900000 audit: BPF prog-id=21 op=UNLOAD Sep 13 00:04:08.900000 audit: BPF prog-id=25 op=LOAD Sep 13 00:04:08.901000 audit: BPF prog-id=26 op=LOAD Sep 13 00:04:08.901000 audit: BPF prog-id=22 op=UNLOAD Sep 13 00:04:08.901000 audit: BPF prog-id=23 op=UNLOAD Sep 13 00:04:08.905000 audit: BPF prog-id=27 op=LOAD Sep 13 00:04:08.905000 audit: BPF prog-id=28 op=LOAD Sep 13 00:04:08.905000 audit: BPF prog-id=18 op=UNLOAD Sep 13 00:04:08.905000 audit: BPF prog-id=19 op=UNLOAD Sep 13 00:04:08.909000 audit: BPF prog-id=29 op=LOAD Sep 13 00:04:08.909000 audit: BPF prog-id=15 op=UNLOAD Sep 13 00:04:08.909000 audit: BPF prog-id=30 op=LOAD Sep 13 00:04:08.910000 audit: BPF prog-id=31 op=LOAD Sep 13 00:04:08.910000 audit: BPF prog-id=16 op=UNLOAD Sep 13 00:04:08.910000 audit: BPF prog-id=17 op=UNLOAD Sep 13 00:04:08.913000 audit: BPF prog-id=32 op=LOAD Sep 13 00:04:08.913000 audit: BPF prog-id=20 op=UNLOAD Sep 13 00:04:08.923236 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 13 00:04:08.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.928669 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 13 00:04:08.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.942602 systemd[1]: Starting audit-rules.service... Sep 13 00:04:08.947417 systemd[1]: Starting clean-ca-certificates.service... Sep 13 00:04:08.952586 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 13 00:04:08.955000 audit: BPF prog-id=33 op=LOAD Sep 13 00:04:08.965000 audit: BPF prog-id=34 op=LOAD Sep 13 00:04:08.962807 systemd[1]: Starting systemd-resolved.service... Sep 13 00:04:08.970745 systemd[1]: Starting systemd-timesyncd.service... Sep 13 00:04:08.979546 systemd[1]: Starting systemd-update-utmp.service... Sep 13 00:04:08.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:08.988221 systemd[1]: Finished clean-ca-certificates.service. Sep 13 00:04:08.994927 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:04:09.002082 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.005243 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:04:09.010018 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:04:09.014417 systemd[1]: Starting modprobe@loop.service... Sep 13 00:04:09.016208 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.016562 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:04:09.016873 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:04:09.024595 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.025158 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.025423 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:04:09.025682 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:04:09.031820 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.036617 systemd[1]: Starting modprobe@drm.service... Sep 13 00:04:09.039212 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.039627 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:04:09.040028 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:04:09.044227 systemd[1]: Finished ensure-sysext.service. Sep 13 00:04:09.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.048954 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:04:09.049289 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:04:09.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.051640 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:04:09.056938 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:04:09.057258 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:04:09.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.061858 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:04:09.062145 systemd[1]: Finished modprobe@loop.service. Sep 13 00:04:09.064302 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.068000 audit[1759]: SYSTEM_BOOT pid=1759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.069522 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 00:04:09.069874 systemd[1]: Finished modprobe@drm.service. Sep 13 00:04:09.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.081229 systemd[1]: Finished systemd-update-utmp.service. Sep 13 00:04:09.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.125842 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 13 00:04:09.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:09.202725 systemd-resolved[1756]: Positive Trust Anchors: Sep 13 00:04:09.202757 systemd-resolved[1756]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 00:04:09.202810 systemd-resolved[1756]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 00:04:09.226000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 13 00:04:09.226000 audit[1777]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffce9ae690 a2=420 a3=0 items=0 ppid=1753 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:09.226000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 13 00:04:09.228467 augenrules[1777]: No rules Sep 13 00:04:09.229857 systemd[1]: Finished audit-rules.service. Sep 13 00:04:09.239732 systemd[1]: Started systemd-timesyncd.service. Sep 13 00:04:09.242122 systemd[1]: Reached target time-set.target. Sep 13 00:04:09.271345 systemd-resolved[1756]: Defaulting to hostname 'linux'. Sep 13 00:04:09.274511 systemd[1]: Started systemd-resolved.service. Sep 13 00:04:09.276781 systemd[1]: Reached target network.target. Sep 13 00:04:09.278678 systemd[1]: Reached target network-online.target. Sep 13 00:04:09.280788 systemd[1]: Reached target nss-lookup.target. Sep 13 00:04:09.340394 ldconfig[1643]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 13 00:04:09.348382 systemd[1]: Finished ldconfig.service. Sep 13 00:04:09.352918 systemd[1]: Starting systemd-update-done.service... Sep 13 00:04:09.368960 systemd[1]: Finished systemd-update-done.service. Sep 13 00:04:09.371514 systemd[1]: Reached target sysinit.target. Sep 13 00:04:09.373798 systemd[1]: Started motdgen.path. Sep 13 00:04:09.375738 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 13 00:04:09.378693 systemd[1]: Started logrotate.timer. Sep 13 00:04:09.381272 systemd[1]: Started mdadm.timer. Sep 13 00:04:09.383058 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 13 00:04:09.385209 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 13 00:04:09.385437 systemd[1]: Reached target paths.target. Sep 13 00:04:09.387353 systemd[1]: Reached target timers.target. Sep 13 00:04:09.390685 systemd[1]: Listening on dbus.socket. Sep 13 00:04:09.394947 systemd[1]: Starting docker.socket... Sep 13 00:04:09.402278 systemd[1]: Listening on sshd.socket. Sep 13 00:04:09.404580 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:04:09.405985 systemd[1]: Listening on docker.socket. Sep 13 00:04:09.408171 systemd[1]: Reached target sockets.target. Sep 13 00:04:09.410104 systemd[1]: Reached target basic.target. Sep 13 00:04:09.412234 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.412452 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 00:04:09.415717 systemd[1]: Started amazon-ssm-agent.service. Sep 13 00:04:09.421076 systemd[1]: Starting containerd.service... Sep 13 00:04:09.428792 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Sep 13 00:04:09.433621 systemd[1]: Starting dbus.service... Sep 13 00:04:09.437833 systemd[1]: Starting enable-oem-cloudinit.service... Sep 13 00:04:09.442465 systemd[1]: Starting extend-filesystems.service... Sep 13 00:04:09.444543 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 13 00:04:09.468884 jq[1790]: false Sep 13 00:04:09.448732 systemd[1]: Starting kubelet.service... Sep 13 00:04:09.455220 systemd[1]: Starting motdgen.service... Sep 13 00:04:09.459607 systemd[1]: Started nvidia.service. Sep 13 00:04:09.467046 systemd[1]: Starting prepare-helm.service... Sep 13 00:04:09.481260 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 13 00:04:09.485819 systemd[1]: Starting sshd-keygen.service... Sep 13 00:04:09.496847 systemd-timesyncd[1757]: Contacted time server 67.217.246.204:123 (0.flatcar.pool.ntp.org). Sep 13 00:04:09.496969 systemd-timesyncd[1757]: Initial clock synchronization to Sat 2025-09-13 00:04:09.346231 UTC. Sep 13 00:04:09.499743 systemd[1]: Starting systemd-logind.service... Sep 13 00:04:09.501588 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:04:09.501811 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 13 00:04:09.552335 jq[1800]: true Sep 13 00:04:09.504791 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 13 00:04:09.506478 systemd[1]: Starting update-engine.service... Sep 13 00:04:09.518189 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 13 00:04:09.533968 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 13 00:04:09.534409 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 13 00:04:09.552498 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 13 00:04:09.552913 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 13 00:04:09.662317 tar[1809]: linux-arm64/LICENSE Sep 13 00:04:09.662317 tar[1809]: linux-arm64/helm Sep 13 00:04:09.695676 jq[1807]: true Sep 13 00:04:09.700697 extend-filesystems[1791]: Found loop1 Sep 13 00:04:09.700697 extend-filesystems[1791]: Found nvme0n1 Sep 13 00:04:09.706063 extend-filesystems[1791]: Found nvme0n1p1 Sep 13 00:04:09.706063 extend-filesystems[1791]: Found nvme0n1p2 Sep 13 00:04:09.706063 extend-filesystems[1791]: Found nvme0n1p3 Sep 13 00:04:09.706063 extend-filesystems[1791]: Found usr Sep 13 00:04:09.726097 extend-filesystems[1791]: Found nvme0n1p4 Sep 13 00:04:09.726097 extend-filesystems[1791]: Found nvme0n1p6 Sep 13 00:04:09.726097 extend-filesystems[1791]: Found nvme0n1p7 Sep 13 00:04:09.726097 extend-filesystems[1791]: Found nvme0n1p9 Sep 13 00:04:09.726097 extend-filesystems[1791]: Checking size of /dev/nvme0n1p9 Sep 13 00:04:09.767992 systemd[1]: motdgen.service: Deactivated successfully. Sep 13 00:04:09.768393 systemd[1]: Finished motdgen.service. Sep 13 00:04:09.825163 dbus-daemon[1789]: [system] SELinux support is enabled Sep 13 00:04:09.829644 systemd[1]: Started dbus.service. Sep 13 00:04:09.835022 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 13 00:04:09.835087 systemd[1]: Reached target system-config.target. Sep 13 00:04:09.839644 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 13 00:04:09.839709 systemd[1]: Reached target user-config.target. Sep 13 00:04:09.881832 extend-filesystems[1791]: Resized partition /dev/nvme0n1p9 Sep 13 00:04:09.885797 dbus-daemon[1789]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1528 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Sep 13 00:04:09.887469 update_engine[1799]: I0913 00:04:09.886937 1799 main.cc:92] Flatcar Update Engine starting Sep 13 00:04:09.892498 dbus-daemon[1789]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 13 00:04:09.923426 extend-filesystems[1848]: resize2fs 1.46.5 (30-Dec-2021) Sep 13 00:04:09.944906 update_engine[1799]: I0913 00:04:09.929996 1799 update_check_scheduler.cc:74] Next update check in 10m23s Sep 13 00:04:09.950286 systemd[1]: Starting systemd-hostnamed.service... Sep 13 00:04:09.952503 systemd[1]: Started update-engine.service. Sep 13 00:04:09.962854 systemd[1]: Started locksmithd.service. Sep 13 00:04:09.970703 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Sep 13 00:04:10.066700 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Sep 13 00:04:10.083590 amazon-ssm-agent[1786]: 2025/09/13 00:04:10 Failed to load instance info from vault. RegistrationKey does not exist. Sep 13 00:04:10.084953 extend-filesystems[1848]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Sep 13 00:04:10.084953 extend-filesystems[1848]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 13 00:04:10.084953 extend-filesystems[1848]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Sep 13 00:04:10.099580 extend-filesystems[1791]: Resized filesystem in /dev/nvme0n1p9 Sep 13 00:04:10.090860 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 13 00:04:10.091242 systemd[1]: Finished extend-filesystems.service. Sep 13 00:04:10.106250 bash[1853]: Updated "/home/core/.ssh/authorized_keys" Sep 13 00:04:10.106885 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 13 00:04:10.117548 amazon-ssm-agent[1786]: Initializing new seelog logger Sep 13 00:04:10.117801 amazon-ssm-agent[1786]: New Seelog Logger Creation Complete Sep 13 00:04:10.117930 amazon-ssm-agent[1786]: 2025/09/13 00:04:10 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Sep 13 00:04:10.117930 amazon-ssm-agent[1786]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Sep 13 00:04:10.118447 amazon-ssm-agent[1786]: 2025/09/13 00:04:10 processing appconfig overrides Sep 13 00:04:10.141535 systemd[1]: nvidia.service: Deactivated successfully. Sep 13 00:04:10.209084 env[1805]: time="2025-09-13T00:04:10.206624636Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 13 00:04:10.274556 systemd-logind[1798]: Watching system buttons on /dev/input/event0 (Power Button) Sep 13 00:04:10.277785 systemd-logind[1798]: Watching system buttons on /dev/input/event1 (Sleep Button) Sep 13 00:04:10.280757 systemd-logind[1798]: New seat seat0. Sep 13 00:04:10.289064 systemd[1]: Started systemd-logind.service. Sep 13 00:04:10.354125 dbus-daemon[1789]: [system] Successfully activated service 'org.freedesktop.hostname1' Sep 13 00:04:10.354396 systemd[1]: Started systemd-hostnamed.service. Sep 13 00:04:10.359467 dbus-daemon[1789]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1852 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Sep 13 00:04:10.365096 systemd[1]: Starting polkit.service... Sep 13 00:04:10.407904 env[1805]: time="2025-09-13T00:04:10.407835449Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 13 00:04:10.411025 env[1805]: time="2025-09-13T00:04:10.410972572Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:04:10.420088 env[1805]: time="2025-09-13T00:04:10.420021150Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:04:10.421793 env[1805]: time="2025-09-13T00:04:10.421735290Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:04:10.422461 env[1805]: time="2025-09-13T00:04:10.422386944Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:04:10.427826 env[1805]: time="2025-09-13T00:04:10.427762204Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 13 00:04:10.428094 env[1805]: time="2025-09-13T00:04:10.428055775Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 13 00:04:10.428256 env[1805]: time="2025-09-13T00:04:10.428223490Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 13 00:04:10.431526 env[1805]: time="2025-09-13T00:04:10.431455032Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:04:10.431848 polkitd[1879]: Started polkitd version 121 Sep 13 00:04:10.436579 env[1805]: time="2025-09-13T00:04:10.436509864Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:04:10.441497 env[1805]: time="2025-09-13T00:04:10.441414265Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:04:10.444848 env[1805]: time="2025-09-13T00:04:10.444739120Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 13 00:04:10.446013 env[1805]: time="2025-09-13T00:04:10.445932561Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 13 00:04:10.446254 env[1805]: time="2025-09-13T00:04:10.446218385Z" level=info msg="metadata content store policy set" policy=shared Sep 13 00:04:10.461874 env[1805]: time="2025-09-13T00:04:10.461610537Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 13 00:04:10.462131 env[1805]: time="2025-09-13T00:04:10.462088401Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 13 00:04:10.462296 env[1805]: time="2025-09-13T00:04:10.462258753Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 13 00:04:10.462518 env[1805]: time="2025-09-13T00:04:10.462465170Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.462765 env[1805]: time="2025-09-13T00:04:10.462729623Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.462935 env[1805]: time="2025-09-13T00:04:10.462902306Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.463071 env[1805]: time="2025-09-13T00:04:10.463040267Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.463846 env[1805]: time="2025-09-13T00:04:10.463787470Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.464320 env[1805]: time="2025-09-13T00:04:10.464279381Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.464712 env[1805]: time="2025-09-13T00:04:10.464669961Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.465762 env[1805]: time="2025-09-13T00:04:10.465711595Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.467014 env[1805]: time="2025-09-13T00:04:10.466962848Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 13 00:04:10.469217 env[1805]: time="2025-09-13T00:04:10.467419401Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 13 00:04:10.472849 env[1805]: time="2025-09-13T00:04:10.472785794Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 13 00:04:10.475000 env[1805]: time="2025-09-13T00:04:10.474944513Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 13 00:04:10.479045 env[1805]: time="2025-09-13T00:04:10.478984826Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.479254 env[1805]: time="2025-09-13T00:04:10.479220220Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 13 00:04:10.480257 env[1805]: time="2025-09-13T00:04:10.480202193Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.481282 env[1805]: time="2025-09-13T00:04:10.481236009Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.481538 env[1805]: time="2025-09-13T00:04:10.481505513Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.481691 env[1805]: time="2025-09-13T00:04:10.481641260Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.482707 env[1805]: time="2025-09-13T00:04:10.482619925Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.483800 env[1805]: time="2025-09-13T00:04:10.483745322Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.484097 env[1805]: time="2025-09-13T00:04:10.484055235Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.484238 env[1805]: time="2025-09-13T00:04:10.484207938Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.486366 env[1805]: time="2025-09-13T00:04:10.486311234Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 13 00:04:10.487069 env[1805]: time="2025-09-13T00:04:10.487018333Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.491623 env[1805]: time="2025-09-13T00:04:10.491564299Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.491987 env[1805]: time="2025-09-13T00:04:10.491950487Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.492246 env[1805]: time="2025-09-13T00:04:10.492213198Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 13 00:04:10.492478 env[1805]: time="2025-09-13T00:04:10.492440573Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 13 00:04:10.492711 env[1805]: time="2025-09-13T00:04:10.492678239Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 13 00:04:10.492931 env[1805]: time="2025-09-13T00:04:10.492892039Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 13 00:04:10.494259 env[1805]: time="2025-09-13T00:04:10.494204790Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 13 00:04:10.496039 env[1805]: time="2025-09-13T00:04:10.495902246Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 13 00:04:10.498915 env[1805]: time="2025-09-13T00:04:10.498844868Z" level=info msg="Connect containerd service" Sep 13 00:04:10.499524 env[1805]: time="2025-09-13T00:04:10.499416280Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 13 00:04:10.518560 env[1805]: time="2025-09-13T00:04:10.518477770Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 00:04:10.520788 polkitd[1879]: Loading rules from directory /etc/polkit-1/rules.d Sep 13 00:04:10.521731 env[1805]: time="2025-09-13T00:04:10.521562756Z" level=info msg="Start subscribing containerd event" Sep 13 00:04:10.521884 env[1805]: time="2025-09-13T00:04:10.521752595Z" level=info msg="Start recovering state" Sep 13 00:04:10.521949 env[1805]: time="2025-09-13T00:04:10.521873848Z" level=info msg="Start event monitor" Sep 13 00:04:10.522010 env[1805]: time="2025-09-13T00:04:10.521972364Z" level=info msg="Start snapshots syncer" Sep 13 00:04:10.522010 env[1805]: time="2025-09-13T00:04:10.521998880Z" level=info msg="Start cni network conf syncer for default" Sep 13 00:04:10.522140 env[1805]: time="2025-09-13T00:04:10.522018826Z" level=info msg="Start streaming server" Sep 13 00:04:10.530336 env[1805]: time="2025-09-13T00:04:10.530252486Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 13 00:04:10.530719 polkitd[1879]: Loading rules from directory /usr/share/polkit-1/rules.d Sep 13 00:04:10.531246 env[1805]: time="2025-09-13T00:04:10.531204987Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 13 00:04:10.532027 env[1805]: time="2025-09-13T00:04:10.531974621Z" level=info msg="containerd successfully booted in 0.367499s" Sep 13 00:04:10.532052 systemd[1]: Started containerd.service. Sep 13 00:04:10.538307 polkitd[1879]: Finished loading, compiling and executing 2 rules Sep 13 00:04:10.544413 dbus-daemon[1789]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Sep 13 00:04:10.544774 systemd[1]: Started polkit.service. Sep 13 00:04:10.549626 polkitd[1879]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Sep 13 00:04:10.641153 systemd-hostnamed[1852]: Hostname set to (transient) Sep 13 00:04:10.641154 systemd-resolved[1756]: System hostname changed to 'ip-172-31-27-41'. Sep 13 00:04:10.748741 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Create new startup processor Sep 13 00:04:10.749072 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [LongRunningPluginsManager] registered plugins: {} Sep 13 00:04:10.749174 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing bookkeeping folders Sep 13 00:04:10.749174 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO removing the completed state files Sep 13 00:04:10.749174 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing bookkeeping folders for long running plugins Sep 13 00:04:10.749326 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Sep 13 00:04:10.749326 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing healthcheck folders for long running plugins Sep 13 00:04:10.749326 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing locations for inventory plugin Sep 13 00:04:10.749326 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing default location for custom inventory Sep 13 00:04:10.749326 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing default location for file inventory Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Initializing default location for role inventory Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Init the cloudwatchlogs publisher Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:runPowerShellScript Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:updateSsmAgent Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:configureDocker Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:runDockerAction Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:configurePackage Sep 13 00:04:10.749569 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:softwareInventory Sep 13 00:04:10.750094 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:downloadContent Sep 13 00:04:10.750094 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:runDocument Sep 13 00:04:10.750094 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform independent plugin aws:refreshAssociation Sep 13 00:04:10.750094 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Successfully loaded platform dependent plugin aws:runShellScript Sep 13 00:04:10.750094 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Sep 13 00:04:10.750094 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO OS: linux, Arch: arm64 Sep 13 00:04:10.764440 amazon-ssm-agent[1786]: datastore file /var/lib/amazon/ssm/i-0b862d0ecd4fdd3b7/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Sep 13 00:04:10.767866 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] Starting document processing engine... Sep 13 00:04:10.876166 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] [EngineProcessor] Starting Sep 13 00:04:10.936106 coreos-metadata[1788]: Sep 13 00:04:10.935 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Sep 13 00:04:10.939103 coreos-metadata[1788]: Sep 13 00:04:10.939 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Sep 13 00:04:10.943271 coreos-metadata[1788]: Sep 13 00:04:10.943 INFO Fetch successful Sep 13 00:04:10.943271 coreos-metadata[1788]: Sep 13 00:04:10.943 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Sep 13 00:04:10.950543 coreos-metadata[1788]: Sep 13 00:04:10.950 INFO Fetch successful Sep 13 00:04:10.956993 unknown[1788]: wrote ssh authorized keys file for user: core Sep 13 00:04:10.970501 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Sep 13 00:04:10.991610 update-ssh-keys[1979]: Updated "/home/core/.ssh/authorized_keys" Sep 13 00:04:10.992693 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Sep 13 00:04:11.065022 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] Starting message polling Sep 13 00:04:11.159751 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] Starting send replies to MDS Sep 13 00:04:11.254727 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [instanceID=i-0b862d0ecd4fdd3b7] Starting association polling Sep 13 00:04:11.349775 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Sep 13 00:04:11.445082 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] [Association] Launching response handler Sep 13 00:04:11.540641 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Sep 13 00:04:11.574452 tar[1809]: linux-arm64/README.md Sep 13 00:04:11.584833 systemd[1]: Finished prepare-helm.service. Sep 13 00:04:11.636267 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] Starting session document processing engine... Sep 13 00:04:11.732173 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [LongRunningPluginsManager] starting long running plugin manager Sep 13 00:04:11.738836 locksmithd[1854]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 13 00:04:11.828378 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] [EngineProcessor] Starting Sep 13 00:04:11.924614 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Sep 13 00:04:12.021141 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0b862d0ecd4fdd3b7, requestId: fb5422d2-8a33-433b-9af9-ae5df92efd55 Sep 13 00:04:12.117923 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Sep 13 00:04:12.214757 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [HealthCheck] HealthCheck reporting agent health. Sep 13 00:04:12.311842 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [OfflineService] Starting document processing engine... Sep 13 00:04:12.409200 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [OfflineService] [EngineProcessor] Starting Sep 13 00:04:12.502712 sshd_keygen[1823]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 13 00:04:12.506604 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [OfflineService] [EngineProcessor] Initial processing Sep 13 00:04:12.550468 systemd[1]: Finished sshd-keygen.service. Sep 13 00:04:12.555333 systemd[1]: Starting issuegen.service... Sep 13 00:04:12.567586 systemd[1]: issuegen.service: Deactivated successfully. Sep 13 00:04:12.568032 systemd[1]: Finished issuegen.service. Sep 13 00:04:12.573143 systemd[1]: Starting systemd-user-sessions.service... Sep 13 00:04:12.594970 systemd[1]: Finished systemd-user-sessions.service. Sep 13 00:04:12.601733 systemd[1]: Started getty@tty1.service. Sep 13 00:04:12.604357 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [OfflineService] Starting message polling Sep 13 00:04:12.607283 systemd[1]: Started serial-getty@ttyS0.service. Sep 13 00:04:12.610051 systemd[1]: Reached target getty.target. Sep 13 00:04:12.702284 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [OfflineService] Starting send replies to MDS Sep 13 00:04:12.800275 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Sep 13 00:04:12.898566 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Sep 13 00:04:12.932615 systemd[1]: Started kubelet.service. Sep 13 00:04:12.935382 systemd[1]: Reached target multi-user.target. Sep 13 00:04:12.940190 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 13 00:04:12.957332 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 13 00:04:12.957797 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 13 00:04:12.960225 systemd[1]: Startup finished in 1.204s (kernel) + 9.004s (initrd) + 12.352s (userspace) = 22.560s. Sep 13 00:04:12.997031 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] listening reply. Sep 13 00:04:13.095822 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Sep 13 00:04:13.194768 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [StartupProcessor] Executing startup processor tasks Sep 13 00:04:13.293920 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Sep 13 00:04:13.393112 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Sep 13 00:04:13.492592 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Sep 13 00:04:13.592384 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0b862d0ecd4fdd3b7?role=subscribe&stream=input Sep 13 00:04:13.692192 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0b862d0ecd4fdd3b7?role=subscribe&stream=input Sep 13 00:04:13.792276 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] Starting receiving message from control channel Sep 13 00:04:13.892515 amazon-ssm-agent[1786]: 2025-09-13 00:04:10 INFO [MessageGatewayService] [EngineProcessor] Initial processing Sep 13 00:04:14.385936 kubelet[2011]: E0913 00:04:14.385777 2011 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:04:14.391213 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:04:14.391551 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:04:14.392250 systemd[1]: kubelet.service: Consumed 1.633s CPU time. Sep 13 00:04:19.229784 systemd[1]: Created slice system-sshd.slice. Sep 13 00:04:19.232185 systemd[1]: Started sshd@0-172.31.27.41:22-139.178.89.65:59996.service. Sep 13 00:04:19.588963 sshd[2019]: Accepted publickey for core from 139.178.89.65 port 59996 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:04:19.595046 sshd[2019]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:19.615178 systemd[1]: Created slice user-500.slice. Sep 13 00:04:19.617698 systemd[1]: Starting user-runtime-dir@500.service... Sep 13 00:04:19.628855 systemd-logind[1798]: New session 1 of user core. Sep 13 00:04:19.640895 systemd[1]: Finished user-runtime-dir@500.service. Sep 13 00:04:19.645290 systemd[1]: Starting user@500.service... Sep 13 00:04:19.652741 (systemd)[2022]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:19.850889 systemd[2022]: Queued start job for default target default.target. Sep 13 00:04:19.852002 systemd[2022]: Reached target paths.target. Sep 13 00:04:19.852056 systemd[2022]: Reached target sockets.target. Sep 13 00:04:19.852088 systemd[2022]: Reached target timers.target. Sep 13 00:04:19.852118 systemd[2022]: Reached target basic.target. Sep 13 00:04:19.852213 systemd[2022]: Reached target default.target. Sep 13 00:04:19.852280 systemd[2022]: Startup finished in 187ms. Sep 13 00:04:19.852826 systemd[1]: Started user@500.service. Sep 13 00:04:19.855635 systemd[1]: Started session-1.scope. Sep 13 00:04:20.003335 systemd[1]: Started sshd@1-172.31.27.41:22-139.178.89.65:33800.service. Sep 13 00:04:20.182086 sshd[2031]: Accepted publickey for core from 139.178.89.65 port 33800 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:04:20.185236 sshd[2031]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:20.193789 systemd-logind[1798]: New session 2 of user core. Sep 13 00:04:20.194342 systemd[1]: Started session-2.scope. Sep 13 00:04:20.326777 sshd[2031]: pam_unix(sshd:session): session closed for user core Sep 13 00:04:20.332383 systemd-logind[1798]: Session 2 logged out. Waiting for processes to exit. Sep 13 00:04:20.332966 systemd[1]: sshd@1-172.31.27.41:22-139.178.89.65:33800.service: Deactivated successfully. Sep 13 00:04:20.335080 systemd[1]: session-2.scope: Deactivated successfully. Sep 13 00:04:20.337393 systemd-logind[1798]: Removed session 2. Sep 13 00:04:20.354152 systemd[1]: Started sshd@2-172.31.27.41:22-139.178.89.65:33802.service. Sep 13 00:04:20.522428 sshd[2037]: Accepted publickey for core from 139.178.89.65 port 33802 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:04:20.525567 sshd[2037]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:20.534075 systemd[1]: Started session-3.scope. Sep 13 00:04:20.535072 systemd-logind[1798]: New session 3 of user core. Sep 13 00:04:20.656462 sshd[2037]: pam_unix(sshd:session): session closed for user core Sep 13 00:04:20.661930 systemd[1]: sshd@2-172.31.27.41:22-139.178.89.65:33802.service: Deactivated successfully. Sep 13 00:04:20.663140 systemd[1]: session-3.scope: Deactivated successfully. Sep 13 00:04:20.664385 systemd-logind[1798]: Session 3 logged out. Waiting for processes to exit. Sep 13 00:04:20.666432 systemd-logind[1798]: Removed session 3. Sep 13 00:04:20.685728 systemd[1]: Started sshd@3-172.31.27.41:22-139.178.89.65:33808.service. Sep 13 00:04:20.858771 sshd[2043]: Accepted publickey for core from 139.178.89.65 port 33808 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:04:20.861851 sshd[2043]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:20.870543 systemd[1]: Started session-4.scope. Sep 13 00:04:20.871754 systemd-logind[1798]: New session 4 of user core. Sep 13 00:04:21.004338 sshd[2043]: pam_unix(sshd:session): session closed for user core Sep 13 00:04:21.008943 systemd-logind[1798]: Session 4 logged out. Waiting for processes to exit. Sep 13 00:04:21.009534 systemd[1]: sshd@3-172.31.27.41:22-139.178.89.65:33808.service: Deactivated successfully. Sep 13 00:04:21.010812 systemd[1]: session-4.scope: Deactivated successfully. Sep 13 00:04:21.012352 systemd-logind[1798]: Removed session 4. Sep 13 00:04:21.032952 systemd[1]: Started sshd@4-172.31.27.41:22-139.178.89.65:33824.service. Sep 13 00:04:21.206043 sshd[2049]: Accepted publickey for core from 139.178.89.65 port 33824 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:04:21.209070 sshd[2049]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:21.216632 systemd-logind[1798]: New session 5 of user core. Sep 13 00:04:21.217529 systemd[1]: Started session-5.scope. Sep 13 00:04:21.398447 sudo[2052]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 13 00:04:21.399539 sudo[2052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:04:21.423920 dbus-daemon[1789]: avc: received setenforce notice (enforcing=1) Sep 13 00:04:21.427831 sudo[2052]: pam_unix(sudo:session): session closed for user root Sep 13 00:04:21.453702 sshd[2049]: pam_unix(sshd:session): session closed for user core Sep 13 00:04:21.458865 systemd[1]: sshd@4-172.31.27.41:22-139.178.89.65:33824.service: Deactivated successfully. Sep 13 00:04:21.460278 systemd[1]: session-5.scope: Deactivated successfully. Sep 13 00:04:21.461538 systemd-logind[1798]: Session 5 logged out. Waiting for processes to exit. Sep 13 00:04:21.463630 systemd-logind[1798]: Removed session 5. Sep 13 00:04:21.482411 systemd[1]: Started sshd@5-172.31.27.41:22-139.178.89.65:33838.service. Sep 13 00:04:21.655853 sshd[2056]: Accepted publickey for core from 139.178.89.65 port 33838 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:04:21.658442 sshd[2056]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:21.666501 systemd-logind[1798]: New session 6 of user core. Sep 13 00:04:21.667492 systemd[1]: Started session-6.scope. Sep 13 00:04:21.776518 sudo[2060]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 13 00:04:21.777099 sudo[2060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:04:21.782411 sudo[2060]: pam_unix(sudo:session): session closed for user root Sep 13 00:04:21.792036 sudo[2059]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 13 00:04:21.793108 sudo[2059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:04:21.811119 systemd[1]: Stopping audit-rules.service... Sep 13 00:04:21.811000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 00:04:21.815272 auditctl[2063]: No rules Sep 13 00:04:21.815709 kernel: kauditd_printk_skb: 101 callbacks suppressed Sep 13 00:04:21.815802 kernel: audit: type=1305 audit(1757721861.811:192): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 00:04:21.816415 systemd[1]: audit-rules.service: Deactivated successfully. Sep 13 00:04:21.816806 systemd[1]: Stopped audit-rules.service. Sep 13 00:04:21.822919 systemd[1]: Starting audit-rules.service... Sep 13 00:04:21.837551 kernel: audit: type=1300 audit(1757721861.811:192): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff04214c0 a2=420 a3=0 items=0 ppid=1 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:21.811000 audit[2063]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff04214c0 a2=420 a3=0 items=0 ppid=1 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:21.811000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 13 00:04:21.842091 kernel: audit: type=1327 audit(1757721861.811:192): proctitle=2F7362696E2F617564697463746C002D44 Sep 13 00:04:21.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.851714 kernel: audit: type=1131 audit(1757721861.815:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.870029 augenrules[2080]: No rules Sep 13 00:04:21.871815 systemd[1]: Finished audit-rules.service. Sep 13 00:04:21.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.882943 sudo[2059]: pam_unix(sudo:session): session closed for user root Sep 13 00:04:21.882000 audit[2059]: USER_END pid=2059 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.893388 kernel: audit: type=1130 audit(1757721861.871:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.893506 kernel: audit: type=1106 audit(1757721861.882:195): pid=2059 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.882000 audit[2059]: CRED_DISP pid=2059 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.903707 kernel: audit: type=1104 audit(1757721861.882:196): pid=2059 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.907550 sshd[2056]: pam_unix(sshd:session): session closed for user core Sep 13 00:04:21.908000 audit[2056]: USER_END pid=2056 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:21.913587 systemd-logind[1798]: Session 6 logged out. Waiting for processes to exit. Sep 13 00:04:21.914912 systemd[1]: session-6.scope: Deactivated successfully. Sep 13 00:04:21.916175 systemd[1]: sshd@5-172.31.27.41:22-139.178.89.65:33838.service: Deactivated successfully. Sep 13 00:04:21.919065 systemd-logind[1798]: Removed session 6. Sep 13 00:04:21.909000 audit[2056]: CRED_DISP pid=2056 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:21.935623 kernel: audit: type=1106 audit(1757721861.908:197): pid=2056 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:21.935760 kernel: audit: type=1104 audit(1757721861.909:198): pid=2056 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:21.935807 kernel: audit: type=1131 audit(1757721861.915:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.41:22-139.178.89.65:33838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.915000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.41:22-139.178.89.65:33838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:21.944572 systemd[1]: Started sshd@6-172.31.27.41:22-139.178.89.65:33852.service. Sep 13 00:04:21.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.41:22-139.178.89.65:33852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:22.113000 audit[2086]: USER_ACCT pid=2086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:22.116215 sshd[2086]: Accepted publickey for core from 139.178.89.65 port 33852 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:04:22.115000 audit[2086]: CRED_ACQ pid=2086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:22.115000 audit[2086]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4b8a550 a2=3 a3=1 items=0 ppid=1 pid=2086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.115000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:04:22.117142 sshd[2086]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:04:22.125551 systemd[1]: Started session-7.scope. Sep 13 00:04:22.126347 systemd-logind[1798]: New session 7 of user core. Sep 13 00:04:22.135000 audit[2086]: USER_START pid=2086 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:22.138000 audit[2088]: CRED_ACQ pid=2088 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:04:22.232000 audit[2089]: USER_ACCT pid=2089 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:04:22.233599 sudo[2089]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 13 00:04:22.233000 audit[2089]: CRED_REFR pid=2089 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:04:22.234742 sudo[2089]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:04:22.237000 audit[2089]: USER_START pid=2089 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:04:22.315357 systemd[1]: Starting docker.service... Sep 13 00:04:22.434347 env[2099]: time="2025-09-13T00:04:22.434199006Z" level=info msg="Starting up" Sep 13 00:04:22.437995 env[2099]: time="2025-09-13T00:04:22.437635966Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 00:04:22.437995 env[2099]: time="2025-09-13T00:04:22.437735033Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 00:04:22.437995 env[2099]: time="2025-09-13T00:04:22.437778631Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 00:04:22.437995 env[2099]: time="2025-09-13T00:04:22.437802935Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 00:04:22.442212 env[2099]: time="2025-09-13T00:04:22.442170127Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 00:04:22.442409 env[2099]: time="2025-09-13T00:04:22.442381077Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 00:04:22.442534 env[2099]: time="2025-09-13T00:04:22.442500945Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 00:04:22.442640 env[2099]: time="2025-09-13T00:04:22.442613270Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 00:04:22.456058 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2010145783-merged.mount: Deactivated successfully. Sep 13 00:04:22.491303 env[2099]: time="2025-09-13T00:04:22.491210170Z" level=info msg="Loading containers: start." Sep 13 00:04:22.598000 audit[2129]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.598000 audit[2129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffffd612700 a2=0 a3=1 items=0 ppid=2099 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.598000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 13 00:04:22.602000 audit[2131]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.602000 audit[2131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe40c55b0 a2=0 a3=1 items=0 ppid=2099 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.602000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 13 00:04:22.606000 audit[2133]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.606000 audit[2133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd056df80 a2=0 a3=1 items=0 ppid=2099 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.606000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 00:04:22.611000 audit[2135]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.611000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdc262440 a2=0 a3=1 items=0 ppid=2099 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.611000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 00:04:22.624000 audit[2137]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.624000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffed7fba10 a2=0 a3=1 items=0 ppid=2099 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.624000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 13 00:04:22.655000 audit[2142]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.655000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe614ba50 a2=0 a3=1 items=0 ppid=2099 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.655000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 13 00:04:22.666000 audit[2144]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.666000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd0c35cb0 a2=0 a3=1 items=0 ppid=2099 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 13 00:04:22.671000 audit[2146]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.671000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff2446e30 a2=0 a3=1 items=0 ppid=2099 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 13 00:04:22.675000 audit[2148]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.675000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe7dd5710 a2=0 a3=1 items=0 ppid=2099 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.675000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:04:22.688000 audit[2152]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.688000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc2e49d00 a2=0 a3=1 items=0 ppid=2099 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.688000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:04:22.695000 audit[2153]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.695000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff1be0590 a2=0 a3=1 items=0 ppid=2099 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.695000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:04:22.713692 kernel: Initializing XFRM netlink socket Sep 13 00:04:22.758822 env[2099]: time="2025-09-13T00:04:22.758774990Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 13 00:04:22.761004 (udev-worker)[2109]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:04:22.810000 audit[2161]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.810000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff128a3c0 a2=0 a3=1 items=0 ppid=2099 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.810000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 13 00:04:22.827000 audit[2164]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.827000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc3050390 a2=0 a3=1 items=0 ppid=2099 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.827000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 13 00:04:22.833000 audit[2167]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.833000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc24e6450 a2=0 a3=1 items=0 ppid=2099 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.833000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 13 00:04:22.837000 audit[2169]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.837000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc861a640 a2=0 a3=1 items=0 ppid=2099 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.837000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 13 00:04:22.841000 audit[2171]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.841000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcde6f0f0 a2=0 a3=1 items=0 ppid=2099 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.841000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 13 00:04:22.846000 audit[2173]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.846000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffce19cc10 a2=0 a3=1 items=0 ppid=2099 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.846000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 13 00:04:22.850000 audit[2175]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.850000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff1769f30 a2=0 a3=1 items=0 ppid=2099 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.850000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 13 00:04:22.881000 audit[2178]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.881000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe3ba6dc0 a2=0 a3=1 items=0 ppid=2099 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.881000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 13 00:04:22.886000 audit[2180]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.886000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffff9f28070 a2=0 a3=1 items=0 ppid=2099 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.886000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 00:04:22.890000 audit[2182]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.890000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd4336d10 a2=0 a3=1 items=0 ppid=2099 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.890000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 00:04:22.894000 audit[2184]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.894000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffac83e40 a2=0 a3=1 items=0 ppid=2099 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.894000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 13 00:04:22.896005 systemd-networkd[1528]: docker0: Link UP Sep 13 00:04:22.908000 audit[2188]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.908000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc2d5a240 a2=0 a3=1 items=0 ppid=2099 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.908000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:04:22.916000 audit[2189]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:22.916000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff92f1ea0 a2=0 a3=1 items=0 ppid=2099 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:22.916000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:04:22.918243 env[2099]: time="2025-09-13T00:04:22.918198346Z" level=info msg="Loading containers: done." Sep 13 00:04:22.952960 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck893606727-merged.mount: Deactivated successfully. Sep 13 00:04:22.966018 env[2099]: time="2025-09-13T00:04:22.965949067Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 13 00:04:22.966309 env[2099]: time="2025-09-13T00:04:22.966262802Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 13 00:04:22.966514 env[2099]: time="2025-09-13T00:04:22.966470656Z" level=info msg="Daemon has completed initialization" Sep 13 00:04:22.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:22.991966 systemd[1]: Started docker.service. Sep 13 00:04:23.003111 env[2099]: time="2025-09-13T00:04:23.003036422Z" level=info msg="API listen on /run/docker.sock" Sep 13 00:04:24.379117 env[1805]: time="2025-09-13T00:04:24.379010444Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Sep 13 00:04:24.643124 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 13 00:04:24.643449 systemd[1]: Stopped kubelet.service. Sep 13 00:04:24.643539 systemd[1]: kubelet.service: Consumed 1.633s CPU time. Sep 13 00:04:24.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:24.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:24.646085 systemd[1]: Starting kubelet.service... Sep 13 00:04:25.022685 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount619612924.mount: Deactivated successfully. Sep 13 00:04:25.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:25.054795 systemd[1]: Started kubelet.service. Sep 13 00:04:25.156917 kubelet[2228]: E0913 00:04:25.156857 2228 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:04:25.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:04:25.164287 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:04:25.164600 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:04:25.937811 amazon-ssm-agent[1786]: 2025-09-13 00:04:25 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Sep 13 00:04:26.932866 env[1805]: time="2025-09-13T00:04:26.932782544Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:26.936474 env[1805]: time="2025-09-13T00:04:26.936408809Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:26.941554 env[1805]: time="2025-09-13T00:04:26.941485120Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:26.945669 env[1805]: time="2025-09-13T00:04:26.945589075Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:26.947387 env[1805]: time="2025-09-13T00:04:26.947331271Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002\"" Sep 13 00:04:26.948544 env[1805]: time="2025-09-13T00:04:26.948460790Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Sep 13 00:04:29.263831 env[1805]: time="2025-09-13T00:04:29.263759724Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:29.266821 env[1805]: time="2025-09-13T00:04:29.266741783Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:29.270721 env[1805]: time="2025-09-13T00:04:29.270620563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:29.274350 env[1805]: time="2025-09-13T00:04:29.274285628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:29.276338 env[1805]: time="2025-09-13T00:04:29.276245753Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b\"" Sep 13 00:04:29.277288 env[1805]: time="2025-09-13T00:04:29.277238691Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Sep 13 00:04:31.067441 env[1805]: time="2025-09-13T00:04:31.067378329Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:31.072190 env[1805]: time="2025-09-13T00:04:31.072130685Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:31.075713 env[1805]: time="2025-09-13T00:04:31.075620195Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:31.079280 env[1805]: time="2025-09-13T00:04:31.079202420Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:31.081316 env[1805]: time="2025-09-13T00:04:31.081256927Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27\"" Sep 13 00:04:31.082291 env[1805]: time="2025-09-13T00:04:31.082240897Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Sep 13 00:04:32.420912 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3586539902.mount: Deactivated successfully. Sep 13 00:04:33.336921 env[1805]: time="2025-09-13T00:04:33.336847680Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:33.339596 env[1805]: time="2025-09-13T00:04:33.339526023Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:33.342029 env[1805]: time="2025-09-13T00:04:33.341971673Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:33.343915 env[1805]: time="2025-09-13T00:04:33.343847713Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:33.345217 env[1805]: time="2025-09-13T00:04:33.345164020Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4\"" Sep 13 00:04:33.347084 env[1805]: time="2025-09-13T00:04:33.347026715Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 13 00:04:33.818144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1615276138.mount: Deactivated successfully. Sep 13 00:04:35.239951 env[1805]: time="2025-09-13T00:04:35.239842284Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.244935 env[1805]: time="2025-09-13T00:04:35.244871485Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.249379 env[1805]: time="2025-09-13T00:04:35.249311928Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.253973 env[1805]: time="2025-09-13T00:04:35.253901767Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.256047 env[1805]: time="2025-09-13T00:04:35.255976189Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Sep 13 00:04:35.257051 env[1805]: time="2025-09-13T00:04:35.257001385Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 13 00:04:35.416067 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 13 00:04:35.426144 kernel: kauditd_printk_skb: 88 callbacks suppressed Sep 13 00:04:35.426240 kernel: audit: type=1130 audit(1757721875.415:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:35.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:35.416396 systemd[1]: Stopped kubelet.service. Sep 13 00:04:35.418962 systemd[1]: Starting kubelet.service... Sep 13 00:04:35.434845 kernel: audit: type=1131 audit(1757721875.415:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:35.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:35.783265 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2649434113.mount: Deactivated successfully. Sep 13 00:04:35.786286 systemd[1]: Started kubelet.service. Sep 13 00:04:35.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:35.796743 kernel: audit: type=1130 audit(1757721875.787:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:35.801316 env[1805]: time="2025-09-13T00:04:35.801210559Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.805892 env[1805]: time="2025-09-13T00:04:35.805833328Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.809470 env[1805]: time="2025-09-13T00:04:35.809413381Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.815041 env[1805]: time="2025-09-13T00:04:35.814951475Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:35.816906 env[1805]: time="2025-09-13T00:04:35.816830032Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 13 00:04:35.818096 env[1805]: time="2025-09-13T00:04:35.818004660Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Sep 13 00:04:35.890736 kubelet[2238]: E0913 00:04:35.890602 2238 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:04:35.894578 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:04:35.894989 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:04:35.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:04:35.906691 kernel: audit: type=1131 audit(1757721875.894:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:04:36.377951 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4045254362.mount: Deactivated successfully. Sep 13 00:04:39.601564 env[1805]: time="2025-09-13T00:04:39.601495311Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:39.608586 env[1805]: time="2025-09-13T00:04:39.608521753Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:39.613167 env[1805]: time="2025-09-13T00:04:39.613073564Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:39.619149 env[1805]: time="2025-09-13T00:04:39.619095819Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:39.620003 env[1805]: time="2025-09-13T00:04:39.619961064Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Sep 13 00:04:40.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:40.673783 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Sep 13 00:04:40.685966 kernel: audit: type=1131 audit(1757721880.673:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:40.698000 audit: BPF prog-id=40 op=UNLOAD Sep 13 00:04:40.698000 audit: BPF prog-id=39 op=UNLOAD Sep 13 00:04:40.701674 kernel: audit: type=1334 audit(1757721880.698:243): prog-id=40 op=UNLOAD Sep 13 00:04:40.698000 audit: BPF prog-id=38 op=UNLOAD Sep 13 00:04:40.706947 kernel: audit: type=1334 audit(1757721880.698:244): prog-id=39 op=UNLOAD Sep 13 00:04:40.707022 kernel: audit: type=1334 audit(1757721880.698:245): prog-id=38 op=UNLOAD Sep 13 00:04:41.767000 amazon-ssm-agent[1786]: 2025-09-13 00:04:41 INFO [HealthCheck] HealthCheck reporting agent health. Sep 13 00:04:46.146403 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 13 00:04:46.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:46.146754 systemd[1]: Stopped kubelet.service. Sep 13 00:04:46.160870 systemd[1]: Starting kubelet.service... Sep 13 00:04:46.172262 kernel: audit: type=1130 audit(1757721886.146:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:46.172401 kernel: audit: type=1131 audit(1757721886.146:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:46.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:46.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:46.504989 systemd[1]: Started kubelet.service. Sep 13 00:04:46.516707 kernel: audit: type=1130 audit(1757721886.504:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:46.604517 kubelet[2267]: E0913 00:04:46.604428 2267 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:04:46.607671 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:04:46.608025 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:04:46.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:04:46.617914 kernel: audit: type=1131 audit(1757721886.607:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:04:47.724967 systemd[1]: Stopped kubelet.service. Sep 13 00:04:47.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:47.734947 systemd[1]: Starting kubelet.service... Sep 13 00:04:47.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:47.744021 kernel: audit: type=1130 audit(1757721887.725:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:47.744128 kernel: audit: type=1131 audit(1757721887.726:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:47.800468 systemd[1]: Reloading. Sep 13 00:04:47.991213 /usr/lib/systemd/system-generators/torcx-generator[2300]: time="2025-09-13T00:04:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:04:47.991277 /usr/lib/systemd/system-generators/torcx-generator[2300]: time="2025-09-13T00:04:47Z" level=info msg="torcx already run" Sep 13 00:04:48.193104 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:04:48.193143 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:04:48.231735 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:04:48.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.412230 kernel: audit: type=1400 audit(1757721888.397:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.412368 kernel: audit: type=1400 audit(1757721888.403:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.412422 kernel: audit: type=1400 audit(1757721888.403:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.426840 kernel: audit: type=1400 audit(1757721888.403:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit: BPF prog-id=43 op=LOAD Sep 13 00:04:48.404000 audit: BPF prog-id=41 op=UNLOAD Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit: BPF prog-id=44 op=LOAD Sep 13 00:04:48.411000 audit: BPF prog-id=24 op=UNLOAD Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit: BPF prog-id=45 op=LOAD Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.427000 audit: BPF prog-id=46 op=LOAD Sep 13 00:04:48.427000 audit: BPF prog-id=25 op=UNLOAD Sep 13 00:04:48.427000 audit: BPF prog-id=26 op=UNLOAD Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.429000 audit: BPF prog-id=47 op=LOAD Sep 13 00:04:48.429000 audit: BPF prog-id=33 op=UNLOAD Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit: BPF prog-id=48 op=LOAD Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.433000 audit: BPF prog-id=49 op=LOAD Sep 13 00:04:48.433000 audit: BPF prog-id=27 op=UNLOAD Sep 13 00:04:48.433000 audit: BPF prog-id=28 op=UNLOAD Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.438000 audit: BPF prog-id=50 op=LOAD Sep 13 00:04:48.438000 audit: BPF prog-id=34 op=UNLOAD Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.439000 audit: BPF prog-id=51 op=LOAD Sep 13 00:04:48.439000 audit: BPF prog-id=29 op=UNLOAD Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit: BPF prog-id=52 op=LOAD Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.440000 audit: BPF prog-id=53 op=LOAD Sep 13 00:04:48.440000 audit: BPF prog-id=30 op=UNLOAD Sep 13 00:04:48.440000 audit: BPF prog-id=31 op=UNLOAD Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.443000 audit: BPF prog-id=54 op=LOAD Sep 13 00:04:48.443000 audit: BPF prog-id=32 op=UNLOAD Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit: BPF prog-id=55 op=LOAD Sep 13 00:04:48.447000 audit: BPF prog-id=35 op=UNLOAD Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit: BPF prog-id=56 op=LOAD Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:48.447000 audit: BPF prog-id=57 op=LOAD Sep 13 00:04:48.447000 audit: BPF prog-id=36 op=UNLOAD Sep 13 00:04:48.447000 audit: BPF prog-id=37 op=UNLOAD Sep 13 00:04:48.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:48.491895 systemd[1]: Started kubelet.service. Sep 13 00:04:48.505906 systemd[1]: Stopping kubelet.service... Sep 13 00:04:48.506643 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 00:04:48.507074 systemd[1]: Stopped kubelet.service. Sep 13 00:04:48.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:48.510511 systemd[1]: Starting kubelet.service... Sep 13 00:04:48.834733 systemd[1]: Started kubelet.service. Sep 13 00:04:48.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:04:48.917898 kubelet[2367]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:04:48.918423 kubelet[2367]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 00:04:48.918523 kubelet[2367]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:04:48.918871 kubelet[2367]: I0913 00:04:48.918814 2367 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 00:04:50.649620 kubelet[2367]: I0913 00:04:50.649546 2367 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 13 00:04:50.649620 kubelet[2367]: I0913 00:04:50.649599 2367 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 00:04:50.650347 kubelet[2367]: I0913 00:04:50.650082 2367 server.go:954] "Client rotation is on, will bootstrap in background" Sep 13 00:04:50.747020 kubelet[2367]: E0913 00:04:50.746968 2367 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.27.41:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:50.750459 kubelet[2367]: I0913 00:04:50.750386 2367 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 00:04:50.764970 kubelet[2367]: E0913 00:04:50.764873 2367 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 00:04:50.764970 kubelet[2367]: I0913 00:04:50.764955 2367 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 00:04:50.770994 kubelet[2367]: I0913 00:04:50.770938 2367 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 00:04:50.771476 kubelet[2367]: I0913 00:04:50.771408 2367 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 00:04:50.771773 kubelet[2367]: I0913 00:04:50.771465 2367 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-41","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 00:04:50.771952 kubelet[2367]: I0913 00:04:50.771923 2367 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 00:04:50.771952 kubelet[2367]: I0913 00:04:50.771946 2367 container_manager_linux.go:304] "Creating device plugin manager" Sep 13 00:04:50.772315 kubelet[2367]: I0913 00:04:50.772272 2367 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:04:50.779965 kubelet[2367]: I0913 00:04:50.779907 2367 kubelet.go:446] "Attempting to sync node with API server" Sep 13 00:04:50.780150 kubelet[2367]: I0913 00:04:50.780076 2367 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 00:04:50.780150 kubelet[2367]: I0913 00:04:50.780117 2367 kubelet.go:352] "Adding apiserver pod source" Sep 13 00:04:50.780150 kubelet[2367]: I0913 00:04:50.780138 2367 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 00:04:50.786910 kubelet[2367]: W0913 00:04:50.786820 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.27.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-41&limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:50.787072 kubelet[2367]: E0913 00:04:50.786927 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.27.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-41&limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:50.796416 kubelet[2367]: W0913 00:04:50.796294 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.27.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:50.796590 kubelet[2367]: E0913 00:04:50.796433 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.27.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:50.797283 kubelet[2367]: I0913 00:04:50.797223 2367 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 00:04:50.799295 kubelet[2367]: I0913 00:04:50.799247 2367 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 00:04:50.799523 kubelet[2367]: W0913 00:04:50.799490 2367 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 13 00:04:50.808488 kubelet[2367]: I0913 00:04:50.808445 2367 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 00:04:50.808772 kubelet[2367]: I0913 00:04:50.808750 2367 server.go:1287] "Started kubelet" Sep 13 00:04:50.819845 kubelet[2367]: I0913 00:04:50.819768 2367 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 00:04:50.823522 kubelet[2367]: I0913 00:04:50.823481 2367 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 00:04:50.824004 kubelet[2367]: I0913 00:04:50.823964 2367 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 00:04:50.825603 kubelet[2367]: I0913 00:04:50.825567 2367 server.go:479] "Adding debug handlers to kubelet server" Sep 13 00:04:50.830869 kubelet[2367]: E0913 00:04:50.830264 2367 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.27.41:6443/api/v1/namespaces/default/events\": dial tcp 172.31.27.41:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-27-41.1864aebf3394c674 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-27-41,UID:ip-172-31-27-41,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-27-41,},FirstTimestamp:2025-09-13 00:04:50.808710772 +0000 UTC m=+1.966671014,LastTimestamp:2025-09-13 00:04:50.808710772 +0000 UTC m=+1.966671014,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-27-41,}" Sep 13 00:04:50.831000 audit[2367]: AVC avc: denied { mac_admin } for pid=2367 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:50.831000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:04:50.831000 audit[2367]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000055da0 a1=4000ba7b78 a2=4000055d40 a3=25 items=0 ppid=1 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.831000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:04:50.833474 kubelet[2367]: I0913 00:04:50.833432 2367 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 00:04:50.832000 audit[2367]: AVC avc: denied { mac_admin } for pid=2367 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:50.833866 kubelet[2367]: E0913 00:04:50.833482 2367 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 00:04:50.832000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:04:50.832000 audit[2367]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bd7180 a1=4000ba7b90 a2=4000055ec0 a3=25 items=0 ppid=1 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:04:50.834353 kubelet[2367]: I0913 00:04:50.834318 2367 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 00:04:50.837743 kubelet[2367]: I0913 00:04:50.834617 2367 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 00:04:50.838965 kubelet[2367]: I0913 00:04:50.838936 2367 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 00:04:50.839369 kubelet[2367]: I0913 00:04:50.834905 2367 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 00:04:50.839692 kubelet[2367]: I0913 00:04:50.839670 2367 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 00:04:50.839882 kubelet[2367]: I0913 00:04:50.839864 2367 reconciler.go:26] "Reconciler: start to sync state" Sep 13 00:04:50.840966 kubelet[2367]: W0913 00:04:50.840903 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.27.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:50.841185 kubelet[2367]: E0913 00:04:50.841154 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.27.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:50.841853 kubelet[2367]: E0913 00:04:50.841794 2367 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-41\" not found" Sep 13 00:04:50.843028 kubelet[2367]: E0913 00:04:50.842953 2367 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-41?timeout=10s\": dial tcp 172.31.27.41:6443: connect: connection refused" interval="200ms" Sep 13 00:04:50.843336 kubelet[2367]: I0913 00:04:50.843300 2367 factory.go:221] Registration of the systemd container factory successfully Sep 13 00:04:50.843504 kubelet[2367]: I0913 00:04:50.843468 2367 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 00:04:50.845810 kubelet[2367]: I0913 00:04:50.845757 2367 factory.go:221] Registration of the containerd container factory successfully Sep 13 00:04:50.849000 audit[2378]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.849000 audit[2378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff93bd7c0 a2=0 a3=1 items=0 ppid=2367 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.849000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 00:04:50.851000 audit[2379]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.851000 audit[2379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc64b8140 a2=0 a3=1 items=0 ppid=2367 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.851000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 00:04:50.856000 audit[2381]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.856000 audit[2381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe0888430 a2=0 a3=1 items=0 ppid=2367 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.856000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:04:50.860000 audit[2383]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.860000 audit[2383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe3dd71a0 a2=0 a3=1 items=0 ppid=2367 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.860000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:04:50.881464 kubelet[2367]: I0913 00:04:50.881414 2367 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 00:04:50.881464 kubelet[2367]: I0913 00:04:50.881450 2367 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 00:04:50.881885 kubelet[2367]: I0913 00:04:50.881483 2367 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:04:50.886708 kubelet[2367]: I0913 00:04:50.886638 2367 policy_none.go:49] "None policy: Start" Sep 13 00:04:50.886708 kubelet[2367]: I0913 00:04:50.886706 2367 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 00:04:50.886924 kubelet[2367]: I0913 00:04:50.886733 2367 state_mem.go:35] "Initializing new in-memory state store" Sep 13 00:04:50.885000 audit[2390]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.885000 audit[2390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffdce69e30 a2=0 a3=1 items=0 ppid=2367 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.885000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 13 00:04:50.888201 kubelet[2367]: I0913 00:04:50.888137 2367 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 00:04:50.889000 audit[2392]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.889000 audit[2392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5d070b0 a2=0 a3=1 items=0 ppid=2367 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 00:04:50.890000 audit[2391]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:04:50.890000 audit[2391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdb0d2fe0 a2=0 a3=1 items=0 ppid=2367 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.890000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 00:04:50.892090 kubelet[2367]: I0913 00:04:50.892040 2367 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 00:04:50.892090 kubelet[2367]: I0913 00:04:50.892090 2367 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 13 00:04:50.892258 kubelet[2367]: I0913 00:04:50.892128 2367 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 00:04:50.892258 kubelet[2367]: I0913 00:04:50.892143 2367 kubelet.go:2382] "Starting kubelet main sync loop" Sep 13 00:04:50.892258 kubelet[2367]: E0913 00:04:50.892207 2367 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 00:04:50.893000 audit[2395]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.893000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff4f33b80 a2=0 a3=1 items=0 ppid=2367 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.893000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 00:04:50.895965 kubelet[2367]: W0913 00:04:50.895905 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.27.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:50.896067 kubelet[2367]: E0913 00:04:50.895990 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.27.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:50.899000 audit[2396]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:04:50.903088 systemd[1]: Created slice kubepods.slice. Sep 13 00:04:50.899000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd672ff40 a2=0 a3=1 items=0 ppid=2367 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.899000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 00:04:50.912000 audit[2397]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:04:50.912000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcee7e170 a2=0 a3=1 items=0 ppid=2367 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.912000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 00:04:50.916538 systemd[1]: Created slice kubepods-burstable.slice. Sep 13 00:04:50.919000 audit[2398]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:04:50.919000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffebd73870 a2=0 a3=1 items=0 ppid=2367 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.919000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 00:04:50.923000 audit[2399]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:04:50.923000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd9f627f0 a2=0 a3=1 items=0 ppid=2367 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.923000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 00:04:50.926095 systemd[1]: Created slice kubepods-besteffort.slice. Sep 13 00:04:50.936490 kubelet[2367]: I0913 00:04:50.936453 2367 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 00:04:50.936000 audit[2367]: AVC avc: denied { mac_admin } for pid=2367 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:50.936000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:04:50.936000 audit[2367]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ddfaa0 a1=4000e9c7b0 a2=4000ddfa70 a3=25 items=0 ppid=1 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:50.936000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:04:50.938038 kubelet[2367]: I0913 00:04:50.937998 2367 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 00:04:50.938386 kubelet[2367]: I0913 00:04:50.938359 2367 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 00:04:50.938545 kubelet[2367]: I0913 00:04:50.938492 2367 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 00:04:50.939386 kubelet[2367]: I0913 00:04:50.939353 2367 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 00:04:50.943147 kubelet[2367]: E0913 00:04:50.943079 2367 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 00:04:50.943412 kubelet[2367]: E0913 00:04:50.943386 2367 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-27-41\" not found" Sep 13 00:04:51.008617 systemd[1]: Created slice kubepods-burstable-pod52a7efcc0542fee80e0589234d982410.slice. Sep 13 00:04:51.021770 kubelet[2367]: E0913 00:04:51.021731 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:51.026011 systemd[1]: Created slice kubepods-burstable-pod34b7cbc9ff44458c1c668b41819e6fe5.slice. Sep 13 00:04:51.030321 kubelet[2367]: E0913 00:04:51.030285 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:51.035303 systemd[1]: Created slice kubepods-burstable-poddc9670a92eca9b646d632d42c6c4e2d7.slice. Sep 13 00:04:51.039463 kubelet[2367]: E0913 00:04:51.039415 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:51.042699 kubelet[2367]: I0913 00:04:51.042620 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/52a7efcc0542fee80e0589234d982410-ca-certs\") pod \"kube-apiserver-ip-172-31-27-41\" (UID: \"52a7efcc0542fee80e0589234d982410\") " pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:04:51.042992 kubelet[2367]: I0913 00:04:51.042939 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/52a7efcc0542fee80e0589234d982410-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-41\" (UID: \"52a7efcc0542fee80e0589234d982410\") " pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:04:51.043252 kubelet[2367]: I0913 00:04:51.043206 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/52a7efcc0542fee80e0589234d982410-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-41\" (UID: \"52a7efcc0542fee80e0589234d982410\") " pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:04:51.043348 kubelet[2367]: I0913 00:04:51.043266 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:04:51.043348 kubelet[2367]: I0913 00:04:51.043312 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:04:51.043486 kubelet[2367]: I0913 00:04:51.043352 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:04:51.043486 kubelet[2367]: I0913 00:04:51.043390 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:04:51.043486 kubelet[2367]: I0913 00:04:51.043428 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:04:51.043486 kubelet[2367]: I0913 00:04:51.043481 2367 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/dc9670a92eca9b646d632d42c6c4e2d7-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-41\" (UID: \"dc9670a92eca9b646d632d42c6c4e2d7\") " pod="kube-system/kube-scheduler-ip-172-31-27-41" Sep 13 00:04:51.044898 kubelet[2367]: I0913 00:04:51.044839 2367 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-41" Sep 13 00:04:51.045459 kubelet[2367]: E0913 00:04:51.045417 2367 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-41?timeout=10s\": dial tcp 172.31.27.41:6443: connect: connection refused" interval="400ms" Sep 13 00:04:51.045687 kubelet[2367]: E0913 00:04:51.045441 2367 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.41:6443/api/v1/nodes\": dial tcp 172.31.27.41:6443: connect: connection refused" node="ip-172-31-27-41" Sep 13 00:04:51.249730 kubelet[2367]: I0913 00:04:51.248711 2367 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-41" Sep 13 00:04:51.250477 kubelet[2367]: E0913 00:04:51.250431 2367 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.41:6443/api/v1/nodes\": dial tcp 172.31.27.41:6443: connect: connection refused" node="ip-172-31-27-41" Sep 13 00:04:51.324816 env[1805]: time="2025-09-13T00:04:51.324196273Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-41,Uid:52a7efcc0542fee80e0589234d982410,Namespace:kube-system,Attempt:0,}" Sep 13 00:04:51.333025 env[1805]: time="2025-09-13T00:04:51.332957012Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-41,Uid:34b7cbc9ff44458c1c668b41819e6fe5,Namespace:kube-system,Attempt:0,}" Sep 13 00:04:51.342210 env[1805]: time="2025-09-13T00:04:51.342124431Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-41,Uid:dc9670a92eca9b646d632d42c6c4e2d7,Namespace:kube-system,Attempt:0,}" Sep 13 00:04:51.447189 kubelet[2367]: E0913 00:04:51.447079 2367 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-41?timeout=10s\": dial tcp 172.31.27.41:6443: connect: connection refused" interval="800ms" Sep 13 00:04:51.653371 kubelet[2367]: I0913 00:04:51.653305 2367 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-41" Sep 13 00:04:51.653974 kubelet[2367]: E0913 00:04:51.653932 2367 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.41:6443/api/v1/nodes\": dial tcp 172.31.27.41:6443: connect: connection refused" node="ip-172-31-27-41" Sep 13 00:04:51.717141 kubelet[2367]: W0913 00:04:51.717061 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.27.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:51.717300 kubelet[2367]: E0913 00:04:51.717139 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.27.41:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:51.791087 kubelet[2367]: W0913 00:04:51.790940 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.27.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-41&limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:51.791087 kubelet[2367]: E0913 00:04:51.791035 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.27.41:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-41&limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:51.836222 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2513378054.mount: Deactivated successfully. Sep 13 00:04:51.854107 env[1805]: time="2025-09-13T00:04:51.854027220Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.858094 env[1805]: time="2025-09-13T00:04:51.858020133Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.860390 env[1805]: time="2025-09-13T00:04:51.860336060Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.863416 env[1805]: time="2025-09-13T00:04:51.863351503Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.868114 env[1805]: time="2025-09-13T00:04:51.868040740Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.871170 env[1805]: time="2025-09-13T00:04:51.871117694Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.874247 env[1805]: time="2025-09-13T00:04:51.874194889Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.876739 env[1805]: time="2025-09-13T00:04:51.876688223Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.881006 env[1805]: time="2025-09-13T00:04:51.880952985Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.888439 env[1805]: time="2025-09-13T00:04:51.888374309Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.893099 env[1805]: time="2025-09-13T00:04:51.893026334Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.928383 env[1805]: time="2025-09-13T00:04:51.928229551Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:04:51.953509 env[1805]: time="2025-09-13T00:04:51.953395529Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:04:51.953942 env[1805]: time="2025-09-13T00:04:51.953861609Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:04:51.954220 env[1805]: time="2025-09-13T00:04:51.954117665Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:04:51.955548 env[1805]: time="2025-09-13T00:04:51.955460788Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/22e3e3c3c3b1febc1e69bffca9e2865042f0c0c06f20ea4e89a2a40e4d96f05a pid=2412 runtime=io.containerd.runc.v2 Sep 13 00:04:51.970968 env[1805]: time="2025-09-13T00:04:51.970835144Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:04:51.971177 env[1805]: time="2025-09-13T00:04:51.970921892Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:04:51.971177 env[1805]: time="2025-09-13T00:04:51.970949204Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:04:51.971413 env[1805]: time="2025-09-13T00:04:51.971264192Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4d8ad0798267b90068402abeaa981b61e3744242306ebd70b9bd505895b59724 pid=2417 runtime=io.containerd.runc.v2 Sep 13 00:04:51.997279 systemd[1]: Started cri-containerd-22e3e3c3c3b1febc1e69bffca9e2865042f0c0c06f20ea4e89a2a40e4d96f05a.scope. Sep 13 00:04:52.002462 env[1805]: time="2025-09-13T00:04:52.002332139Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:04:52.002826 env[1805]: time="2025-09-13T00:04:52.002757322Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:04:52.003085 env[1805]: time="2025-09-13T00:04:52.003025186Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:04:52.003596 env[1805]: time="2025-09-13T00:04:52.003517906Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/36e6b0b16ab6000d7a3225fb73ac42b584e4ff09df7e81f1207f75c1ec9263ae pid=2452 runtime=io.containerd.runc.v2 Sep 13 00:04:52.037228 kubelet[2367]: W0913 00:04:52.037073 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.27.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:52.037228 kubelet[2367]: E0913 00:04:52.037153 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.27.41:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:52.043503 systemd[1]: Started cri-containerd-4d8ad0798267b90068402abeaa981b61e3744242306ebd70b9bd505895b59724.scope. Sep 13 00:04:52.070042 kernel: kauditd_printk_skb: 219 callbacks suppressed Sep 13 00:04:52.070191 kernel: audit: type=1400 audit(1757721892.066:442): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.064692 systemd[1]: Started cri-containerd-36e6b0b16ab6000d7a3225fb73ac42b584e4ff09df7e81f1207f75c1ec9263ae.scope. Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.087242 kernel: audit: type=1400 audit(1757721892.066:443): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.087359 kernel: audit: type=1400 audit(1757721892.066:444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.107469 kernel: audit: type=1400 audit(1757721892.066:445): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.120528 kernel: audit: type=1400 audit(1757721892.066:446): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.132028 kernel: audit: type=1400 audit(1757721892.066:447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.132180 kernel: audit: type=1400 audit(1757721892.066:448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.141725 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 00:04:52.141835 kernel: audit: type=1400 audit(1757721892.066:449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.151778 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 00:04:52.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.069000 audit: BPF prog-id=58 op=LOAD Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2412 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232653365336333633362316665626331653639626666636139653238 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2412 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232653365336333633362316665626331653639626666636139653238 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit: BPF prog-id=59 op=LOAD Sep 13 00:04:52.077000 audit[2431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2412 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232653365336333633362316665626331653639626666636139653238 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit: BPF prog-id=60 op=LOAD Sep 13 00:04:52.077000 audit[2431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2412 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232653365336333633362316665626331653639626666636139653238 Sep 13 00:04:52.077000 audit: BPF prog-id=60 op=UNLOAD Sep 13 00:04:52.077000 audit: BPF prog-id=59 op=UNLOAD Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.077000 audit: BPF prog-id=61 op=LOAD Sep 13 00:04:52.077000 audit[2431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2412 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232653365336333633362316665626331653639626666636139653238 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.158000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.158000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2452 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336653662306231366162363030306437613332323566623733616334 Sep 13 00:04:52.158000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.158000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2452 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336653662306231366162363030306437613332323566623733616334 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit: BPF prog-id=63 op=LOAD Sep 13 00:04:52.159000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2452 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336653662306231366162363030306437613332323566623733616334 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit: BPF prog-id=64 op=LOAD Sep 13 00:04:52.159000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2452 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336653662306231366162363030306437613332323566623733616334 Sep 13 00:04:52.159000 audit: BPF prog-id=64 op=UNLOAD Sep 13 00:04:52.159000 audit: BPF prog-id=63 op=UNLOAD Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.159000 audit: BPF prog-id=65 op=LOAD Sep 13 00:04:52.159000 audit[2467]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2452 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336653662306231366162363030306437613332323566623733616334 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.170000 audit: BPF prog-id=66 op=LOAD Sep 13 00:04:52.171000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.171000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2417 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464386164303739383236376239303036383430326162656161393831 Sep 13 00:04:52.172000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.172000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2417 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464386164303739383236376239303036383430326162656161393831 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit: BPF prog-id=67 op=LOAD Sep 13 00:04:52.173000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2417 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464386164303739383236376239303036383430326162656161393831 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.173000 audit: BPF prog-id=68 op=LOAD Sep 13 00:04:52.173000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2417 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464386164303739383236376239303036383430326162656161393831 Sep 13 00:04:52.174000 audit: BPF prog-id=68 op=UNLOAD Sep 13 00:04:52.174000 audit: BPF prog-id=67 op=UNLOAD Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.175000 audit: BPF prog-id=69 op=LOAD Sep 13 00:04:52.175000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2417 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464386164303739383236376239303036383430326162656161393831 Sep 13 00:04:52.237785 env[1805]: time="2025-09-13T00:04:52.237557481Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-41,Uid:34b7cbc9ff44458c1c668b41819e6fe5,Namespace:kube-system,Attempt:0,} returns sandbox id \"22e3e3c3c3b1febc1e69bffca9e2865042f0c0c06f20ea4e89a2a40e4d96f05a\"" Sep 13 00:04:52.248562 kubelet[2367]: E0913 00:04:52.248493 2367 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.41:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-41?timeout=10s\": dial tcp 172.31.27.41:6443: connect: connection refused" interval="1.6s" Sep 13 00:04:52.252284 env[1805]: time="2025-09-13T00:04:52.252223345Z" level=info msg="CreateContainer within sandbox \"22e3e3c3c3b1febc1e69bffca9e2865042f0c0c06f20ea4e89a2a40e4d96f05a\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 13 00:04:52.273670 env[1805]: time="2025-09-13T00:04:52.273589958Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-41,Uid:52a7efcc0542fee80e0589234d982410,Namespace:kube-system,Attempt:0,} returns sandbox id \"36e6b0b16ab6000d7a3225fb73ac42b584e4ff09df7e81f1207f75c1ec9263ae\"" Sep 13 00:04:52.274189 env[1805]: time="2025-09-13T00:04:52.273905630Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-41,Uid:dc9670a92eca9b646d632d42c6c4e2d7,Namespace:kube-system,Attempt:0,} returns sandbox id \"4d8ad0798267b90068402abeaa981b61e3744242306ebd70b9bd505895b59724\"" Sep 13 00:04:52.283119 env[1805]: time="2025-09-13T00:04:52.283022637Z" level=info msg="CreateContainer within sandbox \"36e6b0b16ab6000d7a3225fb73ac42b584e4ff09df7e81f1207f75c1ec9263ae\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 13 00:04:52.285175 env[1805]: time="2025-09-13T00:04:52.285100856Z" level=info msg="CreateContainer within sandbox \"4d8ad0798267b90068402abeaa981b61e3744242306ebd70b9bd505895b59724\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 13 00:04:52.292447 env[1805]: time="2025-09-13T00:04:52.292356953Z" level=info msg="CreateContainer within sandbox \"22e3e3c3c3b1febc1e69bffca9e2865042f0c0c06f20ea4e89a2a40e4d96f05a\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"6e351943a8c066524619ed83c7a1904dcbe8795ba2b581364331ecaf0480b8d8\"" Sep 13 00:04:52.293428 env[1805]: time="2025-09-13T00:04:52.293376844Z" level=info msg="StartContainer for \"6e351943a8c066524619ed83c7a1904dcbe8795ba2b581364331ecaf0480b8d8\"" Sep 13 00:04:52.324743 env[1805]: time="2025-09-13T00:04:52.324676308Z" level=info msg="CreateContainer within sandbox \"4d8ad0798267b90068402abeaa981b61e3744242306ebd70b9bd505895b59724\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e233b9c4478981193d7787f1462c57ea7b0f1004a9fee78363f5143e244325da\"" Sep 13 00:04:52.325923 env[1805]: time="2025-09-13T00:04:52.325831559Z" level=info msg="StartContainer for \"e233b9c4478981193d7787f1462c57ea7b0f1004a9fee78363f5143e244325da\"" Sep 13 00:04:52.334344 env[1805]: time="2025-09-13T00:04:52.334282183Z" level=info msg="CreateContainer within sandbox \"36e6b0b16ab6000d7a3225fb73ac42b584e4ff09df7e81f1207f75c1ec9263ae\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"f87e9ec994119f1334f1ad218ed58eb12882161a147f28f0c7103e86394b0aa5\"" Sep 13 00:04:52.335294 env[1805]: time="2025-09-13T00:04:52.335237430Z" level=info msg="StartContainer for \"f87e9ec994119f1334f1ad218ed58eb12882161a147f28f0c7103e86394b0aa5\"" Sep 13 00:04:52.342130 systemd[1]: Started cri-containerd-6e351943a8c066524619ed83c7a1904dcbe8795ba2b581364331ecaf0480b8d8.scope. Sep 13 00:04:52.405211 systemd[1]: Started cri-containerd-e233b9c4478981193d7787f1462c57ea7b0f1004a9fee78363f5143e244325da.scope. Sep 13 00:04:52.410187 systemd[1]: Started cri-containerd-f87e9ec994119f1334f1ad218ed58eb12882161a147f28f0c7103e86394b0aa5.scope. Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.419000 audit: BPF prog-id=70 op=LOAD Sep 13 00:04:52.421000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.421000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2412 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665333531393433613863303636353234363139656438336337613139 Sep 13 00:04:52.421000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.421000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2412 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665333531393433613863303636353234363139656438336337613139 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.426587 kubelet[2367]: W0913 00:04:52.426476 2367 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.27.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.41:6443: connect: connection refused Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.424000 audit: BPF prog-id=71 op=LOAD Sep 13 00:04:52.424000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2412 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665333531393433613863303636353234363139656438336337613139 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.427769 kubelet[2367]: E0913 00:04:52.426630 2367 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.27.41:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.41:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.425000 audit: BPF prog-id=72 op=LOAD Sep 13 00:04:52.425000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2412 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665333531393433613863303636353234363139656438336337613139 Sep 13 00:04:52.433000 audit: BPF prog-id=72 op=UNLOAD Sep 13 00:04:52.433000 audit: BPF prog-id=71 op=UNLOAD Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.434000 audit: BPF prog-id=73 op=LOAD Sep 13 00:04:52.434000 audit[2536]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2412 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665333531393433613863303636353234363139656438336337613139 Sep 13 00:04:52.457492 kubelet[2367]: I0913 00:04:52.456951 2367 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-41" Sep 13 00:04:52.457492 kubelet[2367]: E0913 00:04:52.457423 2367 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.41:6443/api/v1/nodes\": dial tcp 172.31.27.41:6443: connect: connection refused" node="ip-172-31-27-41" Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.478000 audit: BPF prog-id=74 op=LOAD Sep 13 00:04:52.480000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.480000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2452 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638376539656339393431313966313333346631616432313865643538 Sep 13 00:04:52.480000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.480000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2452 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638376539656339393431313966313333346631616432313865643538 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.481000 audit: BPF prog-id=75 op=LOAD Sep 13 00:04:52.481000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2452 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638376539656339393431313966313333346631616432313865643538 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit: BPF prog-id=76 op=LOAD Sep 13 00:04:52.482000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2452 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638376539656339393431313966313333346631616432313865643538 Sep 13 00:04:52.482000 audit: BPF prog-id=76 op=UNLOAD Sep 13 00:04:52.482000 audit: BPF prog-id=75 op=UNLOAD Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.482000 audit: BPF prog-id=77 op=LOAD Sep 13 00:04:52.482000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2452 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638376539656339393431313966313333346631616432313865643538 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.486000 audit: BPF prog-id=78 op=LOAD Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2417 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532333362396334343738393831313933643737383766313436326335 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2417 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532333362396334343738393831313933643737383766313436326335 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.487000 audit: BPF prog-id=79 op=LOAD Sep 13 00:04:52.487000 audit[2554]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2417 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532333362396334343738393831313933643737383766313436326335 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.493000 audit: BPF prog-id=80 op=LOAD Sep 13 00:04:52.493000 audit[2554]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2417 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532333362396334343738393831313933643737383766313436326335 Sep 13 00:04:52.494000 audit: BPF prog-id=80 op=UNLOAD Sep 13 00:04:52.494000 audit: BPF prog-id=79 op=UNLOAD Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:52.494000 audit: BPF prog-id=81 op=LOAD Sep 13 00:04:52.494000 audit[2554]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2417 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:04:52.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532333362396334343738393831313933643737383766313436326335 Sep 13 00:04:52.548601 env[1805]: time="2025-09-13T00:04:52.548534140Z" level=info msg="StartContainer for \"6e351943a8c066524619ed83c7a1904dcbe8795ba2b581364331ecaf0480b8d8\" returns successfully" Sep 13 00:04:52.563931 env[1805]: time="2025-09-13T00:04:52.563866700Z" level=info msg="StartContainer for \"f87e9ec994119f1334f1ad218ed58eb12882161a147f28f0c7103e86394b0aa5\" returns successfully" Sep 13 00:04:52.614901 env[1805]: time="2025-09-13T00:04:52.614802510Z" level=info msg="StartContainer for \"e233b9c4478981193d7787f1462c57ea7b0f1004a9fee78363f5143e244325da\" returns successfully" Sep 13 00:04:52.906587 kubelet[2367]: E0913 00:04:52.906277 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:52.910032 kubelet[2367]: E0913 00:04:52.909997 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:52.915069 kubelet[2367]: E0913 00:04:52.915030 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:53.915061 kubelet[2367]: E0913 00:04:53.915016 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:53.918618 kubelet[2367]: E0913 00:04:53.918376 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:54.059788 kubelet[2367]: I0913 00:04:54.059752 2367 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-41" Sep 13 00:04:54.306541 kubelet[2367]: E0913 00:04:54.306397 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:55.215109 kubelet[2367]: E0913 00:04:55.215072 2367 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:55.402557 update_engine[1799]: I0913 00:04:55.401721 1799 update_attempter.cc:509] Updating boot flags... Sep 13 00:04:55.465000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:55.465000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40007311d0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:04:55.465000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:04:55.468000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:55.468000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000e26420 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:04:55.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:04:55.972761 amazon-ssm-agent[1786]: 2025-09-13 00:04:55 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Sep 13 00:04:56.327000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:56.327000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4003fe0360 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:04:56.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:04:56.328000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:56.328000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4003fe0d20 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:04:56.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:04:56.329000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:56.329000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4001b49b80 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:04:56.329000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:04:56.334000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:56.334000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=4006ab86f0 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:04:56.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:04:56.478000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:56.478000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=40038ba060 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:04:56.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:04:56.478000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:04:56.478000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=4003fe1950 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:04:56.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:04:56.559462 kubelet[2367]: E0913 00:04:56.559415 2367 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-27-41\" not found" node="ip-172-31-27-41" Sep 13 00:04:56.628111 kubelet[2367]: I0913 00:04:56.627984 2367 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-41" Sep 13 00:04:56.643244 kubelet[2367]: I0913 00:04:56.643172 2367 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:04:56.676628 kubelet[2367]: E0913 00:04:56.676579 2367 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-27-41\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:04:56.676942 kubelet[2367]: I0913 00:04:56.676914 2367 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:04:56.683628 kubelet[2367]: E0913 00:04:56.683544 2367 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-27-41\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:04:56.683939 kubelet[2367]: I0913 00:04:56.683903 2367 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-41" Sep 13 00:04:56.688680 kubelet[2367]: E0913 00:04:56.688599 2367 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-27-41\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-27-41" Sep 13 00:04:56.789934 kubelet[2367]: I0913 00:04:56.789854 2367 apiserver.go:52] "Watching apiserver" Sep 13 00:04:56.840832 kubelet[2367]: I0913 00:04:56.840756 2367 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 13 00:04:59.348091 systemd[1]: Reloading. Sep 13 00:04:59.510855 /usr/lib/systemd/system-generators/torcx-generator[2844]: time="2025-09-13T00:04:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:04:59.512783 /usr/lib/systemd/system-generators/torcx-generator[2844]: time="2025-09-13T00:04:59Z" level=info msg="torcx already run" Sep 13 00:04:59.573625 kubelet[2367]: I0913 00:04:59.573575 2367 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-41" Sep 13 00:04:59.709129 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:04:59.709410 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:04:59.753452 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.973513 kernel: kauditd_printk_skb: 358 callbacks suppressed Sep 13 00:04:59.973700 kernel: audit: type=1400 audit(1757721899.970:557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.992733 kernel: audit: type=1400 audit(1757721899.970:558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000418 kernel: audit: type=1400 audit(1757721899.970:559): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000619 kernel: audit: type=1400 audit(1757721899.970:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.015948 kernel: audit: type=1400 audit(1757721899.970:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.025619 kernel: audit: type=1400 audit(1757721899.970:562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.025781 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 00:05:00.025839 kernel: audit: type=1400 audit(1757721899.970:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.035268 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 00:05:00.035408 kernel: audit: type=1400 audit(1757721899.970:564): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.973000 audit: BPF prog-id=82 op=LOAD Sep 13 00:04:59.973000 audit: BPF prog-id=43 op=UNLOAD Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.980000 audit: BPF prog-id=83 op=LOAD Sep 13 00:04:59.980000 audit: BPF prog-id=78 op=UNLOAD Sep 13 00:04:59.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.992000 audit: BPF prog-id=84 op=LOAD Sep 13 00:04:59.992000 audit: BPF prog-id=44 op=UNLOAD Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:04:59.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit: BPF prog-id=85 op=LOAD Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.007000 audit: BPF prog-id=86 op=LOAD Sep 13 00:05:00.007000 audit: BPF prog-id=45 op=UNLOAD Sep 13 00:05:00.007000 audit: BPF prog-id=46 op=UNLOAD Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.015000 audit: BPF prog-id=87 op=LOAD Sep 13 00:05:00.015000 audit: BPF prog-id=47 op=UNLOAD Sep 13 00:05:00.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.045000 audit: BPF prog-id=88 op=LOAD Sep 13 00:05:00.045000 audit: BPF prog-id=70 op=UNLOAD Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.046000 audit: BPF prog-id=89 op=LOAD Sep 13 00:05:00.046000 audit: BPF prog-id=74 op=UNLOAD Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit: BPF prog-id=90 op=LOAD Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.048000 audit: BPF prog-id=91 op=LOAD Sep 13 00:05:00.048000 audit: BPF prog-id=48 op=UNLOAD Sep 13 00:05:00.048000 audit: BPF prog-id=49 op=UNLOAD Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.049000 audit: BPF prog-id=92 op=LOAD Sep 13 00:05:00.050000 audit: BPF prog-id=58 op=UNLOAD Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.055000 audit: BPF prog-id=93 op=LOAD Sep 13 00:05:00.055000 audit: BPF prog-id=50 op=UNLOAD Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit: BPF prog-id=94 op=LOAD Sep 13 00:05:00.057000 audit: BPF prog-id=51 op=UNLOAD Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit: BPF prog-id=95 op=LOAD Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.057000 audit: BPF prog-id=96 op=LOAD Sep 13 00:05:00.057000 audit: BPF prog-id=52 op=UNLOAD Sep 13 00:05:00.057000 audit: BPF prog-id=53 op=UNLOAD Sep 13 00:05:00.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.061000 audit: BPF prog-id=97 op=LOAD Sep 13 00:05:00.061000 audit: BPF prog-id=66 op=UNLOAD Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.062000 audit: BPF prog-id=98 op=LOAD Sep 13 00:05:00.062000 audit: BPF prog-id=54 op=UNLOAD Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.067000 audit: BPF prog-id=99 op=LOAD Sep 13 00:05:00.067000 audit: BPF prog-id=55 op=UNLOAD Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit: BPF prog-id=100 op=LOAD Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.068000 audit: BPF prog-id=101 op=LOAD Sep 13 00:05:00.068000 audit: BPF prog-id=56 op=UNLOAD Sep 13 00:05:00.068000 audit: BPF prog-id=57 op=UNLOAD Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.070000 audit: BPF prog-id=102 op=LOAD Sep 13 00:05:00.070000 audit: BPF prog-id=62 op=UNLOAD Sep 13 00:05:00.103076 systemd[1]: Stopping kubelet.service... Sep 13 00:05:00.133365 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 00:05:00.134161 systemd[1]: Stopped kubelet.service. Sep 13 00:05:00.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:05:00.134624 systemd[1]: kubelet.service: Consumed 2.725s CPU time. Sep 13 00:05:00.139139 systemd[1]: Starting kubelet.service... Sep 13 00:05:00.497428 systemd[1]: Started kubelet.service. Sep 13 00:05:00.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:05:00.620844 kubelet[2903]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:05:00.621430 kubelet[2903]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 00:05:00.621557 kubelet[2903]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:05:00.621923 kubelet[2903]: I0913 00:05:00.621860 2903 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 00:05:00.651532 kubelet[2903]: I0913 00:05:00.651432 2903 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 13 00:05:00.651532 kubelet[2903]: I0913 00:05:00.651489 2903 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 00:05:00.652015 kubelet[2903]: I0913 00:05:00.651968 2903 server.go:954] "Client rotation is on, will bootstrap in background" Sep 13 00:05:00.671484 kubelet[2903]: I0913 00:05:00.669253 2903 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 13 00:05:00.682884 kubelet[2903]: I0913 00:05:00.682827 2903 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 00:05:00.711151 kubelet[2903]: E0913 00:05:00.710124 2903 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 00:05:00.711151 kubelet[2903]: I0913 00:05:00.710214 2903 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 00:05:00.725522 kubelet[2903]: I0913 00:05:00.725410 2903 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 00:05:00.726800 kubelet[2903]: I0913 00:05:00.725970 2903 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 00:05:00.726800 kubelet[2903]: I0913 00:05:00.726040 2903 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-41","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 00:05:00.726800 kubelet[2903]: I0913 00:05:00.726350 2903 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 00:05:00.726800 kubelet[2903]: I0913 00:05:00.726369 2903 container_manager_linux.go:304] "Creating device plugin manager" Sep 13 00:05:00.727216 kubelet[2903]: I0913 00:05:00.726441 2903 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:05:00.727216 kubelet[2903]: I0913 00:05:00.726674 2903 kubelet.go:446] "Attempting to sync node with API server" Sep 13 00:05:00.727216 kubelet[2903]: I0913 00:05:00.726708 2903 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 00:05:00.727216 kubelet[2903]: I0913 00:05:00.726740 2903 kubelet.go:352] "Adding apiserver pod source" Sep 13 00:05:00.727216 kubelet[2903]: I0913 00:05:00.726760 2903 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 00:05:00.737630 kubelet[2903]: I0913 00:05:00.737592 2903 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 00:05:00.739478 kubelet[2903]: I0913 00:05:00.738542 2903 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 00:05:00.742577 kubelet[2903]: I0913 00:05:00.742536 2903 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 00:05:00.742847 kubelet[2903]: I0913 00:05:00.742823 2903 server.go:1287] "Started kubelet" Sep 13 00:05:00.763000 audit[2903]: AVC avc: denied { mac_admin } for pid=2903 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.766937 kubelet[2903]: I0913 00:05:00.766248 2903 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 00:05:00.770441 kubelet[2903]: I0913 00:05:00.770388 2903 server.go:479] "Adding debug handlers to kubelet server" Sep 13 00:05:00.777330 kubelet[2903]: I0913 00:05:00.777227 2903 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 00:05:00.777678 kubelet[2903]: I0913 00:05:00.777627 2903 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 00:05:00.763000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:05:00.763000 audit[2903]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bc40c0 a1=40008f4d80 a2=4000bc4090 a3=25 items=0 ppid=1 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:00.763000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:05:00.797791 kubelet[2903]: I0913 00:05:00.797738 2903 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 00:05:00.798000 audit[2903]: AVC avc: denied { mac_admin } for pid=2903 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:00.798000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:05:00.798000 audit[2903]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b64a00 a1=4000b411b8 a2=4000b487b0 a3=25 items=0 ppid=1 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:00.798000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:05:00.813064 kubelet[2903]: I0913 00:05:00.812985 2903 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 00:05:00.813313 kubelet[2903]: I0913 00:05:00.813289 2903 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 00:05:00.814686 kubelet[2903]: I0913 00:05:00.814596 2903 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 00:05:00.826840 kubelet[2903]: I0913 00:05:00.826795 2903 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 00:05:00.830462 kubelet[2903]: I0913 00:05:00.827884 2903 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 00:05:00.831057 kubelet[2903]: I0913 00:05:00.831025 2903 reconciler.go:26] "Reconciler: start to sync state" Sep 13 00:05:00.831386 kubelet[2903]: E0913 00:05:00.831348 2903 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 00:05:00.866873 kubelet[2903]: I0913 00:05:00.864901 2903 factory.go:221] Registration of the systemd container factory successfully Sep 13 00:05:00.872778 kubelet[2903]: I0913 00:05:00.869790 2903 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 00:05:00.879389 kubelet[2903]: I0913 00:05:00.878230 2903 factory.go:221] Registration of the containerd container factory successfully Sep 13 00:05:00.894183 kubelet[2903]: I0913 00:05:00.894128 2903 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 00:05:00.907230 kubelet[2903]: I0913 00:05:00.907183 2903 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 00:05:00.907461 kubelet[2903]: I0913 00:05:00.907438 2903 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 13 00:05:00.907588 kubelet[2903]: I0913 00:05:00.907566 2903 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 00:05:00.907715 kubelet[2903]: I0913 00:05:00.907695 2903 kubelet.go:2382] "Starting kubelet main sync loop" Sep 13 00:05:00.907895 kubelet[2903]: E0913 00:05:00.907865 2903 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 00:05:01.012303 kubelet[2903]: E0913 00:05:01.012241 2903 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 13 00:05:01.014000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:01.014000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000b5c160 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:05:01.014000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:05:01.019000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:01.019000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000b5c360 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:05:01.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:05:01.020000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:01.020000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a8abc0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:05:01.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:05:01.020000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:01.020000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a8ad60 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:05:01.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:05:01.081045 kubelet[2903]: I0913 00:05:01.080991 2903 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 00:05:01.081409 kubelet[2903]: I0913 00:05:01.081374 2903 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 00:05:01.081609 kubelet[2903]: I0913 00:05:01.081583 2903 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:05:01.082329 kubelet[2903]: I0913 00:05:01.082273 2903 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 13 00:05:01.082552 kubelet[2903]: I0913 00:05:01.082505 2903 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 13 00:05:01.082746 kubelet[2903]: I0913 00:05:01.082722 2903 policy_none.go:49] "None policy: Start" Sep 13 00:05:01.082939 kubelet[2903]: I0913 00:05:01.082912 2903 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 00:05:01.083114 kubelet[2903]: I0913 00:05:01.083091 2903 state_mem.go:35] "Initializing new in-memory state store" Sep 13 00:05:01.083747 kubelet[2903]: I0913 00:05:01.083717 2903 state_mem.go:75] "Updated machine memory state" Sep 13 00:05:01.095004 kubelet[2903]: I0913 00:05:01.094943 2903 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 00:05:01.094000 audit[2903]: AVC avc: denied { mac_admin } for pid=2903 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:01.094000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:05:01.094000 audit[2903]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001051620 a1=4001107578 a2=40010515f0 a3=25 items=0 ppid=1 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:01.094000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:05:01.095748 kubelet[2903]: I0913 00:05:01.095124 2903 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 00:05:01.095748 kubelet[2903]: I0913 00:05:01.095401 2903 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 00:05:01.095748 kubelet[2903]: I0913 00:05:01.095425 2903 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 00:05:01.101759 kubelet[2903]: E0913 00:05:01.101708 2903 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 00:05:01.114705 kubelet[2903]: I0913 00:05:01.114590 2903 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 00:05:01.213916 kubelet[2903]: I0913 00:05:01.213854 2903 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-41" Sep 13 00:05:01.215109 kubelet[2903]: I0913 00:05:01.215066 2903 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:05:01.216088 kubelet[2903]: I0913 00:05:01.215995 2903 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:05:01.229796 kubelet[2903]: E0913 00:05:01.229714 2903 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-27-41\" already exists" pod="kube-system/kube-scheduler-ip-172-31-27-41" Sep 13 00:05:01.235398 kubelet[2903]: I0913 00:05:01.235333 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/52a7efcc0542fee80e0589234d982410-ca-certs\") pod \"kube-apiserver-ip-172-31-27-41\" (UID: \"52a7efcc0542fee80e0589234d982410\") " pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:05:01.235752 kubelet[2903]: I0913 00:05:01.235711 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/52a7efcc0542fee80e0589234d982410-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-41\" (UID: \"52a7efcc0542fee80e0589234d982410\") " pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:05:01.236014 kubelet[2903]: I0913 00:05:01.235953 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/52a7efcc0542fee80e0589234d982410-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-41\" (UID: \"52a7efcc0542fee80e0589234d982410\") " pod="kube-system/kube-apiserver-ip-172-31-27-41" Sep 13 00:05:01.236365 kubelet[2903]: I0913 00:05:01.236321 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:05:01.236537 kubelet[2903]: I0913 00:05:01.236512 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/dc9670a92eca9b646d632d42c6c4e2d7-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-41\" (UID: \"dc9670a92eca9b646d632d42c6c4e2d7\") " pod="kube-system/kube-scheduler-ip-172-31-27-41" Sep 13 00:05:01.236754 kubelet[2903]: I0913 00:05:01.236708 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:05:01.236977 kubelet[2903]: I0913 00:05:01.236931 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:05:01.237163 kubelet[2903]: I0913 00:05:01.237119 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:05:01.237366 kubelet[2903]: I0913 00:05:01.237316 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/34b7cbc9ff44458c1c668b41819e6fe5-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-41\" (UID: \"34b7cbc9ff44458c1c668b41819e6fe5\") " pod="kube-system/kube-controller-manager-ip-172-31-27-41" Sep 13 00:05:01.245534 kubelet[2903]: I0913 00:05:01.245478 2903 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-41" Sep 13 00:05:01.272178 kubelet[2903]: I0913 00:05:01.272010 2903 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-27-41" Sep 13 00:05:01.272516 kubelet[2903]: I0913 00:05:01.272491 2903 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-41" Sep 13 00:05:01.730711 kubelet[2903]: I0913 00:05:01.730597 2903 apiserver.go:52] "Watching apiserver" Sep 13 00:05:01.831227 kubelet[2903]: I0913 00:05:01.831175 2903 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 13 00:05:02.077051 kubelet[2903]: I0913 00:05:02.076790 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-27-41" podStartSLOduration=3.076736897 podStartE2EDuration="3.076736897s" podCreationTimestamp="2025-09-13 00:04:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:05:02.046143422 +0000 UTC m=+1.536322848" watchObservedRunningTime="2025-09-13 00:05:02.076736897 +0000 UTC m=+1.566916299" Sep 13 00:05:02.097267 kubelet[2903]: I0913 00:05:02.097118 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-27-41" podStartSLOduration=1.097092298 podStartE2EDuration="1.097092298s" podCreationTimestamp="2025-09-13 00:05:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:05:02.078973048 +0000 UTC m=+1.569152486" watchObservedRunningTime="2025-09-13 00:05:02.097092298 +0000 UTC m=+1.587271700" Sep 13 00:05:02.116000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 00:05:02.116000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000ac3c40 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:05:02.116000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:05:02.134732 kubelet[2903]: I0913 00:05:02.134566 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-27-41" podStartSLOduration=1.134537782 podStartE2EDuration="1.134537782s" podCreationTimestamp="2025-09-13 00:05:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:05:02.097639222 +0000 UTC m=+1.587818648" watchObservedRunningTime="2025-09-13 00:05:02.134537782 +0000 UTC m=+1.624717184" Sep 13 00:05:05.358930 kubelet[2903]: I0913 00:05:05.358881 2903 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 13 00:05:05.360948 env[1805]: time="2025-09-13T00:05:05.360880106Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 13 00:05:05.362239 kubelet[2903]: I0913 00:05:05.362188 2903 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 13 00:05:05.908538 systemd[1]: Created slice kubepods-besteffort-pod063a12b2_c628_4198_ba9f_c36f09b610cf.slice. Sep 13 00:05:05.977897 kubelet[2903]: I0913 00:05:05.977842 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/063a12b2-c628-4198-ba9f-c36f09b610cf-kube-proxy\") pod \"kube-proxy-swbqs\" (UID: \"063a12b2-c628-4198-ba9f-c36f09b610cf\") " pod="kube-system/kube-proxy-swbqs" Sep 13 00:05:05.978256 kubelet[2903]: I0913 00:05:05.978220 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/063a12b2-c628-4198-ba9f-c36f09b610cf-xtables-lock\") pod \"kube-proxy-swbqs\" (UID: \"063a12b2-c628-4198-ba9f-c36f09b610cf\") " pod="kube-system/kube-proxy-swbqs" Sep 13 00:05:05.978497 kubelet[2903]: I0913 00:05:05.978438 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/063a12b2-c628-4198-ba9f-c36f09b610cf-lib-modules\") pod \"kube-proxy-swbqs\" (UID: \"063a12b2-c628-4198-ba9f-c36f09b610cf\") " pod="kube-system/kube-proxy-swbqs" Sep 13 00:05:05.978585 kubelet[2903]: I0913 00:05:05.978499 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lv8ms\" (UniqueName: \"kubernetes.io/projected/063a12b2-c628-4198-ba9f-c36f09b610cf-kube-api-access-lv8ms\") pod \"kube-proxy-swbqs\" (UID: \"063a12b2-c628-4198-ba9f-c36f09b610cf\") " pod="kube-system/kube-proxy-swbqs" Sep 13 00:05:06.101900 kubelet[2903]: I0913 00:05:06.101822 2903 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 13 00:05:06.218411 env[1805]: time="2025-09-13T00:05:06.218215178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-swbqs,Uid:063a12b2-c628-4198-ba9f-c36f09b610cf,Namespace:kube-system,Attempt:0,}" Sep 13 00:05:06.262746 env[1805]: time="2025-09-13T00:05:06.261889443Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:06.262746 env[1805]: time="2025-09-13T00:05:06.261967359Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:06.262746 env[1805]: time="2025-09-13T00:05:06.261994347Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:06.262746 env[1805]: time="2025-09-13T00:05:06.262210911Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a1b7423e8029bbe6dcc2153ca08fa79166a5eb874e844bf8d8323de708096aab pid=2954 runtime=io.containerd.runc.v2 Sep 13 00:05:06.311427 systemd[1]: run-containerd-runc-k8s.io-a1b7423e8029bbe6dcc2153ca08fa79166a5eb874e844bf8d8323de708096aab-runc.HScah6.mount: Deactivated successfully. Sep 13 00:05:06.321006 systemd[1]: Started cri-containerd-a1b7423e8029bbe6dcc2153ca08fa79166a5eb874e844bf8d8323de708096aab.scope. Sep 13 00:05:06.394841 kernel: kauditd_printk_skb: 277 callbacks suppressed Sep 13 00:05:06.395013 kernel: audit: type=1400 audit(1757721906.392:804): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.413455 kernel: audit: type=1400 audit(1757721906.392:805): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.426632 kernel: audit: type=1400 audit(1757721906.392:806): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.436506 kernel: audit: type=1400 audit(1757721906.392:807): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.436710 kernel: audit: type=1400 audit(1757721906.392:808): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.456577 kernel: audit: type=1400 audit(1757721906.392:809): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.468506 kernel: audit: type=1400 audit(1757721906.392:810): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.480483 kernel: audit: type=1400 audit(1757721906.392:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.493231 kernel: audit: type=1400 audit(1757721906.392:812): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.505189 kernel: audit: type=1400 audit(1757721906.394:813): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.394000 audit: BPF prog-id=103 op=LOAD Sep 13 00:05:06.401000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.401000 audit[2963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2954 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734323365383032396262653664636332313533636130386661 Sep 13 00:05:06.401000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.401000 audit[2963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2954 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734323365383032396262653664636332313533636130386661 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit: BPF prog-id=104 op=LOAD Sep 13 00:05:06.402000 audit[2963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2954 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734323365383032396262653664636332313533636130386661 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit: BPF prog-id=105 op=LOAD Sep 13 00:05:06.402000 audit[2963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2954 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734323365383032396262653664636332313533636130386661 Sep 13 00:05:06.402000 audit: BPF prog-id=105 op=UNLOAD Sep 13 00:05:06.402000 audit: BPF prog-id=104 op=UNLOAD Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { perfmon } for pid=2963 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit[2963]: AVC avc: denied { bpf } for pid=2963 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.402000 audit: BPF prog-id=106 op=LOAD Sep 13 00:05:06.402000 audit[2963]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2954 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623734323365383032396262653664636332313533636130386661 Sep 13 00:05:06.524903 env[1805]: time="2025-09-13T00:05:06.524837957Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-swbqs,Uid:063a12b2-c628-4198-ba9f-c36f09b610cf,Namespace:kube-system,Attempt:0,} returns sandbox id \"a1b7423e8029bbe6dcc2153ca08fa79166a5eb874e844bf8d8323de708096aab\"" Sep 13 00:05:06.537722 env[1805]: time="2025-09-13T00:05:06.537329209Z" level=info msg="CreateContainer within sandbox \"a1b7423e8029bbe6dcc2153ca08fa79166a5eb874e844bf8d8323de708096aab\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 13 00:05:06.568507 systemd[1]: Created slice kubepods-besteffort-pod905d2de8_4d1a_4d35_8add_1eeadaa6ba27.slice. Sep 13 00:05:06.583478 kubelet[2903]: I0913 00:05:06.583419 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/905d2de8-4d1a-4d35-8add-1eeadaa6ba27-var-lib-calico\") pod \"tigera-operator-755d956888-5bdln\" (UID: \"905d2de8-4d1a-4d35-8add-1eeadaa6ba27\") " pod="tigera-operator/tigera-operator-755d956888-5bdln" Sep 13 00:05:06.584154 kubelet[2903]: I0913 00:05:06.583499 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5kggs\" (UniqueName: \"kubernetes.io/projected/905d2de8-4d1a-4d35-8add-1eeadaa6ba27-kube-api-access-5kggs\") pod \"tigera-operator-755d956888-5bdln\" (UID: \"905d2de8-4d1a-4d35-8add-1eeadaa6ba27\") " pod="tigera-operator/tigera-operator-755d956888-5bdln" Sep 13 00:05:06.596793 env[1805]: time="2025-09-13T00:05:06.596714914Z" level=info msg="CreateContainer within sandbox \"a1b7423e8029bbe6dcc2153ca08fa79166a5eb874e844bf8d8323de708096aab\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"91f7fc0d34d801aa4d13174b8f732024c212a83c0cec6e2bf11b2670d96f8a1c\"" Sep 13 00:05:06.598413 env[1805]: time="2025-09-13T00:05:06.598343985Z" level=info msg="StartContainer for \"91f7fc0d34d801aa4d13174b8f732024c212a83c0cec6e2bf11b2670d96f8a1c\"" Sep 13 00:05:06.637804 systemd[1]: Started cri-containerd-91f7fc0d34d801aa4d13174b8f732024c212a83c0cec6e2bf11b2670d96f8a1c.scope. Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2954 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663766633064333464383031616134643133313734623866373332 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.691000 audit: BPF prog-id=107 op=LOAD Sep 13 00:05:06.691000 audit[2993]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2954 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663766633064333464383031616134643133313734623866373332 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.692000 audit: BPF prog-id=108 op=LOAD Sep 13 00:05:06.692000 audit[2993]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2954 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663766633064333464383031616134643133313734623866373332 Sep 13 00:05:06.693000 audit: BPF prog-id=108 op=UNLOAD Sep 13 00:05:06.693000 audit: BPF prog-id=107 op=UNLOAD Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { perfmon } for pid=2993 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit[2993]: AVC avc: denied { bpf } for pid=2993 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:06.693000 audit: BPF prog-id=109 op=LOAD Sep 13 00:05:06.693000 audit[2993]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2954 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:06.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931663766633064333464383031616134643133313734623866373332 Sep 13 00:05:06.737191 env[1805]: time="2025-09-13T00:05:06.736943768Z" level=info msg="StartContainer for \"91f7fc0d34d801aa4d13174b8f732024c212a83c0cec6e2bf11b2670d96f8a1c\" returns successfully" Sep 13 00:05:06.878186 env[1805]: time="2025-09-13T00:05:06.877752355Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-5bdln,Uid:905d2de8-4d1a-4d35-8add-1eeadaa6ba27,Namespace:tigera-operator,Attempt:0,}" Sep 13 00:05:06.914789 env[1805]: time="2025-09-13T00:05:06.913448817Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:06.914789 env[1805]: time="2025-09-13T00:05:06.913538805Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:06.914789 env[1805]: time="2025-09-13T00:05:06.913566669Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:06.914789 env[1805]: time="2025-09-13T00:05:06.913907913Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a648c83b9aef2e26d40c107ffded2ea3b88ab8af83d6f34373553f8a75216bcd pid=3034 runtime=io.containerd.runc.v2 Sep 13 00:05:06.957973 systemd[1]: Started cri-containerd-a648c83b9aef2e26d40c107ffded2ea3b88ab8af83d6f34373553f8a75216bcd.scope. Sep 13 00:05:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.002000 audit: BPF prog-id=110 op=LOAD Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=3034 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136343863383362396165663265323664343063313037666664656432 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=3034 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136343863383362396165663265323664343063313037666664656432 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.003000 audit: BPF prog-id=111 op=LOAD Sep 13 00:05:07.003000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=3034 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136343863383362396165663265323664343063313037666664656432 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit: BPF prog-id=112 op=LOAD Sep 13 00:05:07.004000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=3034 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136343863383362396165663265323664343063313037666664656432 Sep 13 00:05:07.004000 audit: BPF prog-id=112 op=UNLOAD Sep 13 00:05:07.004000 audit: BPF prog-id=111 op=UNLOAD Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:07.004000 audit: BPF prog-id=113 op=LOAD Sep 13 00:05:07.004000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=3034 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136343863383362396165663265323664343063313037666664656432 Sep 13 00:05:07.085021 env[1805]: time="2025-09-13T00:05:07.084940856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-5bdln,Uid:905d2de8-4d1a-4d35-8add-1eeadaa6ba27,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"a648c83b9aef2e26d40c107ffded2ea3b88ab8af83d6f34373553f8a75216bcd\"" Sep 13 00:05:07.089102 env[1805]: time="2025-09-13T00:05:07.089020627Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 13 00:05:07.121000 audit[3095]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.121000 audit[3095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd85f7a30 a2=0 a3=1 items=0 ppid=3004 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.121000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 00:05:07.126000 audit[3097]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=3097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.126000 audit[3097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6388410 a2=0 a3=1 items=0 ppid=3004 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.126000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 00:05:07.129000 audit[3098]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=3098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.129000 audit[3098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0e8cdb0 a2=0 a3=1 items=0 ppid=3004 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.129000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 00:05:07.132000 audit[3099]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=3099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.132000 audit[3099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffbcf9f60 a2=0 a3=1 items=0 ppid=3004 pid=3099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.132000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 00:05:07.139000 audit[3101]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=3101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.139000 audit[3101]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcebc8110 a2=0 a3=1 items=0 ppid=3004 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.139000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 00:05:07.140000 audit[3100]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.140000 audit[3100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe99bc420 a2=0 a3=1 items=0 ppid=3004 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 00:05:07.214000 audit[3102]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.214000 audit[3102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd9d23290 a2=0 a3=1 items=0 ppid=3004 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.214000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 00:05:07.222000 audit[3104]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.222000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdb614960 a2=0 a3=1 items=0 ppid=3004 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 13 00:05:07.231000 audit[3107]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.231000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe6276dd0 a2=0 a3=1 items=0 ppid=3004 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.231000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 13 00:05:07.234000 audit[3108]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.234000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe1b5380 a2=0 a3=1 items=0 ppid=3004 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.234000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 00:05:07.241000 audit[3110]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.241000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6e4a260 a2=0 a3=1 items=0 ppid=3004 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.241000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 00:05:07.244000 audit[3111]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.244000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe90d76a0 a2=0 a3=1 items=0 ppid=3004 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.244000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 00:05:07.253000 audit[3113]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.253000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdeba2ca0 a2=0 a3=1 items=0 ppid=3004 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.253000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 00:05:07.267000 audit[3116]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.267000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc0e2f0b0 a2=0 a3=1 items=0 ppid=3004 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.267000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 13 00:05:07.270000 audit[3117]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.270000 audit[3117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffceebecb0 a2=0 a3=1 items=0 ppid=3004 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.270000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 00:05:07.276000 audit[3119]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.276000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd70f0f10 a2=0 a3=1 items=0 ppid=3004 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.276000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 00:05:07.279000 audit[3120]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.279000 audit[3120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff468fd60 a2=0 a3=1 items=0 ppid=3004 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.279000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 00:05:07.285000 audit[3122]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3122 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.285000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdae0c890 a2=0 a3=1 items=0 ppid=3004 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.285000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:05:07.295000 audit[3125]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.295000 audit[3125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe62ca820 a2=0 a3=1 items=0 ppid=3004 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.295000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:05:07.303000 audit[3128]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.303000 audit[3128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdbdfccd0 a2=0 a3=1 items=0 ppid=3004 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.303000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 00:05:07.306000 audit[3129]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.306000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeb95b9e0 a2=0 a3=1 items=0 ppid=3004 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.306000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 00:05:07.312000 audit[3131]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.312000 audit[3131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffec5e5d80 a2=0 a3=1 items=0 ppid=3004 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:05:07.319000 audit[3134]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3134 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.319000 audit[3134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd2584af0 a2=0 a3=1 items=0 ppid=3004 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:05:07.323000 audit[3135]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.323000 audit[3135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdaf875f0 a2=0 a3=1 items=0 ppid=3004 pid=3135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.323000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 00:05:07.329000 audit[3137]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:05:07.329000 audit[3137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe1650de0 a2=0 a3=1 items=0 ppid=3004 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 00:05:07.387000 audit[3143]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3143 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:07.387000 audit[3143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe47dc2f0 a2=0 a3=1 items=0 ppid=3004 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.387000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:07.398000 audit[3143]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3143 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:07.398000 audit[3143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe47dc2f0 a2=0 a3=1 items=0 ppid=3004 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.398000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:07.401000 audit[3148]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3148 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.401000 audit[3148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd6ac2ea0 a2=0 a3=1 items=0 ppid=3004 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 00:05:07.407000 audit[3150]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3150 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.407000 audit[3150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe1145d10 a2=0 a3=1 items=0 ppid=3004 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 13 00:05:07.415000 audit[3153]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3153 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.415000 audit[3153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff05f4480 a2=0 a3=1 items=0 ppid=3004 pid=3153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 13 00:05:07.418000 audit[3154]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.418000 audit[3154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc914d4a0 a2=0 a3=1 items=0 ppid=3004 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.418000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 00:05:07.424000 audit[3156]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.424000 audit[3156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff6909500 a2=0 a3=1 items=0 ppid=3004 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.424000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 00:05:07.427000 audit[3157]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.427000 audit[3157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff4334a40 a2=0 a3=1 items=0 ppid=3004 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.427000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 00:05:07.433000 audit[3159]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3159 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.433000 audit[3159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd39ebd90 a2=0 a3=1 items=0 ppid=3004 pid=3159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 13 00:05:07.441000 audit[3162]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.441000 audit[3162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffddf51c40 a2=0 a3=1 items=0 ppid=3004 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 00:05:07.444000 audit[3163]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.444000 audit[3163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe162c690 a2=0 a3=1 items=0 ppid=3004 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.444000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 00:05:07.450000 audit[3165]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.450000 audit[3165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdd56fa80 a2=0 a3=1 items=0 ppid=3004 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.450000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 00:05:07.453000 audit[3166]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.453000 audit[3166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc5eaf510 a2=0 a3=1 items=0 ppid=3004 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.453000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 00:05:07.458000 audit[3168]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.458000 audit[3168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff461f500 a2=0 a3=1 items=0 ppid=3004 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:05:07.470000 audit[3171]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.470000 audit[3171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc2742380 a2=0 a3=1 items=0 ppid=3004 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.470000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 00:05:07.478000 audit[3174]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.478000 audit[3174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff920d5e0 a2=0 a3=1 items=0 ppid=3004 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.478000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 13 00:05:07.483000 audit[3175]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.483000 audit[3175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffffdd0f80 a2=0 a3=1 items=0 ppid=3004 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.483000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 00:05:07.488000 audit[3177]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.488000 audit[3177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffec5eaf70 a2=0 a3=1 items=0 ppid=3004 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.488000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:05:07.495000 audit[3180]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3180 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.495000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffffe1bd110 a2=0 a3=1 items=0 ppid=3004 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.495000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:05:07.498000 audit[3181]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3181 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.498000 audit[3181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff621a30 a2=0 a3=1 items=0 ppid=3004 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.498000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 00:05:07.503000 audit[3183]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3183 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.503000 audit[3183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc8dd5a80 a2=0 a3=1 items=0 ppid=3004 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.503000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 00:05:07.506000 audit[3184]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3184 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.506000 audit[3184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe03823b0 a2=0 a3=1 items=0 ppid=3004 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.506000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 00:05:07.511000 audit[3186]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3186 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.511000 audit[3186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffff539d60 a2=0 a3=1 items=0 ppid=3004 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.511000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:05:07.518000 audit[3189]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3189 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:05:07.518000 audit[3189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff13326f0 a2=0 a3=1 items=0 ppid=3004 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.518000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:05:07.529000 audit[3191]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3191 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 00:05:07.529000 audit[3191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd08332e0 a2=0 a3=1 items=0 ppid=3004 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.529000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:07.530000 audit[3191]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3191 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 00:05:07.530000 audit[3191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd08332e0 a2=0 a3=1 items=0 ppid=3004 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:07.530000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:08.410485 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2896731782.mount: Deactivated successfully. Sep 13 00:05:09.586703 env[1805]: time="2025-09-13T00:05:09.586584221Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:09.592462 env[1805]: time="2025-09-13T00:05:09.592399864Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:09.596184 env[1805]: time="2025-09-13T00:05:09.596094663Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:09.600153 env[1805]: time="2025-09-13T00:05:09.600095342Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:09.601233 env[1805]: time="2025-09-13T00:05:09.601182854Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 13 00:05:09.605101 env[1805]: time="2025-09-13T00:05:09.605038285Z" level=info msg="CreateContainer within sandbox \"a648c83b9aef2e26d40c107ffded2ea3b88ab8af83d6f34373553f8a75216bcd\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 13 00:05:09.630319 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2252424686.mount: Deactivated successfully. Sep 13 00:05:09.645234 env[1805]: time="2025-09-13T00:05:09.645119668Z" level=info msg="CreateContainer within sandbox \"a648c83b9aef2e26d40c107ffded2ea3b88ab8af83d6f34373553f8a75216bcd\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"52f4ff99b3bcf1c7173db16e6a444d6888fb155c541f449e4f53ace64a55514d\"" Sep 13 00:05:09.649139 env[1805]: time="2025-09-13T00:05:09.649076463Z" level=info msg="StartContainer for \"52f4ff99b3bcf1c7173db16e6a444d6888fb155c541f449e4f53ace64a55514d\"" Sep 13 00:05:09.687918 systemd[1]: Started cri-containerd-52f4ff99b3bcf1c7173db16e6a444d6888fb155c541f449e4f53ace64a55514d.scope. Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.739000 audit: BPF prog-id=114 op=LOAD Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3034 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:09.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532663466663939623362636631633731373364623136653661343434 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3034 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:09.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532663466663939623362636631633731373364623136653661343434 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit: BPF prog-id=115 op=LOAD Sep 13 00:05:09.741000 audit[3198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3034 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:09.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532663466663939623362636631633731373364623136653661343434 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.741000 audit: BPF prog-id=116 op=LOAD Sep 13 00:05:09.741000 audit[3198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3034 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:09.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532663466663939623362636631633731373364623136653661343434 Sep 13 00:05:09.741000 audit: BPF prog-id=116 op=UNLOAD Sep 13 00:05:09.742000 audit: BPF prog-id=115 op=UNLOAD Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { perfmon } for pid=3198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit[3198]: AVC avc: denied { bpf } for pid=3198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:09.742000 audit: BPF prog-id=117 op=LOAD Sep 13 00:05:09.742000 audit[3198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3034 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:09.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532663466663939623362636631633731373364623136653661343434 Sep 13 00:05:09.779680 env[1805]: time="2025-09-13T00:05:09.779584280Z" level=info msg="StartContainer for \"52f4ff99b3bcf1c7173db16e6a444d6888fb155c541f449e4f53ace64a55514d\" returns successfully" Sep 13 00:05:10.050797 kubelet[2903]: I0913 00:05:10.050686 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-swbqs" podStartSLOduration=5.050612448 podStartE2EDuration="5.050612448s" podCreationTimestamp="2025-09-13 00:05:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:05:07.045701094 +0000 UTC m=+6.535880532" watchObservedRunningTime="2025-09-13 00:05:10.050612448 +0000 UTC m=+9.540791850" Sep 13 00:05:10.052196 kubelet[2903]: I0913 00:05:10.052076 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-5bdln" podStartSLOduration=1.536667922 podStartE2EDuration="4.052022484s" podCreationTimestamp="2025-09-13 00:05:06 +0000 UTC" firstStartedPulling="2025-09-13 00:05:07.087535832 +0000 UTC m=+6.577715234" lastFinishedPulling="2025-09-13 00:05:09.602890406 +0000 UTC m=+9.093069796" observedRunningTime="2025-09-13 00:05:10.05180526 +0000 UTC m=+9.541984662" watchObservedRunningTime="2025-09-13 00:05:10.052022484 +0000 UTC m=+9.542201886" Sep 13 00:05:18.899612 sudo[2089]: pam_unix(sudo:session): session closed for user root Sep 13 00:05:18.911599 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 13 00:05:18.911816 kernel: audit: type=1106 audit(1757721918.899:915): pid=2089 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:05:18.899000 audit[2089]: USER_END pid=2089 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:05:18.911000 audit[2089]: CRED_DISP pid=2089 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:05:18.924591 kernel: audit: type=1104 audit(1757721918.911:916): pid=2089 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:05:18.938869 sshd[2086]: pam_unix(sshd:session): session closed for user core Sep 13 00:05:18.941000 audit[2086]: USER_END pid=2086 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:05:18.957408 systemd[1]: sshd@6-172.31.27.41:22-139.178.89.65:33852.service: Deactivated successfully. Sep 13 00:05:18.958921 systemd[1]: session-7.scope: Deactivated successfully. Sep 13 00:05:18.959309 systemd[1]: session-7.scope: Consumed 11.701s CPU time. Sep 13 00:05:18.961741 systemd-logind[1798]: Session 7 logged out. Waiting for processes to exit. Sep 13 00:05:18.965740 kernel: audit: type=1106 audit(1757721918.941:917): pid=2086 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:05:18.941000 audit[2086]: CRED_DISP pid=2086 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:05:18.967207 systemd-logind[1798]: Removed session 7. Sep 13 00:05:18.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.41:22-139.178.89.65:33852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:05:18.986242 kernel: audit: type=1104 audit(1757721918.941:918): pid=2086 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:05:18.986425 kernel: audit: type=1131 audit(1757721918.957:919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.41:22-139.178.89.65:33852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:05:20.276000 audit[3276]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3276 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:20.276000 audit[3276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd75fd900 a2=0 a3=1 items=0 ppid=3004 pid=3276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:20.294533 kernel: audit: type=1325 audit(1757721920.276:920): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3276 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:20.294666 kernel: audit: type=1300 audit(1757721920.276:920): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd75fd900 a2=0 a3=1 items=0 ppid=3004 pid=3276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:20.276000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:20.306390 kernel: audit: type=1327 audit(1757721920.276:920): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:20.300000 audit[3276]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3276 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:20.314512 kernel: audit: type=1325 audit(1757721920.300:921): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3276 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:20.300000 audit[3276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd75fd900 a2=0 a3=1 items=0 ppid=3004 pid=3276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:20.329488 kernel: audit: type=1300 audit(1757721920.300:921): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd75fd900 a2=0 a3=1 items=0 ppid=3004 pid=3276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:20.300000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:20.343000 audit[3278]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:20.343000 audit[3278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffddd58d80 a2=0 a3=1 items=0 ppid=3004 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:20.343000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:20.354000 audit[3278]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:20.354000 audit[3278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffddd58d80 a2=0 a3=1 items=0 ppid=3004 pid=3278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:20.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:29.547800 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:05:29.547977 kernel: audit: type=1325 audit(1757721929.539:924): table=filter:93 family=2 entries=16 op=nft_register_rule pid=3281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.539000 audit[3281]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.539000 audit[3281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffec06d1a0 a2=0 a3=1 items=0 ppid=3004 pid=3281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:29.573711 kernel: audit: type=1300 audit(1757721929.539:924): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffec06d1a0 a2=0 a3=1 items=0 ppid=3004 pid=3281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:29.539000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:29.588707 kernel: audit: type=1327 audit(1757721929.539:924): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:29.653000 audit[3281]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.653000 audit[3281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffec06d1a0 a2=0 a3=1 items=0 ppid=3004 pid=3281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:29.671276 kernel: audit: type=1325 audit(1757721929.653:925): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.671421 kernel: audit: type=1300 audit(1757721929.653:925): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffec06d1a0 a2=0 a3=1 items=0 ppid=3004 pid=3281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:29.653000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:29.680067 kernel: audit: type=1327 audit(1757721929.653:925): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:29.718927 systemd[1]: Created slice kubepods-besteffort-pod057595a8_94e2_48b7_9b13_314f73254fd6.slice. Sep 13 00:05:29.769067 kubelet[2903]: I0913 00:05:29.768977 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zl2tg\" (UniqueName: \"kubernetes.io/projected/057595a8-94e2-48b7-9b13-314f73254fd6-kube-api-access-zl2tg\") pod \"calico-typha-574ff46d66-wqdql\" (UID: \"057595a8-94e2-48b7-9b13-314f73254fd6\") " pod="calico-system/calico-typha-574ff46d66-wqdql" Sep 13 00:05:29.769726 kubelet[2903]: I0913 00:05:29.769151 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/057595a8-94e2-48b7-9b13-314f73254fd6-typha-certs\") pod \"calico-typha-574ff46d66-wqdql\" (UID: \"057595a8-94e2-48b7-9b13-314f73254fd6\") " pod="calico-system/calico-typha-574ff46d66-wqdql" Sep 13 00:05:29.769726 kubelet[2903]: I0913 00:05:29.769243 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/057595a8-94e2-48b7-9b13-314f73254fd6-tigera-ca-bundle\") pod \"calico-typha-574ff46d66-wqdql\" (UID: \"057595a8-94e2-48b7-9b13-314f73254fd6\") " pod="calico-system/calico-typha-574ff46d66-wqdql" Sep 13 00:05:29.790000 audit[3283]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.798713 kernel: audit: type=1325 audit(1757721929.790:926): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.790000 audit[3283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc5a9b3a0 a2=0 a3=1 items=0 ppid=3004 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:29.790000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:29.817776 kernel: audit: type=1300 audit(1757721929.790:926): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc5a9b3a0 a2=0 a3=1 items=0 ppid=3004 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:29.815000 audit[3283]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.831270 kernel: audit: type=1327 audit(1757721929.790:926): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:29.831418 kernel: audit: type=1325 audit(1757721929.815:927): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:29.815000 audit[3283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc5a9b3a0 a2=0 a3=1 items=0 ppid=3004 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:29.815000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:30.025638 env[1805]: time="2025-09-13T00:05:30.025551108Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-574ff46d66-wqdql,Uid:057595a8-94e2-48b7-9b13-314f73254fd6,Namespace:calico-system,Attempt:0,}" Sep 13 00:05:30.070619 env[1805]: time="2025-09-13T00:05:30.067729279Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:30.070619 env[1805]: time="2025-09-13T00:05:30.067817671Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:30.071146 env[1805]: time="2025-09-13T00:05:30.067845343Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:30.071577 env[1805]: time="2025-09-13T00:05:30.071440854Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3c942aa7f809e60f3bbc0a88e09ab94280c46ed993e51884728446e5c6a39828 pid=3292 runtime=io.containerd.runc.v2 Sep 13 00:05:30.115837 systemd[1]: Started cri-containerd-3c942aa7f809e60f3bbc0a88e09ab94280c46ed993e51884728446e5c6a39828.scope. Sep 13 00:05:30.174904 systemd[1]: Created slice kubepods-besteffort-podc2bfb71a_6490_4d30_b03b_a7a16ea7ed6b.slice. Sep 13 00:05:30.187862 kubelet[2903]: I0913 00:05:30.187606 2903 status_manager.go:890] "Failed to get status for pod" podUID="c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b" pod="calico-system/calico-node-p8jfj" err="pods \"calico-node-p8jfj\" is forbidden: User \"system:node:ip-172-31-27-41\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-27-41' and this object" Sep 13 00:05:30.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.255000 audit: BPF prog-id=118 op=LOAD Sep 13 00:05:30.257000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.257000 audit[3304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3292 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363393432616137663830396536306633626263306138386530396162 Sep 13 00:05:30.257000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.257000 audit[3304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3292 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363393432616137663830396536306633626263306138386530396162 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.258000 audit: BPF prog-id=119 op=LOAD Sep 13 00:05:30.258000 audit[3304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3292 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363393432616137663830396536306633626263306138386530396162 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.261000 audit: BPF prog-id=120 op=LOAD Sep 13 00:05:30.261000 audit[3304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3292 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363393432616137663830396536306633626263306138386530396162 Sep 13 00:05:30.263000 audit: BPF prog-id=120 op=UNLOAD Sep 13 00:05:30.263000 audit: BPF prog-id=119 op=UNLOAD Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.263000 audit: BPF prog-id=121 op=LOAD Sep 13 00:05:30.263000 audit[3304]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3292 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363393432616137663830396536306633626263306138386530396162 Sep 13 00:05:30.271640 kubelet[2903]: I0913 00:05:30.271555 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-var-run-calico\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.271848 kubelet[2903]: I0913 00:05:30.271723 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-cni-net-dir\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.271926 kubelet[2903]: I0913 00:05:30.271856 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-flexvol-driver-host\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.271989 kubelet[2903]: I0913 00:05:30.271904 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-lib-modules\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.271989 kubelet[2903]: I0913 00:05:30.271971 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-cni-bin-dir\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.272122 kubelet[2903]: I0913 00:05:30.272037 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8rxm7\" (UniqueName: \"kubernetes.io/projected/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-kube-api-access-8rxm7\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.272122 kubelet[2903]: I0913 00:05:30.272084 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-cni-log-dir\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.272242 kubelet[2903]: I0913 00:05:30.272165 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-node-certs\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.272242 kubelet[2903]: I0913 00:05:30.272230 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-tigera-ca-bundle\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.272383 kubelet[2903]: I0913 00:05:30.272293 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-var-lib-calico\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.272383 kubelet[2903]: I0913 00:05:30.272336 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-policysync\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.272543 kubelet[2903]: I0913 00:05:30.272401 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b-xtables-lock\") pod \"calico-node-p8jfj\" (UID: \"c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b\") " pod="calico-system/calico-node-p8jfj" Sep 13 00:05:30.335184 env[1805]: time="2025-09-13T00:05:30.335020903Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-574ff46d66-wqdql,Uid:057595a8-94e2-48b7-9b13-314f73254fd6,Namespace:calico-system,Attempt:0,} returns sandbox id \"3c942aa7f809e60f3bbc0a88e09ab94280c46ed993e51884728446e5c6a39828\"" Sep 13 00:05:30.341152 env[1805]: time="2025-09-13T00:05:30.341079511Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 13 00:05:30.376683 kubelet[2903]: E0913 00:05:30.376595 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.376889 kubelet[2903]: W0913 00:05:30.376689 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.376889 kubelet[2903]: E0913 00:05:30.376739 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.377403 kubelet[2903]: E0913 00:05:30.377363 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.377530 kubelet[2903]: W0913 00:05:30.377397 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.377530 kubelet[2903]: E0913 00:05:30.377462 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.378466 kubelet[2903]: E0913 00:05:30.378424 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.378466 kubelet[2903]: W0913 00:05:30.378457 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.378777 kubelet[2903]: E0913 00:05:30.378744 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.378949 kubelet[2903]: E0913 00:05:30.378915 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.378949 kubelet[2903]: W0913 00:05:30.378942 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.379166 kubelet[2903]: E0913 00:05:30.379138 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.379328 kubelet[2903]: E0913 00:05:30.379294 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.379328 kubelet[2903]: W0913 00:05:30.379321 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.379531 kubelet[2903]: E0913 00:05:30.379505 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.382728 kubelet[2903]: E0913 00:05:30.379737 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.382728 kubelet[2903]: W0913 00:05:30.379766 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.382728 kubelet[2903]: E0913 00:05:30.381454 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.382728 kubelet[2903]: W0913 00:05:30.381484 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.382728 kubelet[2903]: E0913 00:05:30.381532 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.382728 kubelet[2903]: E0913 00:05:30.382209 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.382728 kubelet[2903]: W0913 00:05:30.382236 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.382728 kubelet[2903]: E0913 00:05:30.382265 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.382728 kubelet[2903]: E0913 00:05:30.382746 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.383367 kubelet[2903]: W0913 00:05:30.382772 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.383367 kubelet[2903]: E0913 00:05:30.382799 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.383367 kubelet[2903]: E0913 00:05:30.383209 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.383367 kubelet[2903]: W0913 00:05:30.383227 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.383367 kubelet[2903]: E0913 00:05:30.383247 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.383647 kubelet[2903]: E0913 00:05:30.383545 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.392712 kubelet[2903]: E0913 00:05:30.392080 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.392712 kubelet[2903]: W0913 00:05:30.392122 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.392712 kubelet[2903]: E0913 00:05:30.392156 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.401938 kubelet[2903]: E0913 00:05:30.401881 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:30.425798 kubelet[2903]: E0913 00:05:30.424958 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.425798 kubelet[2903]: W0913 00:05:30.425000 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.425798 kubelet[2903]: E0913 00:05:30.425035 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.426228 kubelet[2903]: E0913 00:05:30.426180 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.426228 kubelet[2903]: W0913 00:05:30.426219 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.426366 kubelet[2903]: E0913 00:05:30.426257 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.426740 kubelet[2903]: E0913 00:05:30.426700 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.426889 kubelet[2903]: W0913 00:05:30.426732 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.426889 kubelet[2903]: E0913 00:05:30.426801 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.427213 kubelet[2903]: E0913 00:05:30.427171 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.427213 kubelet[2903]: W0913 00:05:30.427205 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.427372 kubelet[2903]: E0913 00:05:30.427231 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.428713 kubelet[2903]: E0913 00:05:30.427637 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.428713 kubelet[2903]: W0913 00:05:30.427708 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.428713 kubelet[2903]: E0913 00:05:30.427738 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.428713 kubelet[2903]: E0913 00:05:30.428223 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.428713 kubelet[2903]: W0913 00:05:30.428247 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.428713 kubelet[2903]: E0913 00:05:30.428273 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.429169 kubelet[2903]: E0913 00:05:30.428736 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.429169 kubelet[2903]: W0913 00:05:30.428757 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.429169 kubelet[2903]: E0913 00:05:30.428783 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.429339 kubelet[2903]: E0913 00:05:30.429173 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.429339 kubelet[2903]: W0913 00:05:30.429205 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.429339 kubelet[2903]: E0913 00:05:30.429226 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.432032 kubelet[2903]: E0913 00:05:30.431974 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.432032 kubelet[2903]: W0913 00:05:30.432017 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.432032 kubelet[2903]: E0913 00:05:30.432051 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.432596 kubelet[2903]: E0913 00:05:30.432554 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.432596 kubelet[2903]: W0913 00:05:30.432586 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.432807 kubelet[2903]: E0913 00:05:30.432614 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.433039 kubelet[2903]: E0913 00:05:30.433001 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.433150 kubelet[2903]: W0913 00:05:30.433041 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.433150 kubelet[2903]: E0913 00:05:30.433065 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.433430 kubelet[2903]: E0913 00:05:30.433385 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.433430 kubelet[2903]: W0913 00:05:30.433424 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.433569 kubelet[2903]: E0913 00:05:30.433449 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.433825 kubelet[2903]: E0913 00:05:30.433787 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.433825 kubelet[2903]: W0913 00:05:30.433817 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.434080 kubelet[2903]: E0913 00:05:30.433842 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.434282 kubelet[2903]: E0913 00:05:30.434233 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.434282 kubelet[2903]: W0913 00:05:30.434263 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.434429 kubelet[2903]: E0913 00:05:30.434288 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.434626 kubelet[2903]: E0913 00:05:30.434587 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.434626 kubelet[2903]: W0913 00:05:30.434615 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.434811 kubelet[2903]: E0913 00:05:30.434637 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.435098 kubelet[2903]: E0913 00:05:30.435058 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.435098 kubelet[2903]: W0913 00:05:30.435090 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.435258 kubelet[2903]: E0913 00:05:30.435116 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.435515 kubelet[2903]: E0913 00:05:30.435476 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.435515 kubelet[2903]: W0913 00:05:30.435507 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.435732 kubelet[2903]: E0913 00:05:30.435532 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.435996 kubelet[2903]: E0913 00:05:30.435955 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.435996 kubelet[2903]: W0913 00:05:30.435987 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.436136 kubelet[2903]: E0913 00:05:30.436014 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.436440 kubelet[2903]: E0913 00:05:30.436385 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.436440 kubelet[2903]: W0913 00:05:30.436418 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.436605 kubelet[2903]: E0913 00:05:30.436462 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.437208 kubelet[2903]: E0913 00:05:30.436806 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.437208 kubelet[2903]: W0913 00:05:30.436835 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.437208 kubelet[2903]: E0913 00:05:30.436865 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.437208 kubelet[2903]: E0913 00:05:30.437203 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.437540 kubelet[2903]: W0913 00:05:30.437223 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.437540 kubelet[2903]: E0913 00:05:30.437258 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.475327 kubelet[2903]: E0913 00:05:30.475252 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.475327 kubelet[2903]: W0913 00:05:30.475302 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.475590 kubelet[2903]: E0913 00:05:30.475338 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.475590 kubelet[2903]: I0913 00:05:30.475395 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pngnm\" (UniqueName: \"kubernetes.io/projected/b0dcc1ee-de25-4df5-b74d-9c2aaea5120e-kube-api-access-pngnm\") pod \"csi-node-driver-7cg48\" (UID: \"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e\") " pod="calico-system/csi-node-driver-7cg48" Sep 13 00:05:30.475927 kubelet[2903]: E0913 00:05:30.475883 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.475927 kubelet[2903]: W0913 00:05:30.475918 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.476065 kubelet[2903]: E0913 00:05:30.475956 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.476065 kubelet[2903]: I0913 00:05:30.475991 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/b0dcc1ee-de25-4df5-b74d-9c2aaea5120e-kubelet-dir\") pod \"csi-node-driver-7cg48\" (UID: \"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e\") " pod="calico-system/csi-node-driver-7cg48" Sep 13 00:05:30.476496 kubelet[2903]: E0913 00:05:30.476448 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.476496 kubelet[2903]: W0913 00:05:30.476485 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.476816 kubelet[2903]: E0913 00:05:30.476527 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.476816 kubelet[2903]: I0913 00:05:30.476569 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/b0dcc1ee-de25-4df5-b74d-9c2aaea5120e-varrun\") pod \"csi-node-driver-7cg48\" (UID: \"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e\") " pod="calico-system/csi-node-driver-7cg48" Sep 13 00:05:30.477087 kubelet[2903]: E0913 00:05:30.477048 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.477087 kubelet[2903]: W0913 00:05:30.477079 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.477782 kubelet[2903]: E0913 00:05:30.477235 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.477782 kubelet[2903]: I0913 00:05:30.477285 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/b0dcc1ee-de25-4df5-b74d-9c2aaea5120e-registration-dir\") pod \"csi-node-driver-7cg48\" (UID: \"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e\") " pod="calico-system/csi-node-driver-7cg48" Sep 13 00:05:30.477782 kubelet[2903]: E0913 00:05:30.477630 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.477782 kubelet[2903]: W0913 00:05:30.477700 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.478147 kubelet[2903]: E0913 00:05:30.478109 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.478235 kubelet[2903]: W0913 00:05:30.478146 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.478327 kubelet[2903]: E0913 00:05:30.478110 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.478400 kubelet[2903]: E0913 00:05:30.478328 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.478697 kubelet[2903]: E0913 00:05:30.478593 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.478697 kubelet[2903]: W0913 00:05:30.478621 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.478833 kubelet[2903]: E0913 00:05:30.478800 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.480723 kubelet[2903]: E0913 00:05:30.479072 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.480723 kubelet[2903]: W0913 00:05:30.479101 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.480723 kubelet[2903]: E0913 00:05:30.479269 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.480723 kubelet[2903]: I0913 00:05:30.479313 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/b0dcc1ee-de25-4df5-b74d-9c2aaea5120e-socket-dir\") pod \"csi-node-driver-7cg48\" (UID: \"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e\") " pod="calico-system/csi-node-driver-7cg48" Sep 13 00:05:30.480723 kubelet[2903]: E0913 00:05:30.479640 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.480723 kubelet[2903]: W0913 00:05:30.479729 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.480723 kubelet[2903]: E0913 00:05:30.479902 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.481761 kubelet[2903]: E0913 00:05:30.481641 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.481761 kubelet[2903]: W0913 00:05:30.481754 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.481932 kubelet[2903]: E0913 00:05:30.481787 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.482353 kubelet[2903]: E0913 00:05:30.482310 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.482353 kubelet[2903]: W0913 00:05:30.482344 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.482550 kubelet[2903]: E0913 00:05:30.482379 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.482798 kubelet[2903]: E0913 00:05:30.482755 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.482798 kubelet[2903]: W0913 00:05:30.482784 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.482948 kubelet[2903]: E0913 00:05:30.482814 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.483249 kubelet[2903]: E0913 00:05:30.483207 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.483249 kubelet[2903]: W0913 00:05:30.483236 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.483453 kubelet[2903]: E0913 00:05:30.483259 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.483782 kubelet[2903]: E0913 00:05:30.483730 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.483782 kubelet[2903]: W0913 00:05:30.483762 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.483966 kubelet[2903]: E0913 00:05:30.483786 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.484267 kubelet[2903]: E0913 00:05:30.484222 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.484267 kubelet[2903]: W0913 00:05:30.484252 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.484418 kubelet[2903]: E0913 00:05:30.484277 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.485265 env[1805]: time="2025-09-13T00:05:30.485174952Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-p8jfj,Uid:c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b,Namespace:calico-system,Attempt:0,}" Sep 13 00:05:30.533253 env[1805]: time="2025-09-13T00:05:30.533105861Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:30.533253 env[1805]: time="2025-09-13T00:05:30.533190497Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:30.533600 env[1805]: time="2025-09-13T00:05:30.533218433Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:30.535479 env[1805]: time="2025-09-13T00:05:30.533998985Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb pid=3384 runtime=io.containerd.runc.v2 Sep 13 00:05:30.567339 systemd[1]: Started cri-containerd-0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb.scope. Sep 13 00:05:30.585822 kubelet[2903]: E0913 00:05:30.585601 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.585822 kubelet[2903]: W0913 00:05:30.585642 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.585822 kubelet[2903]: E0913 00:05:30.585753 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.588734 kubelet[2903]: E0913 00:05:30.586263 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.588734 kubelet[2903]: W0913 00:05:30.586295 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.588734 kubelet[2903]: E0913 00:05:30.586321 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.588734 kubelet[2903]: E0913 00:05:30.587328 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.588734 kubelet[2903]: W0913 00:05:30.587351 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.588734 kubelet[2903]: E0913 00:05:30.587376 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.588734 kubelet[2903]: E0913 00:05:30.588556 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.588734 kubelet[2903]: W0913 00:05:30.588577 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.588734 kubelet[2903]: E0913 00:05:30.588602 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.590729 kubelet[2903]: E0913 00:05:30.589325 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.590729 kubelet[2903]: W0913 00:05:30.589359 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.590729 kubelet[2903]: E0913 00:05:30.589417 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.590962 kubelet[2903]: E0913 00:05:30.590813 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.590962 kubelet[2903]: W0913 00:05:30.590835 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.591108 kubelet[2903]: E0913 00:05:30.590992 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.592714 kubelet[2903]: E0913 00:05:30.591454 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.592714 kubelet[2903]: W0913 00:05:30.591569 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.592714 kubelet[2903]: E0913 00:05:30.591888 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.593726 kubelet[2903]: E0913 00:05:30.593190 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.593726 kubelet[2903]: W0913 00:05:30.593222 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.593726 kubelet[2903]: E0913 00:05:30.593387 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.593984 kubelet[2903]: E0913 00:05:30.593930 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.593984 kubelet[2903]: W0913 00:05:30.593951 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.594737 kubelet[2903]: E0913 00:05:30.594101 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.594737 kubelet[2903]: E0913 00:05:30.594519 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.594737 kubelet[2903]: W0913 00:05:30.594537 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.594737 kubelet[2903]: E0913 00:05:30.594692 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.595762 kubelet[2903]: E0913 00:05:30.595035 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.595762 kubelet[2903]: W0913 00:05:30.595065 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.595762 kubelet[2903]: E0913 00:05:30.595237 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.595762 kubelet[2903]: E0913 00:05:30.595556 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.595762 kubelet[2903]: W0913 00:05:30.595617 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.595762 kubelet[2903]: E0913 00:05:30.595756 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.596216 kubelet[2903]: E0913 00:05:30.596167 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.596216 kubelet[2903]: W0913 00:05:30.596187 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.596372 kubelet[2903]: E0913 00:05:30.596323 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.597721 kubelet[2903]: E0913 00:05:30.596631 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.597721 kubelet[2903]: W0913 00:05:30.596713 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.597721 kubelet[2903]: E0913 00:05:30.596900 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.597721 kubelet[2903]: E0913 00:05:30.597193 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.597721 kubelet[2903]: W0913 00:05:30.597212 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.597721 kubelet[2903]: E0913 00:05:30.597376 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.597721 kubelet[2903]: E0913 00:05:30.597637 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.597721 kubelet[2903]: W0913 00:05:30.597690 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.598274 kubelet[2903]: E0913 00:05:30.597887 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.599730 kubelet[2903]: E0913 00:05:30.599267 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.599730 kubelet[2903]: W0913 00:05:30.599303 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.599730 kubelet[2903]: E0913 00:05:30.599500 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.600033 kubelet[2903]: E0913 00:05:30.599846 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.600033 kubelet[2903]: W0913 00:05:30.599885 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.600170 kubelet[2903]: E0913 00:05:30.600047 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.601732 kubelet[2903]: E0913 00:05:30.600309 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.601732 kubelet[2903]: W0913 00:05:30.600336 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.601732 kubelet[2903]: E0913 00:05:30.600500 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.601732 kubelet[2903]: E0913 00:05:30.600826 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.601732 kubelet[2903]: W0913 00:05:30.600845 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.601732 kubelet[2903]: E0913 00:05:30.601042 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.601732 kubelet[2903]: E0913 00:05:30.601492 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.601732 kubelet[2903]: W0913 00:05:30.601516 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.602270 kubelet[2903]: E0913 00:05:30.601758 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.602335 kubelet[2903]: E0913 00:05:30.602302 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.602335 kubelet[2903]: W0913 00:05:30.602323 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.602569 kubelet[2903]: E0913 00:05:30.602504 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.603754 kubelet[2903]: E0913 00:05:30.602774 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.603754 kubelet[2903]: W0913 00:05:30.602805 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.603754 kubelet[2903]: E0913 00:05:30.602994 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.603754 kubelet[2903]: E0913 00:05:30.603282 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.603754 kubelet[2903]: W0913 00:05:30.603305 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.603754 kubelet[2903]: E0913 00:05:30.603586 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.604260 kubelet[2903]: E0913 00:05:30.603986 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.604260 kubelet[2903]: W0913 00:05:30.604007 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.604260 kubelet[2903]: E0913 00:05:30.604051 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.656856 kubelet[2903]: E0913 00:05:30.656800 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:30.656856 kubelet[2903]: W0913 00:05:30.656849 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:30.657123 kubelet[2903]: E0913 00:05:30.656886 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.764000 audit: BPF prog-id=122 op=LOAD Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3384 pid=3393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373762646232343534323566326133346333613433366638373332 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3384 pid=3393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373762646232343534323566326133346333613433366638373332 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit: BPF prog-id=123 op=LOAD Sep 13 00:05:30.766000 audit[3393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3384 pid=3393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373762646232343534323566326133346333613433366638373332 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.766000 audit: BPF prog-id=124 op=LOAD Sep 13 00:05:30.766000 audit[3393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3384 pid=3393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373762646232343534323566326133346333613433366638373332 Sep 13 00:05:30.766000 audit: BPF prog-id=124 op=UNLOAD Sep 13 00:05:30.767000 audit: BPF prog-id=123 op=UNLOAD Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { perfmon } for pid=3393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit[3393]: AVC avc: denied { bpf } for pid=3393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:30.767000 audit: BPF prog-id=125 op=LOAD Sep 13 00:05:30.767000 audit[3393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3384 pid=3393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034373762646232343534323566326133346333613433366638373332 Sep 13 00:05:30.818599 env[1805]: time="2025-09-13T00:05:30.818424964Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-p8jfj,Uid:c2bfb71a-6490-4d30-b03b-a7a16ea7ed6b,Namespace:calico-system,Attempt:0,} returns sandbox id \"0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb\"" Sep 13 00:05:30.856000 audit[3445]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=3445 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:30.856000 audit[3445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc0c58770 a2=0 a3=1 items=0 ppid=3004 pid=3445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:30.866000 audit[3445]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3445 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:30.866000 audit[3445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc0c58770 a2=0 a3=1 items=0 ppid=3004 pid=3445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:30.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:30.889972 systemd[1]: run-containerd-runc-k8s.io-3c942aa7f809e60f3bbc0a88e09ab94280c46ed993e51884728446e5c6a39828-runc.Na0j1x.mount: Deactivated successfully. Sep 13 00:05:31.877326 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount716084301.mount: Deactivated successfully. Sep 13 00:05:31.910306 kubelet[2903]: E0913 00:05:31.909141 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:31.934000 audit[3449]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:31.934000 audit[3449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd475c350 a2=0 a3=1 items=0 ppid=3004 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:31.934000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:31.941000 audit[3449]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:31.941000 audit[3449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd475c350 a2=0 a3=1 items=0 ppid=3004 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:31.941000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:33.144489 env[1805]: time="2025-09-13T00:05:33.144425404Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:33.146522 env[1805]: time="2025-09-13T00:05:33.146473804Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:33.148620 env[1805]: time="2025-09-13T00:05:33.148573204Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:33.151028 env[1805]: time="2025-09-13T00:05:33.150980403Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:33.151988 env[1805]: time="2025-09-13T00:05:33.151922139Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 13 00:05:33.155738 env[1805]: time="2025-09-13T00:05:33.154501767Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 13 00:05:33.185446 env[1805]: time="2025-09-13T00:05:33.185363531Z" level=info msg="CreateContainer within sandbox \"3c942aa7f809e60f3bbc0a88e09ab94280c46ed993e51884728446e5c6a39828\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 13 00:05:33.210366 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2761656266.mount: Deactivated successfully. Sep 13 00:05:33.215861 env[1805]: time="2025-09-13T00:05:33.215800423Z" level=info msg="CreateContainer within sandbox \"3c942aa7f809e60f3bbc0a88e09ab94280c46ed993e51884728446e5c6a39828\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"25ef880735ac93d323644e206eb8f3be0a242613cca0bc3ab6ea6de5f82013ff\"" Sep 13 00:05:33.219069 env[1805]: time="2025-09-13T00:05:33.218929003Z" level=info msg="StartContainer for \"25ef880735ac93d323644e206eb8f3be0a242613cca0bc3ab6ea6de5f82013ff\"" Sep 13 00:05:33.259937 systemd[1]: Started cri-containerd-25ef880735ac93d323644e206eb8f3be0a242613cca0bc3ab6ea6de5f82013ff.scope. Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.305000 audit: BPF prog-id=126 op=LOAD Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3292 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:33.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235656638383037333561633933643332333634346532303665623866 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3292 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:33.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235656638383037333561633933643332333634346532303665623866 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.306000 audit: BPF prog-id=127 op=LOAD Sep 13 00:05:33.306000 audit[3460]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3292 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:33.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235656638383037333561633933643332333634346532303665623866 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit: BPF prog-id=128 op=LOAD Sep 13 00:05:33.307000 audit[3460]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3292 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:33.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235656638383037333561633933643332333634346532303665623866 Sep 13 00:05:33.307000 audit: BPF prog-id=128 op=UNLOAD Sep 13 00:05:33.307000 audit: BPF prog-id=127 op=UNLOAD Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:33.307000 audit: BPF prog-id=129 op=LOAD Sep 13 00:05:33.307000 audit[3460]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3292 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:33.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235656638383037333561633933643332333634346532303665623866 Sep 13 00:05:33.351424 env[1805]: time="2025-09-13T00:05:33.349139379Z" level=info msg="StartContainer for \"25ef880735ac93d323644e206eb8f3be0a242613cca0bc3ab6ea6de5f82013ff\" returns successfully" Sep 13 00:05:33.908615 kubelet[2903]: E0913 00:05:33.908537 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:34.127392 kubelet[2903]: I0913 00:05:34.126261 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-574ff46d66-wqdql" podStartSLOduration=2.312658129 podStartE2EDuration="5.126239637s" podCreationTimestamp="2025-09-13 00:05:29 +0000 UTC" firstStartedPulling="2025-09-13 00:05:30.340051999 +0000 UTC m=+29.830231401" lastFinishedPulling="2025-09-13 00:05:33.153633507 +0000 UTC m=+32.643812909" observedRunningTime="2025-09-13 00:05:34.125880345 +0000 UTC m=+33.616059831" watchObservedRunningTime="2025-09-13 00:05:34.126239637 +0000 UTC m=+33.616419039" Sep 13 00:05:34.167506 kubelet[2903]: E0913 00:05:34.167375 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.167506 kubelet[2903]: W0913 00:05:34.167416 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.167506 kubelet[2903]: E0913 00:05:34.167451 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.168270 kubelet[2903]: E0913 00:05:34.168235 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.168420 kubelet[2903]: W0913 00:05:34.168269 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.168420 kubelet[2903]: E0913 00:05:34.168350 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.168823 kubelet[2903]: E0913 00:05:34.168794 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.168903 kubelet[2903]: W0913 00:05:34.168822 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.168903 kubelet[2903]: E0913 00:05:34.168845 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.169224 kubelet[2903]: E0913 00:05:34.169197 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.169304 kubelet[2903]: W0913 00:05:34.169223 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.169304 kubelet[2903]: E0913 00:05:34.169245 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.169621 kubelet[2903]: E0913 00:05:34.169595 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.169809 kubelet[2903]: W0913 00:05:34.169620 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.169809 kubelet[2903]: E0913 00:05:34.169642 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.170088 kubelet[2903]: E0913 00:05:34.170061 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.170159 kubelet[2903]: W0913 00:05:34.170088 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.170159 kubelet[2903]: E0913 00:05:34.170111 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.170474 kubelet[2903]: E0913 00:05:34.170448 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.170566 kubelet[2903]: W0913 00:05:34.170474 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.170566 kubelet[2903]: E0913 00:05:34.170495 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.171028 kubelet[2903]: E0913 00:05:34.170899 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.171028 kubelet[2903]: W0913 00:05:34.170928 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.171028 kubelet[2903]: E0913 00:05:34.170952 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.171360 kubelet[2903]: E0913 00:05:34.171331 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.171476 kubelet[2903]: W0913 00:05:34.171359 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.171476 kubelet[2903]: E0913 00:05:34.171382 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.171841 kubelet[2903]: E0913 00:05:34.171798 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.171949 kubelet[2903]: W0913 00:05:34.171840 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.171949 kubelet[2903]: E0913 00:05:34.171864 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.172433 kubelet[2903]: E0913 00:05:34.172206 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.172433 kubelet[2903]: W0913 00:05:34.172235 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.172433 kubelet[2903]: E0913 00:05:34.172257 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.172750 kubelet[2903]: E0913 00:05:34.172632 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.172821 kubelet[2903]: W0913 00:05:34.172750 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.172821 kubelet[2903]: E0913 00:05:34.172774 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.173162 kubelet[2903]: E0913 00:05:34.173135 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.173235 kubelet[2903]: W0913 00:05:34.173162 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.173235 kubelet[2903]: E0913 00:05:34.173183 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.173544 kubelet[2903]: E0913 00:05:34.173518 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.173616 kubelet[2903]: W0913 00:05:34.173544 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.173616 kubelet[2903]: E0913 00:05:34.173566 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.173980 kubelet[2903]: E0913 00:05:34.173954 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.174051 kubelet[2903]: W0913 00:05:34.173980 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.174051 kubelet[2903]: E0913 00:05:34.174002 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.227037 kubelet[2903]: E0913 00:05:34.226744 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.227037 kubelet[2903]: W0913 00:05:34.226782 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.227037 kubelet[2903]: E0913 00:05:34.226813 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.227716 kubelet[2903]: E0913 00:05:34.227486 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.227716 kubelet[2903]: W0913 00:05:34.227513 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.227716 kubelet[2903]: E0913 00:05:34.227553 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.228153 kubelet[2903]: E0913 00:05:34.228105 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.228153 kubelet[2903]: W0913 00:05:34.228143 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.228310 kubelet[2903]: E0913 00:05:34.228188 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.228832 kubelet[2903]: E0913 00:05:34.228771 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.229010 kubelet[2903]: W0913 00:05:34.228805 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.229337 kubelet[2903]: E0913 00:05:34.229005 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.229521 kubelet[2903]: E0913 00:05:34.229493 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.229736 kubelet[2903]: W0913 00:05:34.229522 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.229736 kubelet[2903]: E0913 00:05:34.229561 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.231117 kubelet[2903]: E0913 00:05:34.230790 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.231117 kubelet[2903]: W0913 00:05:34.230819 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.231776 kubelet[2903]: E0913 00:05:34.231408 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.231776 kubelet[2903]: W0913 00:05:34.231434 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.232408 kubelet[2903]: E0913 00:05:34.232007 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.232408 kubelet[2903]: W0913 00:05:34.232031 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.232408 kubelet[2903]: E0913 00:05:34.232058 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.233370 kubelet[2903]: E0913 00:05:34.232969 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.233370 kubelet[2903]: W0913 00:05:34.232998 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.233370 kubelet[2903]: E0913 00:05:34.233027 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.233930 kubelet[2903]: E0913 00:05:34.233647 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.235004 kubelet[2903]: E0913 00:05:34.234101 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.235004 kubelet[2903]: W0913 00:05:34.234137 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.235004 kubelet[2903]: E0913 00:05:34.234164 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.235004 kubelet[2903]: E0913 00:05:34.234449 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.235004 kubelet[2903]: E0913 00:05:34.234504 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.235004 kubelet[2903]: W0913 00:05:34.234627 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.235004 kubelet[2903]: E0913 00:05:34.234689 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.235865 kubelet[2903]: E0913 00:05:34.235827 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.235989 kubelet[2903]: W0913 00:05:34.235864 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.236079 kubelet[2903]: E0913 00:05:34.236033 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.236961 kubelet[2903]: E0913 00:05:34.236925 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.236961 kubelet[2903]: W0913 00:05:34.236958 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.237296 kubelet[2903]: E0913 00:05:34.237173 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.237535 kubelet[2903]: E0913 00:05:34.237503 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.237608 kubelet[2903]: W0913 00:05:34.237534 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.237798 kubelet[2903]: E0913 00:05:34.237767 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.238014 kubelet[2903]: E0913 00:05:34.237989 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.238084 kubelet[2903]: W0913 00:05:34.238014 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.238084 kubelet[2903]: E0913 00:05:34.238046 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.238387 kubelet[2903]: E0913 00:05:34.238360 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.238459 kubelet[2903]: W0913 00:05:34.238387 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.238459 kubelet[2903]: E0913 00:05:34.238409 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.238817 kubelet[2903]: E0913 00:05:34.238788 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.238987 kubelet[2903]: W0913 00:05:34.238817 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.238987 kubelet[2903]: E0913 00:05:34.238841 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.239899 kubelet[2903]: E0913 00:05:34.239864 2903 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:05:34.240011 kubelet[2903]: W0913 00:05:34.239897 2903 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:05:34.240011 kubelet[2903]: E0913 00:05:34.239927 2903 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:05:34.454875 env[1805]: time="2025-09-13T00:05:34.454735217Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:34.463610 env[1805]: time="2025-09-13T00:05:34.463472872Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:34.467263 env[1805]: time="2025-09-13T00:05:34.467210895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:34.470576 env[1805]: time="2025-09-13T00:05:34.470522055Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:34.471577 env[1805]: time="2025-09-13T00:05:34.471525987Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 13 00:05:34.476548 env[1805]: time="2025-09-13T00:05:34.476380514Z" level=info msg="CreateContainer within sandbox \"0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 13 00:05:34.505637 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount568148994.mount: Deactivated successfully. Sep 13 00:05:34.517032 env[1805]: time="2025-09-13T00:05:34.516968613Z" level=info msg="CreateContainer within sandbox \"0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c\"" Sep 13 00:05:34.520856 env[1805]: time="2025-09-13T00:05:34.520778840Z" level=info msg="StartContainer for \"a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c\"" Sep 13 00:05:34.568589 systemd[1]: Started cri-containerd-a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c.scope. Sep 13 00:05:34.614786 kernel: kauditd_printk_skb: 185 callbacks suppressed Sep 13 00:05:34.614959 kernel: audit: type=1400 audit(1757721934.608:986): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3384 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:34.631097 kernel: audit: type=1300 audit(1757721934.608:986): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3384 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:34.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133646631613838616236303332666161663930633031623731343732 Sep 13 00:05:34.648444 kernel: audit: type=1327 audit(1757721934.608:986): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133646631613838616236303332666161663930633031623731343732 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.656129 kernel: audit: type=1400 audit(1757721934.608:987): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.664415 kernel: audit: type=1400 audit(1757721934.608:987): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.673339 kernel: audit: type=1400 audit(1757721934.608:987): avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.679122 env[1805]: time="2025-09-13T00:05:34.679061329Z" level=info msg="StartContainer for \"a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c\" returns successfully" Sep 13 00:05:34.681857 kernel: audit: type=1400 audit(1757721934.608:987): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.691698 kernel: audit: type=1400 audit(1757721934.608:987): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.703170 kernel: audit: type=1400 audit(1757721934.608:987): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.703331 kernel: audit: type=1400 audit(1757721934.608:987): avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit: BPF prog-id=130 op=LOAD Sep 13 00:05:34.608000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3384 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:34.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133646631613838616236303332666161663930633031623731343732 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit: BPF prog-id=131 op=LOAD Sep 13 00:05:34.608000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3384 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:34.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133646631613838616236303332666161663930633031623731343732 Sep 13 00:05:34.608000 audit: BPF prog-id=131 op=UNLOAD Sep 13 00:05:34.608000 audit: BPF prog-id=130 op=UNLOAD Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:34.608000 audit: BPF prog-id=132 op=LOAD Sep 13 00:05:34.608000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3384 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:34.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133646631613838616236303332666161663930633031623731343732 Sep 13 00:05:34.723604 systemd[1]: cri-containerd-a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c.scope: Deactivated successfully. Sep 13 00:05:34.726000 audit: BPF prog-id=132 op=UNLOAD Sep 13 00:05:35.108638 kubelet[2903]: I0913 00:05:35.107718 2903 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:05:35.127394 env[1805]: time="2025-09-13T00:05:35.125780618Z" level=info msg="shim disconnected" id=a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c Sep 13 00:05:35.127394 env[1805]: time="2025-09-13T00:05:35.125844806Z" level=warning msg="cleaning up after shim disconnected" id=a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c namespace=k8s.io Sep 13 00:05:35.127394 env[1805]: time="2025-09-13T00:05:35.125866526Z" level=info msg="cleaning up dead shim" Sep 13 00:05:35.153825 env[1805]: time="2025-09-13T00:05:35.153765550Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:05:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3577 runtime=io.containerd.runc.v2\n" Sep 13 00:05:35.170537 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a3df1a88ab6032faaf90c01b71472a43284084391015719e26e084912a50295c-rootfs.mount: Deactivated successfully. Sep 13 00:05:35.909300 kubelet[2903]: E0913 00:05:35.908800 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:36.116860 env[1805]: time="2025-09-13T00:05:36.116717193Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 13 00:05:37.909269 kubelet[2903]: E0913 00:05:37.909148 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:39.908489 kubelet[2903]: E0913 00:05:39.908418 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:39.932021 env[1805]: time="2025-09-13T00:05:39.931924335Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:39.935080 env[1805]: time="2025-09-13T00:05:39.935010867Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:39.938075 env[1805]: time="2025-09-13T00:05:39.938009990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:39.941037 env[1805]: time="2025-09-13T00:05:39.940983854Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:39.942694 env[1805]: time="2025-09-13T00:05:39.942611006Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 13 00:05:39.949492 env[1805]: time="2025-09-13T00:05:39.949408033Z" level=info msg="CreateContainer within sandbox \"0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 13 00:05:39.979988 env[1805]: time="2025-09-13T00:05:39.979872525Z" level=info msg="CreateContainer within sandbox \"0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc\"" Sep 13 00:05:39.981402 env[1805]: time="2025-09-13T00:05:39.981312789Z" level=info msg="StartContainer for \"be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc\"" Sep 13 00:05:40.049773 systemd[1]: run-containerd-runc-k8s.io-be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc-runc.cWqOGh.mount: Deactivated successfully. Sep 13 00:05:40.054956 systemd[1]: Started cri-containerd-be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc.scope. Sep 13 00:05:40.100000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103252 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 13 00:05:40.103345 kernel: audit: type=1400 audit(1757721940.100:993): avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.100000 audit[3602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3384 pid=3602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:40.122212 kernel: audit: type=1300 audit(1757721940.100:993): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3384 pid=3602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:40.122335 kernel: audit: type=1327 audit(1757721940.100:993): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343938306538666631316336326163393365626439336361616261 Sep 13 00:05:40.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343938306538666631316336326163393365626439336361616261 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.141306 kernel: audit: type=1400 audit(1757721940.103:994): avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.149142 kernel: audit: type=1400 audit(1757721940.103:994): avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.162487 kernel: audit: type=1400 audit(1757721940.103:994): avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.177531 kernel: audit: type=1400 audit(1757721940.103:994): avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.177724 kernel: audit: type=1400 audit(1757721940.103:994): avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.183909 kernel: audit: type=1400 audit(1757721940.103:994): avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.190594 env[1805]: time="2025-09-13T00:05:40.190402133Z" level=info msg="StartContainer for \"be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc\" returns successfully" Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.198209 kernel: audit: type=1400 audit(1757721940.103:994): avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.103000 audit: BPF prog-id=133 op=LOAD Sep 13 00:05:40.103000 audit[3602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3384 pid=3602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:40.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343938306538666631316336326163393365626439336361616261 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.110000 audit: BPF prog-id=134 op=LOAD Sep 13 00:05:40.110000 audit[3602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3384 pid=3602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:40.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343938306538666631316336326163393365626439336361616261 Sep 13 00:05:40.121000 audit: BPF prog-id=134 op=UNLOAD Sep 13 00:05:40.121000 audit: BPF prog-id=133 op=UNLOAD Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { perfmon } for pid=3602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit[3602]: AVC avc: denied { bpf } for pid=3602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:40.122000 audit: BPF prog-id=135 op=LOAD Sep 13 00:05:40.122000 audit[3602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3384 pid=3602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:40.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343938306538666631316336326163393365626439336361616261 Sep 13 00:05:41.450761 env[1805]: time="2025-09-13T00:05:41.450639181Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 00:05:41.456316 systemd[1]: cri-containerd-be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc.scope: Deactivated successfully. Sep 13 00:05:41.456885 systemd[1]: cri-containerd-be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc.scope: Consumed 1.131s CPU time. Sep 13 00:05:41.460000 audit: BPF prog-id=135 op=UNLOAD Sep 13 00:05:41.494733 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc-rootfs.mount: Deactivated successfully. Sep 13 00:05:41.529144 kubelet[2903]: I0913 00:05:41.529085 2903 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 13 00:05:41.605635 systemd[1]: Created slice kubepods-besteffort-pod0b3cf741_8e19_44f7_af0c_68f6a359a798.slice. Sep 13 00:05:41.641939 systemd[1]: Created slice kubepods-burstable-poda1522724_283e_46a0_a49f_d4dd6e34c25d.slice. Sep 13 00:05:41.664470 systemd[1]: Created slice kubepods-besteffort-pod400e4927_6c99_4fc7_ad3d_99920d2dfd9d.slice. Sep 13 00:05:41.682921 kubelet[2903]: W0913 00:05:41.682693 2903 reflector.go:569] object-"calico-system"/"goldmane-key-pair": failed to list *v1.Secret: secrets "goldmane-key-pair" is forbidden: User "system:node:ip-172-31-27-41" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-27-41' and this object Sep 13 00:05:41.682921 kubelet[2903]: E0913 00:05:41.682762 2903 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"goldmane-key-pair\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"goldmane-key-pair\" is forbidden: User \"system:node:ip-172-31-27-41\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-27-41' and this object" logger="UnhandledError" Sep 13 00:05:41.686620 systemd[1]: Created slice kubepods-besteffort-podb1e4c2ec_3183_488e_95d1_65b4d985c105.slice. Sep 13 00:05:41.690351 kubelet[2903]: I0913 00:05:41.690295 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/037d762d-2612-437e-bef1-8e3b01281517-tigera-ca-bundle\") pod \"calico-kube-controllers-79454d85df-z9hzc\" (UID: \"037d762d-2612-437e-bef1-8e3b01281517\") " pod="calico-system/calico-kube-controllers-79454d85df-z9hzc" Sep 13 00:05:41.690839 kubelet[2903]: I0913 00:05:41.690793 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2sg6j\" (UniqueName: \"kubernetes.io/projected/00fac785-3036-476f-9a65-bb93b0ebd4d3-kube-api-access-2sg6j\") pod \"coredns-668d6bf9bc-7h5lc\" (UID: \"00fac785-3036-476f-9a65-bb93b0ebd4d3\") " pod="kube-system/coredns-668d6bf9bc-7h5lc" Sep 13 00:05:41.691455 kubelet[2903]: I0913 00:05:41.691417 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r94jw\" (UniqueName: \"kubernetes.io/projected/400e4927-6c99-4fc7-ad3d-99920d2dfd9d-kube-api-access-r94jw\") pod \"calico-apiserver-58c7664cd6-dq4cs\" (UID: \"400e4927-6c99-4fc7-ad3d-99920d2dfd9d\") " pod="calico-apiserver/calico-apiserver-58c7664cd6-dq4cs" Sep 13 00:05:41.691764 kubelet[2903]: I0913 00:05:41.691734 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-backend-key-pair\") pod \"whisker-dcc647db9-7ljwb\" (UID: \"0b3cf741-8e19-44f7-af0c-68f6a359a798\") " pod="calico-system/whisker-dcc647db9-7ljwb" Sep 13 00:05:41.692029 kubelet[2903]: I0913 00:05:41.691962 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a6ba0554-7bef-42d6-9956-756ffc73e462-calico-apiserver-certs\") pod \"calico-apiserver-58c7664cd6-mxhm5\" (UID: \"a6ba0554-7bef-42d6-9956-756ffc73e462\") " pod="calico-apiserver/calico-apiserver-58c7664cd6-mxhm5" Sep 13 00:05:41.696166 kubelet[2903]: I0913 00:05:41.693804 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/b1e4c2ec-3183-488e-95d1-65b4d985c105-goldmane-key-pair\") pod \"goldmane-54d579b49d-f9knf\" (UID: \"b1e4c2ec-3183-488e-95d1-65b4d985c105\") " pod="calico-system/goldmane-54d579b49d-f9knf" Sep 13 00:05:41.696166 kubelet[2903]: I0913 00:05:41.693892 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tk94r\" (UniqueName: \"kubernetes.io/projected/a6ba0554-7bef-42d6-9956-756ffc73e462-kube-api-access-tk94r\") pod \"calico-apiserver-58c7664cd6-mxhm5\" (UID: \"a6ba0554-7bef-42d6-9956-756ffc73e462\") " pod="calico-apiserver/calico-apiserver-58c7664cd6-mxhm5" Sep 13 00:05:41.696166 kubelet[2903]: I0913 00:05:41.693939 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s9pdc\" (UniqueName: \"kubernetes.io/projected/037d762d-2612-437e-bef1-8e3b01281517-kube-api-access-s9pdc\") pod \"calico-kube-controllers-79454d85df-z9hzc\" (UID: \"037d762d-2612-437e-bef1-8e3b01281517\") " pod="calico-system/calico-kube-controllers-79454d85df-z9hzc" Sep 13 00:05:41.696166 kubelet[2903]: I0913 00:05:41.693984 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/00fac785-3036-476f-9a65-bb93b0ebd4d3-config-volume\") pod \"coredns-668d6bf9bc-7h5lc\" (UID: \"00fac785-3036-476f-9a65-bb93b0ebd4d3\") " pod="kube-system/coredns-668d6bf9bc-7h5lc" Sep 13 00:05:41.696166 kubelet[2903]: I0913 00:05:41.694047 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/400e4927-6c99-4fc7-ad3d-99920d2dfd9d-calico-apiserver-certs\") pod \"calico-apiserver-58c7664cd6-dq4cs\" (UID: \"400e4927-6c99-4fc7-ad3d-99920d2dfd9d\") " pod="calico-apiserver/calico-apiserver-58c7664cd6-dq4cs" Sep 13 00:05:41.696713 kubelet[2903]: I0913 00:05:41.694087 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2nltg\" (UniqueName: \"kubernetes.io/projected/0b3cf741-8e19-44f7-af0c-68f6a359a798-kube-api-access-2nltg\") pod \"whisker-dcc647db9-7ljwb\" (UID: \"0b3cf741-8e19-44f7-af0c-68f6a359a798\") " pod="calico-system/whisker-dcc647db9-7ljwb" Sep 13 00:05:41.696713 kubelet[2903]: I0913 00:05:41.694126 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zlxk4\" (UniqueName: \"kubernetes.io/projected/b1e4c2ec-3183-488e-95d1-65b4d985c105-kube-api-access-zlxk4\") pod \"goldmane-54d579b49d-f9knf\" (UID: \"b1e4c2ec-3183-488e-95d1-65b4d985c105\") " pod="calico-system/goldmane-54d579b49d-f9knf" Sep 13 00:05:41.696713 kubelet[2903]: I0913 00:05:41.694169 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s24qw\" (UniqueName: \"kubernetes.io/projected/a1522724-283e-46a0-a49f-d4dd6e34c25d-kube-api-access-s24qw\") pod \"coredns-668d6bf9bc-ldbcb\" (UID: \"a1522724-283e-46a0-a49f-d4dd6e34c25d\") " pod="kube-system/coredns-668d6bf9bc-ldbcb" Sep 13 00:05:41.696713 kubelet[2903]: I0913 00:05:41.694213 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a1522724-283e-46a0-a49f-d4dd6e34c25d-config-volume\") pod \"coredns-668d6bf9bc-ldbcb\" (UID: \"a1522724-283e-46a0-a49f-d4dd6e34c25d\") " pod="kube-system/coredns-668d6bf9bc-ldbcb" Sep 13 00:05:41.696713 kubelet[2903]: I0913 00:05:41.694249 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b1e4c2ec-3183-488e-95d1-65b4d985c105-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-f9knf\" (UID: \"b1e4c2ec-3183-488e-95d1-65b4d985c105\") " pod="calico-system/goldmane-54d579b49d-f9knf" Sep 13 00:05:41.697049 kubelet[2903]: I0913 00:05:41.694293 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-ca-bundle\") pod \"whisker-dcc647db9-7ljwb\" (UID: \"0b3cf741-8e19-44f7-af0c-68f6a359a798\") " pod="calico-system/whisker-dcc647db9-7ljwb" Sep 13 00:05:41.697049 kubelet[2903]: I0913 00:05:41.694348 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/b1e4c2ec-3183-488e-95d1-65b4d985c105-config\") pod \"goldmane-54d579b49d-f9knf\" (UID: \"b1e4c2ec-3183-488e-95d1-65b4d985c105\") " pod="calico-system/goldmane-54d579b49d-f9knf" Sep 13 00:05:41.704872 systemd[1]: Created slice kubepods-besteffort-pod037d762d_2612_437e_bef1_8e3b01281517.slice. Sep 13 00:05:41.726225 systemd[1]: Created slice kubepods-besteffort-poda6ba0554_7bef_42d6_9956_756ffc73e462.slice. Sep 13 00:05:41.743279 systemd[1]: Created slice kubepods-burstable-pod00fac785_3036_476f_9a65_bb93b0ebd4d3.slice. Sep 13 00:05:41.889518 env[1805]: time="2025-09-13T00:05:41.889200095Z" level=info msg="shim disconnected" id=be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc Sep 13 00:05:41.889518 env[1805]: time="2025-09-13T00:05:41.889265891Z" level=warning msg="cleaning up after shim disconnected" id=be4980e8ff11c62ac93ebd93caaba9e1e01c07cbb0ace6d8f111ffb0503c3dcc namespace=k8s.io Sep 13 00:05:41.889518 env[1805]: time="2025-09-13T00:05:41.889287059Z" level=info msg="cleaning up dead shim" Sep 13 00:05:41.924745 env[1805]: time="2025-09-13T00:05:41.923844212Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:05:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3651 runtime=io.containerd.runc.v2\n" Sep 13 00:05:41.934070 systemd[1]: Created slice kubepods-besteffort-podb0dcc1ee_de25_4df5_b74d_9c2aaea5120e.slice. Sep 13 00:05:41.941000 env[1805]: time="2025-09-13T00:05:41.940711974Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cg48,Uid:b0dcc1ee-de25-4df5-b74d-9c2aaea5120e,Namespace:calico-system,Attempt:0,}" Sep 13 00:05:41.970893 env[1805]: time="2025-09-13T00:05:41.969905114Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-ldbcb,Uid:a1522724-283e-46a0-a49f-d4dd6e34c25d,Namespace:kube-system,Attempt:0,}" Sep 13 00:05:41.978053 env[1805]: time="2025-09-13T00:05:41.977981725Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-dq4cs,Uid:400e4927-6c99-4fc7-ad3d-99920d2dfd9d,Namespace:calico-apiserver,Attempt:0,}" Sep 13 00:05:42.017844 env[1805]: time="2025-09-13T00:05:42.017774909Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79454d85df-z9hzc,Uid:037d762d-2612-437e-bef1-8e3b01281517,Namespace:calico-system,Attempt:0,}" Sep 13 00:05:42.036205 env[1805]: time="2025-09-13T00:05:42.036118455Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-mxhm5,Uid:a6ba0554-7bef-42d6-9956-756ffc73e462,Namespace:calico-apiserver,Attempt:0,}" Sep 13 00:05:42.055188 env[1805]: time="2025-09-13T00:05:42.055084153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7h5lc,Uid:00fac785-3036-476f-9a65-bb93b0ebd4d3,Namespace:kube-system,Attempt:0,}" Sep 13 00:05:42.173885 env[1805]: time="2025-09-13T00:05:42.173803415Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 13 00:05:42.212099 env[1805]: time="2025-09-13T00:05:42.212019823Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-dcc647db9-7ljwb,Uid:0b3cf741-8e19-44f7-af0c-68f6a359a798,Namespace:calico-system,Attempt:0,}" Sep 13 00:05:42.417767 env[1805]: time="2025-09-13T00:05:42.417531176Z" level=error msg="Failed to destroy network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.422918 env[1805]: time="2025-09-13T00:05:42.422819167Z" level=error msg="encountered an error cleaning up failed sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.423250 env[1805]: time="2025-09-13T00:05:42.423174655Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cg48,Uid:b0dcc1ee-de25-4df5-b74d-9c2aaea5120e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.424261 kubelet[2903]: E0913 00:05:42.423685 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.424261 kubelet[2903]: E0913 00:05:42.423782 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7cg48" Sep 13 00:05:42.424261 kubelet[2903]: E0913 00:05:42.423818 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7cg48" Sep 13 00:05:42.424810 kubelet[2903]: E0913 00:05:42.423884 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-7cg48_calico-system(b0dcc1ee-de25-4df5-b74d-9c2aaea5120e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-7cg48_calico-system(b0dcc1ee-de25-4df5-b74d-9c2aaea5120e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:42.456864 env[1805]: time="2025-09-13T00:05:42.456766000Z" level=error msg="Failed to destroy network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.457502 env[1805]: time="2025-09-13T00:05:42.457455880Z" level=error msg="encountered an error cleaning up failed sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.458913 env[1805]: time="2025-09-13T00:05:42.457548807Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-ldbcb,Uid:a1522724-283e-46a0-a49f-d4dd6e34c25d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.459120 kubelet[2903]: E0913 00:05:42.457926 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.459120 kubelet[2903]: E0913 00:05:42.458007 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-ldbcb" Sep 13 00:05:42.459120 kubelet[2903]: E0913 00:05:42.458042 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-ldbcb" Sep 13 00:05:42.459471 kubelet[2903]: E0913 00:05:42.458103 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-ldbcb_kube-system(a1522724-283e-46a0-a49f-d4dd6e34c25d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-ldbcb_kube-system(a1522724-283e-46a0-a49f-d4dd6e34c25d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-ldbcb" podUID="a1522724-283e-46a0-a49f-d4dd6e34c25d" Sep 13 00:05:42.554988 env[1805]: time="2025-09-13T00:05:42.554912669Z" level=error msg="Failed to destroy network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.559336 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9-shm.mount: Deactivated successfully. Sep 13 00:05:42.563163 env[1805]: time="2025-09-13T00:05:42.563084764Z" level=error msg="encountered an error cleaning up failed sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.563468 env[1805]: time="2025-09-13T00:05:42.563395288Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7h5lc,Uid:00fac785-3036-476f-9a65-bb93b0ebd4d3,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.564011 kubelet[2903]: E0913 00:05:42.563928 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.564722 kubelet[2903]: E0913 00:05:42.564032 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-7h5lc" Sep 13 00:05:42.564722 kubelet[2903]: E0913 00:05:42.564069 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-7h5lc" Sep 13 00:05:42.564722 kubelet[2903]: E0913 00:05:42.564161 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-7h5lc_kube-system(00fac785-3036-476f-9a65-bb93b0ebd4d3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-7h5lc_kube-system(00fac785-3036-476f-9a65-bb93b0ebd4d3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-7h5lc" podUID="00fac785-3036-476f-9a65-bb93b0ebd4d3" Sep 13 00:05:42.579090 env[1805]: time="2025-09-13T00:05:42.579017942Z" level=error msg="Failed to destroy network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.585353 env[1805]: time="2025-09-13T00:05:42.585208981Z" level=error msg="encountered an error cleaning up failed sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.585796 env[1805]: time="2025-09-13T00:05:42.585706189Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-dq4cs,Uid:400e4927-6c99-4fc7-ad3d-99920d2dfd9d,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.588363 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c-shm.mount: Deactivated successfully. Sep 13 00:05:42.590767 kubelet[2903]: E0913 00:05:42.590173 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.590767 kubelet[2903]: E0913 00:05:42.590264 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58c7664cd6-dq4cs" Sep 13 00:05:42.590767 kubelet[2903]: E0913 00:05:42.590299 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58c7664cd6-dq4cs" Sep 13 00:05:42.591328 kubelet[2903]: E0913 00:05:42.590364 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-58c7664cd6-dq4cs_calico-apiserver(400e4927-6c99-4fc7-ad3d-99920d2dfd9d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-58c7664cd6-dq4cs_calico-apiserver(400e4927-6c99-4fc7-ad3d-99920d2dfd9d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58c7664cd6-dq4cs" podUID="400e4927-6c99-4fc7-ad3d-99920d2dfd9d" Sep 13 00:05:42.596354 env[1805]: time="2025-09-13T00:05:42.596264916Z" level=error msg="Failed to destroy network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.601064 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5-shm.mount: Deactivated successfully. Sep 13 00:05:42.603270 env[1805]: time="2025-09-13T00:05:42.603191831Z" level=error msg="encountered an error cleaning up failed sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.603547 env[1805]: time="2025-09-13T00:05:42.603476795Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79454d85df-z9hzc,Uid:037d762d-2612-437e-bef1-8e3b01281517,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.604586 kubelet[2903]: E0913 00:05:42.604051 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.604586 kubelet[2903]: E0913 00:05:42.604126 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-79454d85df-z9hzc" Sep 13 00:05:42.604586 kubelet[2903]: E0913 00:05:42.604162 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-79454d85df-z9hzc" Sep 13 00:05:42.605114 kubelet[2903]: E0913 00:05:42.604221 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-79454d85df-z9hzc_calico-system(037d762d-2612-437e-bef1-8e3b01281517)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-79454d85df-z9hzc_calico-system(037d762d-2612-437e-bef1-8e3b01281517)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-79454d85df-z9hzc" podUID="037d762d-2612-437e-bef1-8e3b01281517" Sep 13 00:05:42.609632 env[1805]: time="2025-09-13T00:05:42.609530998Z" level=error msg="Failed to destroy network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.614954 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9-shm.mount: Deactivated successfully. Sep 13 00:05:42.617924 env[1805]: time="2025-09-13T00:05:42.617842845Z" level=error msg="encountered an error cleaning up failed sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.618256 env[1805]: time="2025-09-13T00:05:42.618177897Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-mxhm5,Uid:a6ba0554-7bef-42d6-9956-756ffc73e462,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.619598 kubelet[2903]: E0913 00:05:42.618783 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.619598 kubelet[2903]: E0913 00:05:42.618913 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58c7664cd6-mxhm5" Sep 13 00:05:42.619598 kubelet[2903]: E0913 00:05:42.618956 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58c7664cd6-mxhm5" Sep 13 00:05:42.620096 kubelet[2903]: E0913 00:05:42.619043 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-58c7664cd6-mxhm5_calico-apiserver(a6ba0554-7bef-42d6-9956-756ffc73e462)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-58c7664cd6-mxhm5_calico-apiserver(a6ba0554-7bef-42d6-9956-756ffc73e462)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58c7664cd6-mxhm5" podUID="a6ba0554-7bef-42d6-9956-756ffc73e462" Sep 13 00:05:42.628529 env[1805]: time="2025-09-13T00:05:42.628425968Z" level=error msg="Failed to destroy network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.629220 env[1805]: time="2025-09-13T00:05:42.629154164Z" level=error msg="encountered an error cleaning up failed sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.629338 env[1805]: time="2025-09-13T00:05:42.629259992Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-dcc647db9-7ljwb,Uid:0b3cf741-8e19-44f7-af0c-68f6a359a798,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.630120 kubelet[2903]: E0913 00:05:42.629741 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:42.630120 kubelet[2903]: E0913 00:05:42.629843 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-dcc647db9-7ljwb" Sep 13 00:05:42.630120 kubelet[2903]: E0913 00:05:42.629902 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-dcc647db9-7ljwb" Sep 13 00:05:42.630536 kubelet[2903]: E0913 00:05:42.630017 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-dcc647db9-7ljwb_calico-system(0b3cf741-8e19-44f7-af0c-68f6a359a798)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-dcc647db9-7ljwb_calico-system(0b3cf741-8e19-44f7-af0c-68f6a359a798)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-dcc647db9-7ljwb" podUID="0b3cf741-8e19-44f7-af0c-68f6a359a798" Sep 13 00:05:42.800746 kubelet[2903]: E0913 00:05:42.797398 2903 secret.go:189] Couldn't get secret calico-system/goldmane-key-pair: failed to sync secret cache: timed out waiting for the condition Sep 13 00:05:42.800746 kubelet[2903]: E0913 00:05:42.797546 2903 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/b1e4c2ec-3183-488e-95d1-65b4d985c105-goldmane-key-pair podName:b1e4c2ec-3183-488e-95d1-65b4d985c105 nodeName:}" failed. No retries permitted until 2025-09-13 00:05:43.297511517 +0000 UTC m=+42.787690919 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "goldmane-key-pair" (UniqueName: "kubernetes.io/secret/b1e4c2ec-3183-488e-95d1-65b4d985c105-goldmane-key-pair") pod "goldmane-54d579b49d-f9knf" (UID: "b1e4c2ec-3183-488e-95d1-65b4d985c105") : failed to sync secret cache: timed out waiting for the condition Sep 13 00:05:43.169420 kubelet[2903]: I0913 00:05:43.169370 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:05:43.172850 env[1805]: time="2025-09-13T00:05:43.170733640Z" level=info msg="StopPodSandbox for \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\"" Sep 13 00:05:43.175793 kubelet[2903]: I0913 00:05:43.175725 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:05:43.182324 env[1805]: time="2025-09-13T00:05:43.176591475Z" level=info msg="StopPodSandbox for \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\"" Sep 13 00:05:43.182324 env[1805]: time="2025-09-13T00:05:43.181174178Z" level=info msg="StopPodSandbox for \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\"" Sep 13 00:05:43.183219 kubelet[2903]: I0913 00:05:43.179791 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:05:43.188764 kubelet[2903]: I0913 00:05:43.187902 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:05:43.190190 env[1805]: time="2025-09-13T00:05:43.190016341Z" level=info msg="StopPodSandbox for \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\"" Sep 13 00:05:43.196016 kubelet[2903]: I0913 00:05:43.194561 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:05:43.196799 env[1805]: time="2025-09-13T00:05:43.196716769Z" level=info msg="StopPodSandbox for \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\"" Sep 13 00:05:43.201703 kubelet[2903]: I0913 00:05:43.201056 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:05:43.210416 env[1805]: time="2025-09-13T00:05:43.210340919Z" level=info msg="StopPodSandbox for \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\"" Sep 13 00:05:43.222229 kubelet[2903]: I0913 00:05:43.222185 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:05:43.227237 env[1805]: time="2025-09-13T00:05:43.227052273Z" level=info msg="StopPodSandbox for \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\"" Sep 13 00:05:43.336895 env[1805]: time="2025-09-13T00:05:43.336796221Z" level=error msg="StopPodSandbox for \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\" failed" error="failed to destroy network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.337599 kubelet[2903]: E0913 00:05:43.337287 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:05:43.337599 kubelet[2903]: E0913 00:05:43.337378 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9"} Sep 13 00:05:43.337599 kubelet[2903]: E0913 00:05:43.337479 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a6ba0554-7bef-42d6-9956-756ffc73e462\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:43.337599 kubelet[2903]: E0913 00:05:43.337519 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a6ba0554-7bef-42d6-9956-756ffc73e462\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58c7664cd6-mxhm5" podUID="a6ba0554-7bef-42d6-9956-756ffc73e462" Sep 13 00:05:43.382154 env[1805]: time="2025-09-13T00:05:43.382059112Z" level=error msg="StopPodSandbox for \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\" failed" error="failed to destroy network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.382956 kubelet[2903]: E0913 00:05:43.382612 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:05:43.382956 kubelet[2903]: E0913 00:05:43.382735 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3"} Sep 13 00:05:43.382956 kubelet[2903]: E0913 00:05:43.382819 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0b3cf741-8e19-44f7-af0c-68f6a359a798\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:43.382956 kubelet[2903]: E0913 00:05:43.382885 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0b3cf741-8e19-44f7-af0c-68f6a359a798\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-dcc647db9-7ljwb" podUID="0b3cf741-8e19-44f7-af0c-68f6a359a798" Sep 13 00:05:43.427019 env[1805]: time="2025-09-13T00:05:43.426842567Z" level=error msg="StopPodSandbox for \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\" failed" error="failed to destroy network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.427825 kubelet[2903]: E0913 00:05:43.427490 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:05:43.427825 kubelet[2903]: E0913 00:05:43.427558 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92"} Sep 13 00:05:43.427825 kubelet[2903]: E0913 00:05:43.427632 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a1522724-283e-46a0-a49f-d4dd6e34c25d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:43.427825 kubelet[2903]: E0913 00:05:43.427733 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a1522724-283e-46a0-a49f-d4dd6e34c25d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-ldbcb" podUID="a1522724-283e-46a0-a49f-d4dd6e34c25d" Sep 13 00:05:43.450372 env[1805]: time="2025-09-13T00:05:43.450279272Z" level=error msg="StopPodSandbox for \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\" failed" error="failed to destroy network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.451358 kubelet[2903]: E0913 00:05:43.451094 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:05:43.451358 kubelet[2903]: E0913 00:05:43.451166 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c"} Sep 13 00:05:43.451358 kubelet[2903]: E0913 00:05:43.451220 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"400e4927-6c99-4fc7-ad3d-99920d2dfd9d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:43.451358 kubelet[2903]: E0913 00:05:43.451267 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"400e4927-6c99-4fc7-ad3d-99920d2dfd9d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58c7664cd6-dq4cs" podUID="400e4927-6c99-4fc7-ad3d-99920d2dfd9d" Sep 13 00:05:43.468722 env[1805]: time="2025-09-13T00:05:43.468582894Z" level=error msg="StopPodSandbox for \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\" failed" error="failed to destroy network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.470560 kubelet[2903]: E0913 00:05:43.469466 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:05:43.470560 kubelet[2903]: E0913 00:05:43.469594 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479"} Sep 13 00:05:43.470560 kubelet[2903]: E0913 00:05:43.469687 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:43.470560 kubelet[2903]: E0913 00:05:43.469732 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7cg48" podUID="b0dcc1ee-de25-4df5-b74d-9c2aaea5120e" Sep 13 00:05:43.473577 env[1805]: time="2025-09-13T00:05:43.473488422Z" level=error msg="StopPodSandbox for \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\" failed" error="failed to destroy network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.474393 kubelet[2903]: E0913 00:05:43.474012 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:05:43.474393 kubelet[2903]: E0913 00:05:43.474134 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5"} Sep 13 00:05:43.474393 kubelet[2903]: E0913 00:05:43.474220 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"037d762d-2612-437e-bef1-8e3b01281517\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:43.474393 kubelet[2903]: E0913 00:05:43.474263 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"037d762d-2612-437e-bef1-8e3b01281517\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-79454d85df-z9hzc" podUID="037d762d-2612-437e-bef1-8e3b01281517" Sep 13 00:05:43.481024 env[1805]: time="2025-09-13T00:05:43.480930017Z" level=error msg="StopPodSandbox for \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\" failed" error="failed to destroy network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.481771 kubelet[2903]: E0913 00:05:43.481401 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:05:43.481771 kubelet[2903]: E0913 00:05:43.481495 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9"} Sep 13 00:05:43.481771 kubelet[2903]: E0913 00:05:43.481610 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"00fac785-3036-476f-9a65-bb93b0ebd4d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:43.481771 kubelet[2903]: E0913 00:05:43.481681 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"00fac785-3036-476f-9a65-bb93b0ebd4d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-7h5lc" podUID="00fac785-3036-476f-9a65-bb93b0ebd4d3" Sep 13 00:05:43.498117 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3-shm.mount: Deactivated successfully. Sep 13 00:05:43.501489 env[1805]: time="2025-09-13T00:05:43.501416631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-f9knf,Uid:b1e4c2ec-3183-488e-95d1-65b4d985c105,Namespace:calico-system,Attempt:0,}" Sep 13 00:05:43.653023 env[1805]: time="2025-09-13T00:05:43.652944418Z" level=error msg="Failed to destroy network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.658177 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5-shm.mount: Deactivated successfully. Sep 13 00:05:43.661843 env[1805]: time="2025-09-13T00:05:43.661764873Z" level=error msg="encountered an error cleaning up failed sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.662071 env[1805]: time="2025-09-13T00:05:43.662015457Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-f9knf,Uid:b1e4c2ec-3183-488e-95d1-65b4d985c105,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.666253 kubelet[2903]: E0913 00:05:43.662512 2903 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:43.666253 kubelet[2903]: E0913 00:05:43.662746 2903 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-f9knf" Sep 13 00:05:43.666253 kubelet[2903]: E0913 00:05:43.662794 2903 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-f9knf" Sep 13 00:05:43.667150 kubelet[2903]: E0913 00:05:43.662924 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-f9knf_calico-system(b1e4c2ec-3183-488e-95d1-65b4d985c105)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-f9knf_calico-system(b1e4c2ec-3183-488e-95d1-65b4d985c105)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-f9knf" podUID="b1e4c2ec-3183-488e-95d1-65b4d985c105" Sep 13 00:05:44.227784 kubelet[2903]: I0913 00:05:44.227734 2903 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:05:44.228807 env[1805]: time="2025-09-13T00:05:44.228730322Z" level=info msg="StopPodSandbox for \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\"" Sep 13 00:05:44.286276 env[1805]: time="2025-09-13T00:05:44.286201076Z" level=error msg="StopPodSandbox for \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\" failed" error="failed to destroy network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:05:44.287543 kubelet[2903]: E0913 00:05:44.287464 2903 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:05:44.287786 kubelet[2903]: E0913 00:05:44.287539 2903 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5"} Sep 13 00:05:44.287786 kubelet[2903]: E0913 00:05:44.287607 2903 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b1e4c2ec-3183-488e-95d1-65b4d985c105\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:05:44.287786 kubelet[2903]: E0913 00:05:44.287701 2903 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b1e4c2ec-3183-488e-95d1-65b4d985c105\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-f9knf" podUID="b1e4c2ec-3183-488e-95d1-65b4d985c105" Sep 13 00:05:50.370518 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1931220445.mount: Deactivated successfully. Sep 13 00:05:50.451416 env[1805]: time="2025-09-13T00:05:50.451346292Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:50.455859 env[1805]: time="2025-09-13T00:05:50.455614301Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:50.458946 env[1805]: time="2025-09-13T00:05:50.458876281Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:50.462287 env[1805]: time="2025-09-13T00:05:50.462222983Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:50.463901 env[1805]: time="2025-09-13T00:05:50.463834701Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 13 00:05:50.500325 env[1805]: time="2025-09-13T00:05:50.500246342Z" level=info msg="CreateContainer within sandbox \"0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 13 00:05:50.529821 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3477029870.mount: Deactivated successfully. Sep 13 00:05:50.536697 env[1805]: time="2025-09-13T00:05:50.535766256Z" level=info msg="CreateContainer within sandbox \"0477bdb245425f2a34c3a436f8732ade4978ce7fc9362fc0e4054c417019faeb\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"c2b76ea67ab2ca606c021fcc09df0e18da3cee884ce089fa61f22dee79583ba3\"" Sep 13 00:05:50.540425 env[1805]: time="2025-09-13T00:05:50.540081222Z" level=info msg="StartContainer for \"c2b76ea67ab2ca606c021fcc09df0e18da3cee884ce089fa61f22dee79583ba3\"" Sep 13 00:05:50.574694 systemd[1]: Started cri-containerd-c2b76ea67ab2ca606c021fcc09df0e18da3cee884ce089fa61f22dee79583ba3.scope. Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637880 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 13 00:05:50.638039 kernel: audit: type=1400 audit(1757721950.635:1000): avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3384 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:50.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623736656136376162326361363036633032316663633039646630 Sep 13 00:05:50.678489 kernel: audit: type=1300 audit(1757721950.635:1000): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3384 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:50.678630 kernel: audit: type=1327 audit(1757721950.635:1000): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623736656136376162326361363036633032316663633039646630 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.686754 kernel: audit: type=1400 audit(1757721950.635:1001): avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.695550 kernel: audit: type=1400 audit(1757721950.635:1001): avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.703264 kernel: audit: type=1400 audit(1757721950.635:1001): avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.703635 env[1805]: time="2025-09-13T00:05:50.703564238Z" level=info msg="StartContainer for \"c2b76ea67ab2ca606c021fcc09df0e18da3cee884ce089fa61f22dee79583ba3\" returns successfully" Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.711295 kernel: audit: type=1400 audit(1757721950.635:1001): avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.711461 kernel: audit: type=1400 audit(1757721950.635:1001): avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.726800 kernel: audit: type=1400 audit(1757721950.635:1001): avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.726907 kernel: audit: type=1400 audit(1757721950.635:1001): avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.635000 audit: BPF prog-id=136 op=LOAD Sep 13 00:05:50.635000 audit[4008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3384 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:50.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623736656136376162326361363036633032316663633039646630 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.637000 audit: BPF prog-id=137 op=LOAD Sep 13 00:05:50.637000 audit[4008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3384 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:50.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623736656136376162326361363036633032316663633039646630 Sep 13 00:05:50.644000 audit: BPF prog-id=137 op=UNLOAD Sep 13 00:05:50.644000 audit: BPF prog-id=136 op=UNLOAD Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { perfmon } for pid=4008 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit[4008]: AVC avc: denied { bpf } for pid=4008 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:50.644000 audit: BPF prog-id=138 op=LOAD Sep 13 00:05:50.644000 audit[4008]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3384 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:50.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332623736656136376162326361363036633032316663633039646630 Sep 13 00:05:50.985223 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 13 00:05:50.985412 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 13 00:05:51.202308 env[1805]: time="2025-09-13T00:05:51.202254209Z" level=info msg="StopPodSandbox for \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\"" Sep 13 00:05:51.513122 kubelet[2903]: I0913 00:05:51.513007 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-p8jfj" podStartSLOduration=1.8706668610000001 podStartE2EDuration="21.512954898s" podCreationTimestamp="2025-09-13 00:05:30 +0000 UTC" firstStartedPulling="2025-09-13 00:05:30.823974843 +0000 UTC m=+30.314154245" lastFinishedPulling="2025-09-13 00:05:50.46626288 +0000 UTC m=+49.956442282" observedRunningTime="2025-09-13 00:05:51.298679552 +0000 UTC m=+50.788858978" watchObservedRunningTime="2025-09-13 00:05:51.512954898 +0000 UTC m=+51.003134312" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.514 [INFO][4056] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.516 [INFO][4056] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" iface="eth0" netns="/var/run/netns/cni-f2f4d2f3-0d6e-5478-b016-e09ba1c70444" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.516 [INFO][4056] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" iface="eth0" netns="/var/run/netns/cni-f2f4d2f3-0d6e-5478-b016-e09ba1c70444" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.518 [INFO][4056] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" iface="eth0" netns="/var/run/netns/cni-f2f4d2f3-0d6e-5478-b016-e09ba1c70444" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.518 [INFO][4056] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.518 [INFO][4056] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.669 [INFO][4091] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.686 [INFO][4091] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.688 [INFO][4091] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.726 [WARNING][4091] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.726 [INFO][4091] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.731 [INFO][4091] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:51.742431 env[1805]: 2025-09-13 00:05:51.739 [INFO][4056] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:05:51.750017 systemd[1]: run-netns-cni\x2df2f4d2f3\x2d0d6e\x2d5478\x2db016\x2de09ba1c70444.mount: Deactivated successfully. Sep 13 00:05:51.755890 env[1805]: time="2025-09-13T00:05:51.755818161Z" level=info msg="TearDown network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\" successfully" Sep 13 00:05:51.756138 env[1805]: time="2025-09-13T00:05:51.756099890Z" level=info msg="StopPodSandbox for \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\" returns successfully" Sep 13 00:05:51.902874 kubelet[2903]: I0913 00:05:51.901840 2903 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2nltg\" (UniqueName: \"kubernetes.io/projected/0b3cf741-8e19-44f7-af0c-68f6a359a798-kube-api-access-2nltg\") pod \"0b3cf741-8e19-44f7-af0c-68f6a359a798\" (UID: \"0b3cf741-8e19-44f7-af0c-68f6a359a798\") " Sep 13 00:05:51.902874 kubelet[2903]: I0913 00:05:51.901934 2903 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-ca-bundle\") pod \"0b3cf741-8e19-44f7-af0c-68f6a359a798\" (UID: \"0b3cf741-8e19-44f7-af0c-68f6a359a798\") " Sep 13 00:05:51.902874 kubelet[2903]: I0913 00:05:51.901986 2903 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-backend-key-pair\") pod \"0b3cf741-8e19-44f7-af0c-68f6a359a798\" (UID: \"0b3cf741-8e19-44f7-af0c-68f6a359a798\") " Sep 13 00:05:51.908058 kubelet[2903]: I0913 00:05:51.907961 2903 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "0b3cf741-8e19-44f7-af0c-68f6a359a798" (UID: "0b3cf741-8e19-44f7-af0c-68f6a359a798"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 13 00:05:51.919173 systemd[1]: var-lib-kubelet-pods-0b3cf741\x2d8e19\x2d44f7\x2daf0c\x2d68f6a359a798-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2nltg.mount: Deactivated successfully. Sep 13 00:05:51.919385 systemd[1]: var-lib-kubelet-pods-0b3cf741\x2d8e19\x2d44f7\x2daf0c\x2d68f6a359a798-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 13 00:05:51.925232 kubelet[2903]: I0913 00:05:51.925176 2903 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "0b3cf741-8e19-44f7-af0c-68f6a359a798" (UID: "0b3cf741-8e19-44f7-af0c-68f6a359a798"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 13 00:05:51.928963 kubelet[2903]: I0913 00:05:51.928893 2903 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0b3cf741-8e19-44f7-af0c-68f6a359a798-kube-api-access-2nltg" (OuterVolumeSpecName: "kube-api-access-2nltg") pod "0b3cf741-8e19-44f7-af0c-68f6a359a798" (UID: "0b3cf741-8e19-44f7-af0c-68f6a359a798"). InnerVolumeSpecName "kube-api-access-2nltg". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 13 00:05:52.003576 kubelet[2903]: I0913 00:05:52.003530 2903 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-2nltg\" (UniqueName: \"kubernetes.io/projected/0b3cf741-8e19-44f7-af0c-68f6a359a798-kube-api-access-2nltg\") on node \"ip-172-31-27-41\" DevicePath \"\"" Sep 13 00:05:52.003833 kubelet[2903]: I0913 00:05:52.003808 2903 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-ca-bundle\") on node \"ip-172-31-27-41\" DevicePath \"\"" Sep 13 00:05:52.003954 kubelet[2903]: I0913 00:05:52.003931 2903 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0b3cf741-8e19-44f7-af0c-68f6a359a798-whisker-backend-key-pair\") on node \"ip-172-31-27-41\" DevicePath \"\"" Sep 13 00:05:52.266346 systemd[1]: Removed slice kubepods-besteffort-pod0b3cf741_8e19_44f7_af0c_68f6a359a798.slice. Sep 13 00:05:52.371326 systemd[1]: run-containerd-runc-k8s.io-c2b76ea67ab2ca606c021fcc09df0e18da3cee884ce089fa61f22dee79583ba3-runc.fFalsA.mount: Deactivated successfully. Sep 13 00:05:52.384607 systemd[1]: Created slice kubepods-besteffort-pod781bdfe0_a387_45c1_8272_56aa778a48de.slice. Sep 13 00:05:52.509031 kubelet[2903]: I0913 00:05:52.508967 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/781bdfe0-a387-45c1-8272-56aa778a48de-whisker-ca-bundle\") pod \"whisker-6cfb9f6b68-5ldzn\" (UID: \"781bdfe0-a387-45c1-8272-56aa778a48de\") " pod="calico-system/whisker-6cfb9f6b68-5ldzn" Sep 13 00:05:52.509227 kubelet[2903]: I0913 00:05:52.509080 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4m8tb\" (UniqueName: \"kubernetes.io/projected/781bdfe0-a387-45c1-8272-56aa778a48de-kube-api-access-4m8tb\") pod \"whisker-6cfb9f6b68-5ldzn\" (UID: \"781bdfe0-a387-45c1-8272-56aa778a48de\") " pod="calico-system/whisker-6cfb9f6b68-5ldzn" Sep 13 00:05:52.509227 kubelet[2903]: I0913 00:05:52.509165 2903 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/781bdfe0-a387-45c1-8272-56aa778a48de-whisker-backend-key-pair\") pod \"whisker-6cfb9f6b68-5ldzn\" (UID: \"781bdfe0-a387-45c1-8272-56aa778a48de\") " pod="calico-system/whisker-6cfb9f6b68-5ldzn" Sep 13 00:05:52.696453 env[1805]: time="2025-09-13T00:05:52.696386180Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6cfb9f6b68-5ldzn,Uid:781bdfe0-a387-45c1-8272-56aa778a48de,Namespace:calico-system,Attempt:0,}" Sep 13 00:05:52.915367 kubelet[2903]: I0913 00:05:52.915315 2903 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="0b3cf741-8e19-44f7-af0c-68f6a359a798" path="/var/lib/kubelet/pods/0b3cf741-8e19-44f7-af0c-68f6a359a798/volumes" Sep 13 00:05:52.946482 systemd-networkd[1528]: cali940302ca2ce: Link UP Sep 13 00:05:52.952544 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:05:52.952751 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali940302ca2ce: link becomes ready Sep 13 00:05:52.956459 systemd-networkd[1528]: cali940302ca2ce: Gained carrier Sep 13 00:05:52.959643 (udev-worker)[4153]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.778 [INFO][4132] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.801 [INFO][4132] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0 whisker-6cfb9f6b68- calico-system 781bdfe0-a387-45c1-8272-56aa778a48de 895 0 2025-09-13 00:05:52 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6cfb9f6b68 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-27-41 whisker-6cfb9f6b68-5ldzn eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali940302ca2ce [] [] }} ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.802 [INFO][4132] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.853 [INFO][4145] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" HandleID="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Workload="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.853 [INFO][4145] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" HandleID="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Workload="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3640), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-41", "pod":"whisker-6cfb9f6b68-5ldzn", "timestamp":"2025-09-13 00:05:52.853599883 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.854 [INFO][4145] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.854 [INFO][4145] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.854 [INFO][4145] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.868 [INFO][4145] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.883 [INFO][4145] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.890 [INFO][4145] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.897 [INFO][4145] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.902 [INFO][4145] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.902 [INFO][4145] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.905 [INFO][4145] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099 Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.916 [INFO][4145] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.929 [INFO][4145] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.1/26] block=192.168.102.0/26 handle="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.929 [INFO][4145] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.1/26] handle="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" host="ip-172-31-27-41" Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.930 [INFO][4145] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:52.993199 env[1805]: 2025-09-13 00:05:52.930 [INFO][4145] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.1/26] IPv6=[] ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" HandleID="k8s-pod-network.95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Workload="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" Sep 13 00:05:52.995056 env[1805]: 2025-09-13 00:05:52.933 [INFO][4132] cni-plugin/k8s.go 418: Populated endpoint ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0", GenerateName:"whisker-6cfb9f6b68-", Namespace:"calico-system", SelfLink:"", UID:"781bdfe0-a387-45c1-8272-56aa778a48de", ResourceVersion:"895", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6cfb9f6b68", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"whisker-6cfb9f6b68-5ldzn", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.102.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali940302ca2ce", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:52.995056 env[1805]: 2025-09-13 00:05:52.934 [INFO][4132] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.1/32] ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" Sep 13 00:05:52.995056 env[1805]: 2025-09-13 00:05:52.934 [INFO][4132] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali940302ca2ce ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" Sep 13 00:05:52.995056 env[1805]: 2025-09-13 00:05:52.960 [INFO][4132] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" Sep 13 00:05:52.995056 env[1805]: 2025-09-13 00:05:52.960 [INFO][4132] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0", GenerateName:"whisker-6cfb9f6b68-", Namespace:"calico-system", SelfLink:"", UID:"781bdfe0-a387-45c1-8272-56aa778a48de", ResourceVersion:"895", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6cfb9f6b68", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099", Pod:"whisker-6cfb9f6b68-5ldzn", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.102.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali940302ca2ce", MAC:"d2:e0:d7:a9:dd:ad", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:52.995056 env[1805]: 2025-09-13 00:05:52.990 [INFO][4132] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099" Namespace="calico-system" Pod="whisker-6cfb9f6b68-5ldzn" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--6cfb9f6b68--5ldzn-eth0" Sep 13 00:05:53.018180 env[1805]: time="2025-09-13T00:05:53.018039748Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:53.018475 env[1805]: time="2025-09-13T00:05:53.018414431Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:53.018704 env[1805]: time="2025-09-13T00:05:53.018629823Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:53.019337 env[1805]: time="2025-09-13T00:05:53.019237611Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099 pid=4168 runtime=io.containerd.runc.v2 Sep 13 00:05:53.053202 systemd[1]: Started cri-containerd-95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099.scope. Sep 13 00:05:53.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.090000 audit: BPF prog-id=139 op=LOAD Sep 13 00:05:53.095000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.095000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4168 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623739383633633263303439366535343737616466363232636239 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4168 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623739383633633263303439366535343737616466363232636239 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.096000 audit: BPF prog-id=140 op=LOAD Sep 13 00:05:53.096000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4168 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623739383633633263303439366535343737616466363232636239 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.098000 audit: BPF prog-id=141 op=LOAD Sep 13 00:05:53.098000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4168 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623739383633633263303439366535343737616466363232636239 Sep 13 00:05:53.103000 audit: BPF prog-id=141 op=UNLOAD Sep 13 00:05:53.103000 audit: BPF prog-id=140 op=UNLOAD Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:53.104000 audit: BPF prog-id=142 op=LOAD Sep 13 00:05:53.104000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4168 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623739383633633263303439366535343737616466363232636239 Sep 13 00:05:53.194000 audit[4234]: AVC avc: denied { write } for pid=4234 comm="tee" name="fd" dev="proc" ino=22872 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:05:53.194000 audit[4234]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff93727db a2=241 a3=1b6 items=1 ppid=4207 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.194000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 13 00:05:53.194000 audit: PATH item=0 name="/dev/fd/63" inode=22850 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:05:53.194000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:05:53.199423 env[1805]: time="2025-09-13T00:05:53.199259671Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6cfb9f6b68-5ldzn,Uid:781bdfe0-a387-45c1-8272-56aa778a48de,Namespace:calico-system,Attempt:0,} returns sandbox id \"95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099\"" Sep 13 00:05:53.206873 env[1805]: time="2025-09-13T00:05:53.206803940Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 13 00:05:53.218000 audit[4227]: AVC avc: denied { write } for pid=4227 comm="tee" name="fd" dev="proc" ino=21980 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:05:53.218000 audit[4246]: AVC avc: denied { write } for pid=4246 comm="tee" name="fd" dev="proc" ino=22878 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:05:53.218000 audit[4246]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffddb827c9 a2=241 a3=1b6 items=1 ppid=4203 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.218000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 13 00:05:53.218000 audit: PATH item=0 name="/dev/fd/63" inode=22867 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:05:53.218000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:05:53.218000 audit[4227]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff9d527da a2=241 a3=1b6 items=1 ppid=4204 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.218000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 13 00:05:53.218000 audit: PATH item=0 name="/dev/fd/63" inode=22847 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:05:53.218000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:05:53.252000 audit[4248]: AVC avc: denied { write } for pid=4248 comm="tee" name="fd" dev="proc" ino=22884 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:05:53.252000 audit[4248]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcf30f7d9 a2=241 a3=1b6 items=1 ppid=4211 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.252000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 13 00:05:53.252000 audit: PATH item=0 name="/dev/fd/63" inode=21968 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:05:53.252000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:05:53.259000 audit[4251]: AVC avc: denied { write } for pid=4251 comm="tee" name="fd" dev="proc" ino=22888 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:05:53.259000 audit[4251]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdeeed7ca a2=241 a3=1b6 items=1 ppid=4209 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.259000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 13 00:05:53.259000 audit: PATH item=0 name="/dev/fd/63" inode=21969 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:05:53.259000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:05:53.344000 audit[4282]: AVC avc: denied { write } for pid=4282 comm="tee" name="fd" dev="proc" ino=22910 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:05:53.344000 audit[4282]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe098d7d9 a2=241 a3=1b6 items=1 ppid=4220 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.344000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 13 00:05:53.344000 audit: PATH item=0 name="/dev/fd/63" inode=22899 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:05:53.344000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:05:53.420000 audit[4297]: AVC avc: denied { write } for pid=4297 comm="tee" name="fd" dev="proc" ino=22040 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:05:53.420000 audit[4297]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee2f07d9 a2=241 a3=1b6 items=1 ppid=4224 pid=4297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.420000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 13 00:05:53.420000 audit: PATH item=0 name="/dev/fd/63" inode=22035 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:05:53.420000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:05:53.651555 kubelet[2903]: I0913 00:05:53.650709 2903 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:05:53.729000 audit[4306]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=4306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:53.729000 audit[4306]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffffbc5e020 a2=0 a3=1 items=0 ppid=3004 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.729000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:53.735000 audit[4306]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=4306 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:53.735000 audit[4306]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffffbc5e020 a2=0 a3=1 items=0 ppid=3004 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:53.735000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:53.910358 env[1805]: time="2025-09-13T00:05:53.910287667Z" level=info msg="StopPodSandbox for \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\"" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.037 [INFO][4320] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.037 [INFO][4320] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" iface="eth0" netns="/var/run/netns/cni-ad5e6a65-0fd2-ad5f-bb49-815b79a1a95d" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.037 [INFO][4320] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" iface="eth0" netns="/var/run/netns/cni-ad5e6a65-0fd2-ad5f-bb49-815b79a1a95d" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.038 [INFO][4320] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" iface="eth0" netns="/var/run/netns/cni-ad5e6a65-0fd2-ad5f-bb49-815b79a1a95d" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.038 [INFO][4320] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.038 [INFO][4320] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.101 [INFO][4328] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.101 [INFO][4328] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.101 [INFO][4328] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.115 [WARNING][4328] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.115 [INFO][4328] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.120 [INFO][4328] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:54.132497 env[1805]: 2025-09-13 00:05:54.123 [INFO][4320] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:05:54.143545 systemd[1]: run-netns-cni\x2dad5e6a65\x2d0fd2\x2dad5f\x2dbb49\x2d815b79a1a95d.mount: Deactivated successfully. Sep 13 00:05:54.151938 env[1805]: time="2025-09-13T00:05:54.151820491Z" level=info msg="TearDown network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\" successfully" Sep 13 00:05:54.152824 env[1805]: time="2025-09-13T00:05:54.152083404Z" level=info msg="StopPodSandbox for \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\" returns successfully" Sep 13 00:05:54.153310 env[1805]: time="2025-09-13T00:05:54.153260302Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-ldbcb,Uid:a1522724-283e-46a0-a49f-d4dd6e34c25d,Namespace:kube-system,Attempt:1,}" Sep 13 00:05:54.526611 systemd-networkd[1528]: cali86f151cd3b9: Link UP Sep 13 00:05:54.531979 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:05:54.532139 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali86f151cd3b9: link becomes ready Sep 13 00:05:54.532416 systemd-networkd[1528]: cali86f151cd3b9: Gained carrier Sep 13 00:05:54.534707 (udev-worker)[4041]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.269 [INFO][4339] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.308 [INFO][4339] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0 coredns-668d6bf9bc- kube-system a1522724-283e-46a0-a49f-d4dd6e34c25d 915 0 2025-09-13 00:05:06 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-41 coredns-668d6bf9bc-ldbcb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali86f151cd3b9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.308 [INFO][4339] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.423 [INFO][4352] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" HandleID="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.424 [INFO][4352] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" HandleID="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002859d0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-41", "pod":"coredns-668d6bf9bc-ldbcb", "timestamp":"2025-09-13 00:05:54.423861235 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.424 [INFO][4352] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.424 [INFO][4352] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.424 [INFO][4352] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.444 [INFO][4352] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.453 [INFO][4352] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.463 [INFO][4352] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.467 [INFO][4352] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.472 [INFO][4352] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.472 [INFO][4352] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.476 [INFO][4352] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887 Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.494 [INFO][4352] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.514 [INFO][4352] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.2/26] block=192.168.102.0/26 handle="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.514 [INFO][4352] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.2/26] handle="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" host="ip-172-31-27-41" Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.514 [INFO][4352] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:54.595430 env[1805]: 2025-09-13 00:05:54.514 [INFO][4352] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.2/26] IPv6=[] ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" HandleID="k8s-pod-network.95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.596959 env[1805]: 2025-09-13 00:05:54.518 [INFO][4339] cni-plugin/k8s.go 418: Populated endpoint ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a1522724-283e-46a0-a49f-d4dd6e34c25d", ResourceVersion:"915", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"coredns-668d6bf9bc-ldbcb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86f151cd3b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:54.596959 env[1805]: 2025-09-13 00:05:54.518 [INFO][4339] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.2/32] ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.596959 env[1805]: 2025-09-13 00:05:54.518 [INFO][4339] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali86f151cd3b9 ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.596959 env[1805]: 2025-09-13 00:05:54.530 [INFO][4339] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.596959 env[1805]: 2025-09-13 00:05:54.531 [INFO][4339] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a1522724-283e-46a0-a49f-d4dd6e34c25d", ResourceVersion:"915", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887", Pod:"coredns-668d6bf9bc-ldbcb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86f151cd3b9", MAC:"e6:f2:02:7d:eb:9f", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:54.596959 env[1805]: 2025-09-13 00:05:54.589 [INFO][4339] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887" Namespace="kube-system" Pod="coredns-668d6bf9bc-ldbcb" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:05:54.626115 env[1805]: time="2025-09-13T00:05:54.625895897Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:54.626309 env[1805]: time="2025-09-13T00:05:54.626213243Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:54.626383 env[1805]: time="2025-09-13T00:05:54.626306809Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:54.626919 env[1805]: time="2025-09-13T00:05:54.626826358Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887 pid=4384 runtime=io.containerd.runc.v2 Sep 13 00:05:54.664591 systemd[1]: Started cri-containerd-95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887.scope. Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.747000 audit: BPF prog-id=143 op=LOAD Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4384 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646165373738346665333064333037643061636237656435393765 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4384 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646165373738346665333064333037643061636237656435393765 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit: BPF prog-id=144 op=LOAD Sep 13 00:05:54.748000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4384 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646165373738346665333064333037643061636237656435393765 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.748000 audit: BPF prog-id=145 op=LOAD Sep 13 00:05:54.748000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4384 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646165373738346665333064333037643061636237656435393765 Sep 13 00:05:54.748000 audit: BPF prog-id=145 op=UNLOAD Sep 13 00:05:54.748000 audit: BPF prog-id=144 op=UNLOAD Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { perfmon } for pid=4397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit[4397]: AVC avc: denied { bpf } for pid=4397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.749000 audit: BPF prog-id=146 op=LOAD Sep 13 00:05:54.749000 audit[4397]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4384 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935646165373738346665333064333037643061636237656435393765 Sep 13 00:05:54.827145 env[1805]: time="2025-09-13T00:05:54.826986706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-ldbcb,Uid:a1522724-283e-46a0-a49f-d4dd6e34c25d,Namespace:kube-system,Attempt:1,} returns sandbox id \"95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887\"" Sep 13 00:05:54.839108 env[1805]: time="2025-09-13T00:05:54.839053615Z" level=info msg="CreateContainer within sandbox \"95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 00:05:54.846891 systemd-networkd[1528]: cali940302ca2ce: Gained IPv6LL Sep 13 00:05:54.904275 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2110467985.mount: Deactivated successfully. Sep 13 00:05:54.911016 env[1805]: time="2025-09-13T00:05:54.910944752Z" level=info msg="CreateContainer within sandbox \"95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"468f5e1646e44a401602bb67267fc757fab0d6ca10dc3d2efd35d0cb5fec8661\"" Sep 13 00:05:54.911623 env[1805]: time="2025-09-13T00:05:54.911561311Z" level=info msg="StopPodSandbox for \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\"" Sep 13 00:05:54.933526 env[1805]: time="2025-09-13T00:05:54.933451125Z" level=info msg="StartContainer for \"468f5e1646e44a401602bb67267fc757fab0d6ca10dc3d2efd35d0cb5fec8661\"" Sep 13 00:05:54.952987 env[1805]: time="2025-09-13T00:05:54.952926421Z" level=info msg="StopPodSandbox for \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\"" Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.976000 audit: BPF prog-id=147 op=LOAD Sep 13 00:05:54.976000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcba3c658 a2=98 a3=ffffcba3c648 items=0 ppid=4212 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.976000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:05:54.977000 audit: BPF prog-id=147 op=UNLOAD Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.977000 audit: BPF prog-id=148 op=LOAD Sep 13 00:05:54.977000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcba3c508 a2=74 a3=95 items=0 ppid=4212 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.977000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:05:54.978000 audit: BPF prog-id=148 op=UNLOAD Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit: BPF prog-id=149 op=LOAD Sep 13 00:05:54.978000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcba3c538 a2=40 a3=ffffcba3c568 items=0 ppid=4212 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.978000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:05:54.978000 audit: BPF prog-id=149 op=UNLOAD Sep 13 00:05:54.978000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.978000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffcba3c650 a2=50 a3=0 items=0 ppid=4212 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.978000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.986000 audit: BPF prog-id=150 op=LOAD Sep 13 00:05:54.986000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe30f27c8 a2=98 a3=ffffe30f27b8 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.986000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:54.986000 audit: BPF prog-id=150 op=UNLOAD Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit: BPF prog-id=151 op=LOAD Sep 13 00:05:54.987000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe30f2458 a2=74 a3=95 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.987000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:54.987000 audit: BPF prog-id=151 op=UNLOAD Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:54.987000 audit: BPF prog-id=152 op=LOAD Sep 13 00:05:54.987000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe30f24b8 a2=94 a3=2 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:54.987000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:54.987000 audit: BPF prog-id=152 op=UNLOAD Sep 13 00:05:55.060183 systemd[1]: Started cri-containerd-468f5e1646e44a401602bb67267fc757fab0d6ca10dc3d2efd35d0cb5fec8661.scope. Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.159000 audit: BPF prog-id=153 op=LOAD Sep 13 00:05:55.161000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.161000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4384 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436386635653136343665343461343031363032626236373236376663 Sep 13 00:05:55.161000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.161000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4384 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436386635653136343665343461343031363032626236373236376663 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.166000 audit: BPF prog-id=154 op=LOAD Sep 13 00:05:55.166000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4384 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436386635653136343665343461343031363032626236373236376663 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.169000 audit: BPF prog-id=155 op=LOAD Sep 13 00:05:55.169000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4384 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436386635653136343665343461343031363032626236373236376663 Sep 13 00:05:55.174000 audit: BPF prog-id=155 op=UNLOAD Sep 13 00:05:55.174000 audit: BPF prog-id=154 op=UNLOAD Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.174000 audit: BPF prog-id=156 op=LOAD Sep 13 00:05:55.174000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4384 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436386635653136343665343461343031363032626236373236376663 Sep 13 00:05:55.250556 env[1805]: time="2025-09-13T00:05:55.250471763Z" level=info msg="StartContainer for \"468f5e1646e44a401602bb67267fc757fab0d6ca10dc3d2efd35d0cb5fec8661\" returns successfully" Sep 13 00:05:55.389000 audit[4480]: AVC avc: denied { getattr } for pid=4480 comm="coredns" path="cgroup:[4026532954]" dev="nsfs" ino=4026532954 scontext=system_u:system_r:svirt_lxc_net_t:s0:c379,c654 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 00:05:55.389000 audit[4480]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056798 a2=400014e578 a3=0 items=0 ppid=4384 pid=4480 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c379,c654 key=(null) Sep 13 00:05:55.389000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 00:05:55.407598 kubelet[2903]: I0913 00:05:55.406927 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-ldbcb" podStartSLOduration=49.406902793 podStartE2EDuration="49.406902793s" podCreationTimestamp="2025-09-13 00:05:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:05:55.381885266 +0000 UTC m=+54.872064692" watchObservedRunningTime="2025-09-13 00:05:55.406902793 +0000 UTC m=+54.897082195" Sep 13 00:05:55.471000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:55.471000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014f90e0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:05:55.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:05:55.477000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:55.477000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e27bc0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:05:55.477000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.329 [INFO][4470] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.330 [INFO][4470] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" iface="eth0" netns="/var/run/netns/cni-041e76a2-4f07-1dd2-d9f1-17dbc3c683c0" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.330 [INFO][4470] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" iface="eth0" netns="/var/run/netns/cni-041e76a2-4f07-1dd2-d9f1-17dbc3c683c0" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.330 [INFO][4470] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" iface="eth0" netns="/var/run/netns/cni-041e76a2-4f07-1dd2-d9f1-17dbc3c683c0" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.330 [INFO][4470] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.330 [INFO][4470] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.501 [INFO][4501] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.502 [INFO][4501] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.502 [INFO][4501] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.527 [WARNING][4501] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.527 [INFO][4501] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.531 [INFO][4501] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:55.544869 env[1805]: 2025-09-13 00:05:55.540 [INFO][4470] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:05:55.562602 env[1805]: time="2025-09-13T00:05:55.562525729Z" level=info msg="TearDown network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\" successfully" Sep 13 00:05:55.565827 env[1805]: time="2025-09-13T00:05:55.565716371Z" level=info msg="StopPodSandbox for \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\" returns successfully" Sep 13 00:05:55.566921 env[1805]: time="2025-09-13T00:05:55.566865379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79454d85df-z9hzc,Uid:037d762d-2612-437e-bef1-8e3b01281517,Namespace:calico-system,Attempt:1,}" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.415 [INFO][4460] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.415 [INFO][4460] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" iface="eth0" netns="/var/run/netns/cni-be46291e-ecbb-e6d6-20f6-1a8ccd72aaea" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.415 [INFO][4460] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" iface="eth0" netns="/var/run/netns/cni-be46291e-ecbb-e6d6-20f6-1a8ccd72aaea" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.415 [INFO][4460] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" iface="eth0" netns="/var/run/netns/cni-be46291e-ecbb-e6d6-20f6-1a8ccd72aaea" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.415 [INFO][4460] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.416 [INFO][4460] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.513 [INFO][4509] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.513 [INFO][4509] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.531 [INFO][4509] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.573 [WARNING][4509] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.575 [INFO][4509] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.580 [INFO][4509] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:55.586327 env[1805]: 2025-09-13 00:05:55.583 [INFO][4460] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:05:55.588229 env[1805]: time="2025-09-13T00:05:55.588172427Z" level=info msg="TearDown network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\" successfully" Sep 13 00:05:55.588421 env[1805]: time="2025-09-13T00:05:55.588371427Z" level=info msg="StopPodSandbox for \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\" returns successfully" Sep 13 00:05:55.590843 env[1805]: time="2025-09-13T00:05:55.589716351Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-mxhm5,Uid:a6ba0554-7bef-42d6-9956-756ffc73e462,Namespace:calico-apiserver,Attempt:1,}" Sep 13 00:05:55.605540 env[1805]: time="2025-09-13T00:05:55.605483570Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:55.609000 audit[4521]: NETFILTER_CFG table=filter:103 family=2 entries=20 op=nft_register_rule pid=4521 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:55.609000 audit[4521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdb1805a0 a2=0 a3=1 items=0 ppid=3004 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.609000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:55.615000 audit[4521]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=4521 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:55.615000 audit[4521]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffdb1805a0 a2=0 a3=1 items=0 ppid=3004 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.615000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:55.620528 env[1805]: time="2025-09-13T00:05:55.620473355Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:55.649931 env[1805]: time="2025-09-13T00:05:55.645863753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:55.659699 env[1805]: time="2025-09-13T00:05:55.655553905Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:05:55.659699 env[1805]: time="2025-09-13T00:05:55.656146080Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 13 00:05:55.664027 systemd[1]: run-netns-cni\x2dbe46291e\x2decbb\x2de6d6\x2d20f6\x2d1a8ccd72aaea.mount: Deactivated successfully. Sep 13 00:05:55.664201 systemd[1]: run-netns-cni\x2d041e76a2\x2d4f07\x2d1dd2\x2dd9f1\x2d17dbc3c683c0.mount: Deactivated successfully. Sep 13 00:05:55.671421 env[1805]: time="2025-09-13T00:05:55.671348005Z" level=info msg="CreateContainer within sandbox \"95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 13 00:05:55.731452 kernel: kauditd_printk_skb: 341 callbacks suppressed Sep 13 00:05:55.731615 kernel: audit: type=1400 audit(1757721955.709:1087): avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.740385 kernel: audit: type=1400 audit(1757721955.709:1087): avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.740540 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.745116 kernel: audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 00:05:55.745507 env[1805]: time="2025-09-13T00:05:55.745432061Z" level=info msg="CreateContainer within sandbox \"95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"9709587ed67e15d85e53fa446babadb40eab11a08c156e8400c07241c4a027d4\"" Sep 13 00:05:55.746470 env[1805]: time="2025-09-13T00:05:55.746425163Z" level=info msg="StartContainer for \"9709587ed67e15d85e53fa446babadb40eab11a08c156e8400c07241c4a027d4\"" Sep 13 00:05:55.754563 kernel: audit: backlog limit exceeded Sep 13 00:05:55.755055 kernel: audit: type=1400 audit(1757721955.709:1087): avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.755151 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.766872 kernel: audit: type=1400 audit(1757721955.709:1087): avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.767308 kernel: audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.777301 kernel: audit: type=1400 audit(1757721955.709:1087): avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.709000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.709000 audit: BPF prog-id=157 op=LOAD Sep 13 00:05:55.709000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe30f2478 a2=40 a3=ffffe30f24a8 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.709000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.712000 audit: BPF prog-id=157 op=UNLOAD Sep 13 00:05:55.712000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.712000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe30f2590 a2=50 a3=0 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.712000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.732000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.732000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe30f24e8 a2=28 a3=ffffe30f2618 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.732000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe30f2518 a2=28 a3=ffffe30f2648 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe30f23c8 a2=28 a3=ffffe30f24f8 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe30f2538 a2=28 a3=ffffe30f2668 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe30f2518 a2=28 a3=ffffe30f2648 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe30f2508 a2=28 a3=ffffe30f2638 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe30f2538 a2=28 a3=ffffe30f2668 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe30f2518 a2=28 a3=ffffe30f2648 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe30f2538 a2=28 a3=ffffe30f2668 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe30f2508 a2=28 a3=ffffe30f2638 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe30f2588 a2=28 a3=ffffe30f26c8 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe30f22c0 a2=50 a3=0 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { perfmon } for pid=4453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit[4453]: AVC avc: denied { bpf } for pid=4453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.737000 audit: BPF prog-id=158 op=LOAD Sep 13 00:05:55.737000 audit[4453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe30f22c8 a2=94 a3=5 items=0 ppid=4212 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.737000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.809000 audit: BPF prog-id=159 op=LOAD Sep 13 00:05:55.809000 audit[4552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff4d48e38 a2=98 a3=fffff4d48e28 items=0 ppid=4212 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.809000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:05:55.811000 audit: BPF prog-id=159 op=UNLOAD Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.811000 audit: BPF prog-id=160 op=LOAD Sep 13 00:05:55.811000 audit[4552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff4d48ce8 a2=74 a3=95 items=0 ppid=4212 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.811000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:05:55.812000 audit: BPF prog-id=160 op=UNLOAD Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { perfmon } for pid=4552 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit[4552]: AVC avc: denied { bpf } for pid=4552 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:55.813000 audit: BPF prog-id=161 op=LOAD Sep 13 00:05:55.813000 audit[4552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff4d48d18 a2=40 a3=fffff4d48d48 items=0 ppid=4212 pid=4552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:55.813000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:05:55.814000 audit: BPF prog-id=161 op=UNLOAD Sep 13 00:05:55.914508 env[1805]: time="2025-09-13T00:05:55.914439596Z" level=info msg="StopPodSandbox for \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\"" Sep 13 00:05:55.985038 systemd[1]: run-containerd-runc-k8s.io-9709587ed67e15d85e53fa446babadb40eab11a08c156e8400c07241c4a027d4-runc.OFpcGq.mount: Deactivated successfully. Sep 13 00:05:55.990909 systemd[1]: Started cri-containerd-9709587ed67e15d85e53fa446babadb40eab11a08c156e8400c07241c4a027d4.scope. Sep 13 00:05:56.196747 systemd-networkd[1528]: cali86f151cd3b9: Gained IPv6LL Sep 13 00:05:56.222037 systemd-networkd[1528]: calie01fd21419f: Link UP Sep 13 00:05:56.224888 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:05:56.224994 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie01fd21419f: link becomes ready Sep 13 00:05:56.229472 systemd-networkd[1528]: calie01fd21419f: Gained carrier Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.233000 audit: BPF prog-id=162 op=LOAD Sep 13 00:05:56.239000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.239000 audit[4549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4168 pid=4549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303935383765643637653135643835653533666134343662616261 Sep 13 00:05:56.240000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.240000 audit[4549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4168 pid=4549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303935383765643637653135643835653533666134343662616261 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.241000 audit: BPF prog-id=163 op=LOAD Sep 13 00:05:56.241000 audit[4549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4168 pid=4549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303935383765643637653135643835653533666134343662616261 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.243000 audit: BPF prog-id=164 op=LOAD Sep 13 00:05:56.243000 audit[4549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4168 pid=4549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303935383765643637653135643835653533666134343662616261 Sep 13 00:05:56.247000 audit: BPF prog-id=164 op=UNLOAD Sep 13 00:05:56.247000 audit: BPF prog-id=163 op=UNLOAD Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { perfmon } for pid=4549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit[4549]: AVC avc: denied { bpf } for pid=4549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.247000 audit: BPF prog-id=165 op=LOAD Sep 13 00:05:56.247000 audit[4549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4168 pid=4549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937303935383765643637653135643835653533666134343662616261 Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:55.915 [INFO][4527] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0 calico-kube-controllers-79454d85df- calico-system 037d762d-2612-437e-bef1-8e3b01281517 928 0 2025-09-13 00:05:30 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:79454d85df projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-27-41 calico-kube-controllers-79454d85df-z9hzc eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calie01fd21419f [] [] }} ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:55.915 [INFO][4527] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.102 [INFO][4584] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" HandleID="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.103 [INFO][4584] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" HandleID="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002aaa10), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-41", "pod":"calico-kube-controllers-79454d85df-z9hzc", "timestamp":"2025-09-13 00:05:56.100448319 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.103 [INFO][4584] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.103 [INFO][4584] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.103 [INFO][4584] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.127 [INFO][4584] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.136 [INFO][4584] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.146 [INFO][4584] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.151 [INFO][4584] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.158 [INFO][4584] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.158 [INFO][4584] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.162 [INFO][4584] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68 Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.170 [INFO][4584] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.199 [INFO][4584] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.3/26] block=192.168.102.0/26 handle="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.199 [INFO][4584] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.3/26] handle="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" host="ip-172-31-27-41" Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.199 [INFO][4584] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:56.308755 env[1805]: 2025-09-13 00:05:56.199 [INFO][4584] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.3/26] IPv6=[] ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" HandleID="k8s-pod-network.5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:56.310426 env[1805]: 2025-09-13 00:05:56.206 [INFO][4527] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0", GenerateName:"calico-kube-controllers-79454d85df-", Namespace:"calico-system", SelfLink:"", UID:"037d762d-2612-437e-bef1-8e3b01281517", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79454d85df", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"calico-kube-controllers-79454d85df-z9hzc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.102.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie01fd21419f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:56.310426 env[1805]: 2025-09-13 00:05:56.206 [INFO][4527] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.3/32] ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:56.310426 env[1805]: 2025-09-13 00:05:56.206 [INFO][4527] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie01fd21419f ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:56.310426 env[1805]: 2025-09-13 00:05:56.239 [INFO][4527] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:56.310426 env[1805]: 2025-09-13 00:05:56.244 [INFO][4527] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0", GenerateName:"calico-kube-controllers-79454d85df-", Namespace:"calico-system", SelfLink:"", UID:"037d762d-2612-437e-bef1-8e3b01281517", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79454d85df", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68", Pod:"calico-kube-controllers-79454d85df-z9hzc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.102.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie01fd21419f", MAC:"5e:fd:70:24:cb:28", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:56.310426 env[1805]: 2025-09-13 00:05:56.287 [INFO][4527] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68" Namespace="calico-system" Pod="calico-kube-controllers-79454d85df-z9hzc" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:05:56.330905 systemd-networkd[1528]: vxlan.calico: Link UP Sep 13 00:05:56.330919 systemd-networkd[1528]: vxlan.calico: Gained carrier Sep 13 00:05:56.333000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:56.333000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400610d780 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:05:56.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:05:56.333000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:56.333000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4006012060 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:05:56.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:05:56.333000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:56.333000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=40060120c0 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:05:56.333000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:05:56.346000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:56.346000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=40068115f0 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:05:56.346000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:05:56.406015 env[1805]: time="2025-09-13T00:05:56.405863591Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:56.406207 env[1805]: time="2025-09-13T00:05:56.406030297Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:56.406207 env[1805]: time="2025-09-13T00:05:56.406112367Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:56.406508 env[1805]: time="2025-09-13T00:05:56.406428957Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68 pid=4637 runtime=io.containerd.runc.v2 Sep 13 00:05:56.427885 systemd-networkd[1528]: calidd58af4d211: Link UP Sep 13 00:05:56.429828 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidd58af4d211: link becomes ready Sep 13 00:05:56.429315 systemd-networkd[1528]: calidd58af4d211: Gained carrier Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:55.925 [INFO][4522] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0 calico-apiserver-58c7664cd6- calico-apiserver a6ba0554-7bef-42d6-9956-756ffc73e462 930 0 2025-09-13 00:05:20 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:58c7664cd6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-41 calico-apiserver-58c7664cd6-mxhm5 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidd58af4d211 [] [] }} ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:55.925 [INFO][4522] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.166 [INFO][4596] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" HandleID="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.167 [INFO][4596] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" HandleID="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004dad0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-41", "pod":"calico-apiserver-58c7664cd6-mxhm5", "timestamp":"2025-09-13 00:05:56.166893892 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.168 [INFO][4596] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.252 [INFO][4596] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.252 [INFO][4596] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.289 [INFO][4596] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.308 [INFO][4596] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.355 [INFO][4596] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.366 [INFO][4596] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.371 [INFO][4596] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.372 [INFO][4596] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.375 [INFO][4596] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8 Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.386 [INFO][4596] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.410 [INFO][4596] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.4/26] block=192.168.102.0/26 handle="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.410 [INFO][4596] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.4/26] handle="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" host="ip-172-31-27-41" Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.410 [INFO][4596] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:56.464298 env[1805]: 2025-09-13 00:05:56.410 [INFO][4596] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.4/26] IPv6=[] ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" HandleID="k8s-pod-network.68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:56.465622 env[1805]: 2025-09-13 00:05:56.415 [INFO][4522] cni-plugin/k8s.go 418: Populated endpoint ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6ba0554-7bef-42d6-9956-756ffc73e462", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"calico-apiserver-58c7664cd6-mxhm5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd58af4d211", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:56.465622 env[1805]: 2025-09-13 00:05:56.415 [INFO][4522] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.4/32] ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:56.465622 env[1805]: 2025-09-13 00:05:56.415 [INFO][4522] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidd58af4d211 ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:56.465622 env[1805]: 2025-09-13 00:05:56.432 [INFO][4522] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:56.465622 env[1805]: 2025-09-13 00:05:56.436 [INFO][4522] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6ba0554-7bef-42d6-9956-756ffc73e462", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8", Pod:"calico-apiserver-58c7664cd6-mxhm5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd58af4d211", MAC:"7a:13:b8:d7:09:1d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:56.465622 env[1805]: 2025-09-13 00:05:56.460 [INFO][4522] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-mxhm5" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:05:56.478000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:56.478000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=4003047240 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:05:56.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:05:56.478000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:05:56.478000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=4003fe00f0 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:05:56.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:05:56.503012 env[1805]: time="2025-09-13T00:05:56.501996105Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:56.510998 env[1805]: time="2025-09-13T00:05:56.503384313Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:56.510998 env[1805]: time="2025-09-13T00:05:56.503508299Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:56.510998 env[1805]: time="2025-09-13T00:05:56.504355742Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8 pid=4672 runtime=io.containerd.runc.v2 Sep 13 00:05:56.527258 systemd[1]: Started cri-containerd-5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68.scope. Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.259 [INFO][4592] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.259 [INFO][4592] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" iface="eth0" netns="/var/run/netns/cni-aa4a0ba8-2356-c067-58fd-11931516d815" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.260 [INFO][4592] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" iface="eth0" netns="/var/run/netns/cni-aa4a0ba8-2356-c067-58fd-11931516d815" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.273 [INFO][4592] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" iface="eth0" netns="/var/run/netns/cni-aa4a0ba8-2356-c067-58fd-11931516d815" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.273 [INFO][4592] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.273 [INFO][4592] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.475 [INFO][4620] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.483 [INFO][4620] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.484 [INFO][4620] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.532 [WARNING][4620] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.532 [INFO][4620] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.539 [INFO][4620] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:56.549093 env[1805]: 2025-09-13 00:05:56.544 [INFO][4592] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:05:56.550395 env[1805]: time="2025-09-13T00:05:56.550329216Z" level=info msg="TearDown network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\" successfully" Sep 13 00:05:56.550536 env[1805]: time="2025-09-13T00:05:56.550503243Z" level=info msg="StopPodSandbox for \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\" returns successfully" Sep 13 00:05:56.551764 env[1805]: time="2025-09-13T00:05:56.551596727Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7h5lc,Uid:00fac785-3036-476f-9a65-bb93b0ebd4d3,Namespace:kube-system,Attempt:1,}" Sep 13 00:05:56.559000 audit[4661]: NETFILTER_CFG table=filter:105 family=2 entries=17 op=nft_register_rule pid=4661 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:56.559000 audit[4661]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff1beed20 a2=0 a3=1 items=0 ppid=3004 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.559000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:56.591000 audit[4661]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=4661 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:56.590909 systemd[1]: Started cri-containerd-68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8.scope. Sep 13 00:05:56.591000 audit[4661]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffff1beed20 a2=0 a3=1 items=0 ppid=3004 pid=4661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.591000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:56.659742 systemd[1]: run-netns-cni\x2daa4a0ba8\x2d2356\x2dc067\x2d58fd\x2d11931516d815.mount: Deactivated successfully. Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.670000 audit: BPF prog-id=166 op=LOAD Sep 13 00:05:56.674000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.674000 audit[4684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4672 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653537356363353265333664343334363039666435386633616361 Sep 13 00:05:56.676000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.676000 audit[4684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4672 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653537356363353265333664343334363039666435386633616361 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.677000 audit: BPF prog-id=167 op=LOAD Sep 13 00:05:56.677000 audit[4684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4672 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653537356363353265333664343334363039666435386633616361 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.680000 audit: BPF prog-id=168 op=LOAD Sep 13 00:05:56.680000 audit[4684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4672 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653537356363353265333664343334363039666435386633616361 Sep 13 00:05:56.682000 audit: BPF prog-id=168 op=UNLOAD Sep 13 00:05:56.683000 audit: BPF prog-id=167 op=UNLOAD Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { perfmon } for pid=4684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit[4684]: AVC avc: denied { bpf } for pid=4684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.683000 audit: BPF prog-id=169 op=LOAD Sep 13 00:05:56.683000 audit[4684]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4672 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653537356363353265333664343334363039666435386633616361 Sep 13 00:05:56.702115 env[1805]: time="2025-09-13T00:05:56.702049366Z" level=info msg="StartContainer for \"9709587ed67e15d85e53fa446babadb40eab11a08c156e8400c07241c4a027d4\" returns successfully" Sep 13 00:05:56.708260 env[1805]: time="2025-09-13T00:05:56.708184895Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.828000 audit: BPF prog-id=170 op=LOAD Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4637 pid=4647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566346637313831396437343165653264376637373936663436393566 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4637 pid=4647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566346637313831396437343165653264376637373936663436393566 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.829000 audit: BPF prog-id=171 op=LOAD Sep 13 00:05:56.829000 audit[4647]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4637 pid=4647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.829000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566346637313831396437343165653264376637373936663436393566 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit: BPF prog-id=172 op=LOAD Sep 13 00:05:56.830000 audit[4647]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4637 pid=4647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566346637313831396437343165653264376637373936663436393566 Sep 13 00:05:56.830000 audit: BPF prog-id=172 op=UNLOAD Sep 13 00:05:56.830000 audit: BPF prog-id=171 op=UNLOAD Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { perfmon } for pid=4647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit[4647]: AVC avc: denied { bpf } for pid=4647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.830000 audit: BPF prog-id=173 op=LOAD Sep 13 00:05:56.830000 audit[4647]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4637 pid=4647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566346637313831396437343165653264376637373936663436393566 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.868000 audit: BPF prog-id=174 op=LOAD Sep 13 00:05:56.868000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff841ceb8 a2=98 a3=fffff841cea8 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.868000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit: BPF prog-id=174 op=UNLOAD Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit: BPF prog-id=175 op=LOAD Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff841cb98 a2=74 a3=95 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit: BPF prog-id=175 op=UNLOAD Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit: BPF prog-id=176 op=LOAD Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff841cbf8 a2=94 a3=2 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit: BPF prog-id=176 op=UNLOAD Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff841cc28 a2=28 a3=fffff841cd58 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff841cc58 a2=28 a3=fffff841cd88 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff841cb08 a2=28 a3=fffff841cc38 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff841cc78 a2=28 a3=fffff841cda8 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff841cc58 a2=28 a3=fffff841cd88 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.869000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.869000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff841cc48 a2=28 a3=fffff841cd78 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff841cc78 a2=28 a3=fffff841cda8 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff841cc58 a2=28 a3=fffff841cd88 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff841cc78 a2=28 a3=fffff841cda8 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff841cc48 a2=28 a3=fffff841cd78 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffff841ccc8 a2=28 a3=fffff841ce08 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.870000 audit: BPF prog-id=177 op=LOAD Sep 13 00:05:56.870000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff841cae8 a2=40 a3=fffff841cb18 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.871000 audit: BPF prog-id=177 op=UNLOAD Sep 13 00:05:56.871000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.871000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffff841cb10 a2=50 a3=0 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.871000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffff841cb10 a2=50 a3=0 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.876000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.876000 audit: BPF prog-id=178 op=LOAD Sep 13 00:05:56.876000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff841c278 a2=94 a3=2 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.876000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.880000 audit: BPF prog-id=178 op=UNLOAD Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { perfmon } for pid=4745 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit[4745]: AVC avc: denied { bpf } for pid=4745 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.880000 audit: BPF prog-id=179 op=LOAD Sep 13 00:05:56.880000 audit[4745]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff841c408 a2=94 a3=30 items=0 ppid=4212 pid=4745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.880000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:05:56.938196 env[1805]: time="2025-09-13T00:05:56.937964099Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-mxhm5,Uid:a6ba0554-7bef-42d6-9956-756ffc73e462,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8\"" Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.937000 audit: BPF prog-id=180 op=LOAD Sep 13 00:05:56.937000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff621d3d8 a2=98 a3=fffff621d3c8 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:56.938000 audit: BPF prog-id=180 op=UNLOAD Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit: BPF prog-id=181 op=LOAD Sep 13 00:05:56.938000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff621d068 a2=74 a3=95 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.938000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:56.938000 audit: BPF prog-id=181 op=UNLOAD Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:56.938000 audit: BPF prog-id=182 op=LOAD Sep 13 00:05:56.938000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff621d0c8 a2=94 a3=2 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:56.938000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:56.938000 audit: BPF prog-id=182 op=UNLOAD Sep 13 00:05:56.944000 audit[4601]: AVC avc: denied { search } for pid=4601 comm="nginx" name="crypto" dev="proc" ino=23962 scontext=system_u:system_r:svirt_lxc_net_t:s0:c95,c938 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 13 00:05:56.944000 audit[4601]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffa88ce958 a2=0 a3=0 items=0 ppid=4168 pid=4601 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c95,c938 key=(null) Sep 13 00:05:56.944000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 13 00:05:57.109599 systemd-networkd[1528]: calibab751eeb13: Link UP Sep 13 00:05:57.115754 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibab751eeb13: link becomes ready Sep 13 00:05:57.118030 systemd-networkd[1528]: calibab751eeb13: Gained carrier Sep 13 00:05:57.157960 env[1805]: time="2025-09-13T00:05:57.156318679Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79454d85df-z9hzc,Uid:037d762d-2612-437e-bef1-8e3b01281517,Namespace:calico-system,Attempt:1,} returns sandbox id \"5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68\"" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.793 [INFO][4693] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0 coredns-668d6bf9bc- kube-system 00fac785-3036-476f-9a65-bb93b0ebd4d3 938 0 2025-09-13 00:05:06 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-41 coredns-668d6bf9bc-7h5lc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calibab751eeb13 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.793 [INFO][4693] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.971 [INFO][4732] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" HandleID="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.971 [INFO][4732] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" HandleID="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb860), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-41", "pod":"coredns-668d6bf9bc-7h5lc", "timestamp":"2025-09-13 00:05:56.971422624 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.971 [INFO][4732] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.971 [INFO][4732] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.972 [INFO][4732] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:56.992 [INFO][4732] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.013 [INFO][4732] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.028 [INFO][4732] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.036 [INFO][4732] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.048 [INFO][4732] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.048 [INFO][4732] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.052 [INFO][4732] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.062 [INFO][4732] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.089 [INFO][4732] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.5/26] block=192.168.102.0/26 handle="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.089 [INFO][4732] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.5/26] handle="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" host="ip-172-31-27-41" Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.089 [INFO][4732] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:57.177042 env[1805]: 2025-09-13 00:05:57.089 [INFO][4732] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.5/26] IPv6=[] ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" HandleID="k8s-pod-network.2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:57.178394 env[1805]: 2025-09-13 00:05:57.099 [INFO][4693] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"00fac785-3036-476f-9a65-bb93b0ebd4d3", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"coredns-668d6bf9bc-7h5lc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibab751eeb13", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:57.178394 env[1805]: 2025-09-13 00:05:57.099 [INFO][4693] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.5/32] ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:57.178394 env[1805]: 2025-09-13 00:05:57.100 [INFO][4693] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibab751eeb13 ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:57.178394 env[1805]: 2025-09-13 00:05:57.112 [INFO][4693] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:57.178394 env[1805]: 2025-09-13 00:05:57.139 [INFO][4693] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"00fac785-3036-476f-9a65-bb93b0ebd4d3", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c", Pod:"coredns-668d6bf9bc-7h5lc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibab751eeb13", MAC:"82:e5:c1:08:7f:29", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:57.178394 env[1805]: 2025-09-13 00:05:57.170 [INFO][4693] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c" Namespace="kube-system" Pod="coredns-668d6bf9bc-7h5lc" WorkloadEndpoint="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:05:57.215572 env[1805]: time="2025-09-13T00:05:57.215426106Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:57.215759 env[1805]: time="2025-09-13T00:05:57.215598009Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:57.217735 env[1805]: time="2025-09-13T00:05:57.217616012Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:57.218164 env[1805]: time="2025-09-13T00:05:57.218086864Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c pid=4783 runtime=io.containerd.runc.v2 Sep 13 00:05:57.249348 systemd[1]: Started cri-containerd-2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c.scope. Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.329000 audit: BPF prog-id=183 op=LOAD Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4783 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237393764313366343439653939363131353634613430616662653731 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4783 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237393764313366343439653939363131353634613430616662653731 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit: BPF prog-id=184 op=LOAD Sep 13 00:05:57.330000 audit[4793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4783 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237393764313366343439653939363131353634613430616662653731 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit: BPF prog-id=185 op=LOAD Sep 13 00:05:57.330000 audit[4793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4783 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237393764313366343439653939363131353634613430616662653731 Sep 13 00:05:57.330000 audit: BPF prog-id=185 op=UNLOAD Sep 13 00:05:57.330000 audit: BPF prog-id=184 op=UNLOAD Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { perfmon } for pid=4793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit[4793]: AVC avc: denied { bpf } for pid=4793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.330000 audit: BPF prog-id=186 op=LOAD Sep 13 00:05:57.330000 audit[4793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4783 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237393764313366343439653939363131353634613430616662653731 Sep 13 00:05:57.393987 env[1805]: time="2025-09-13T00:05:57.393836984Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-7h5lc,Uid:00fac785-3036-476f-9a65-bb93b0ebd4d3,Namespace:kube-system,Attempt:1,} returns sandbox id \"2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c\"" Sep 13 00:05:57.404810 env[1805]: time="2025-09-13T00:05:57.404753332Z" level=info msg="CreateContainer within sandbox \"2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 00:05:57.455370 env[1805]: time="2025-09-13T00:05:57.455275846Z" level=info msg="CreateContainer within sandbox \"2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"9e452808defc626585b757626152dbab499469533add9c0ce7d5dcef93371c88\"" Sep 13 00:05:57.456424 env[1805]: time="2025-09-13T00:05:57.456348701Z" level=info msg="StartContainer for \"9e452808defc626585b757626152dbab499469533add9c0ce7d5dcef93371c88\"" Sep 13 00:05:57.492885 systemd[1]: Started cri-containerd-9e452808defc626585b757626152dbab499469533add9c0ce7d5dcef93371c88.scope. Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.533000 audit: BPF prog-id=187 op=LOAD Sep 13 00:05:57.533000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff621d088 a2=40 a3=fffff621d0b8 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.533000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.535000 audit: BPF prog-id=187 op=UNLOAD Sep 13 00:05:57.536000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.536000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff621d1a0 a2=50 a3=0 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.536000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.552000 audit: BPF prog-id=188 op=LOAD Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4783 pid=4823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965343532383038646566633632363538356237353736323631353264 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4783 pid=4823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965343532383038646566633632363538356237353736323631353264 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit: BPF prog-id=189 op=LOAD Sep 13 00:05:57.553000 audit[4823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4783 pid=4823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965343532383038646566633632363538356237353736323631353264 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit: BPF prog-id=190 op=LOAD Sep 13 00:05:57.553000 audit[4823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4783 pid=4823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965343532383038646566633632363538356237353736323631353264 Sep 13 00:05:57.553000 audit: BPF prog-id=190 op=UNLOAD Sep 13 00:05:57.553000 audit: BPF prog-id=189 op=UNLOAD Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { perfmon } for pid=4823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit[4823]: AVC avc: denied { bpf } for pid=4823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.553000 audit: BPF prog-id=191 op=LOAD Sep 13 00:05:57.553000 audit[4823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4783 pid=4823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965343532383038646566633632363538356237353736323631353264 Sep 13 00:05:57.569000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.569000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff621d0f8 a2=28 a3=fffff621d228 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.569000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.570000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.570000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff621d128 a2=28 a3=fffff621d258 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.570000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.571000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.571000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff621cfd8 a2=28 a3=fffff621d108 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.571000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.571000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.571000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff621d148 a2=28 a3=fffff621d278 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.571000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.571000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.571000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff621d128 a2=28 a3=fffff621d258 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.571000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.572000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.572000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff621d118 a2=28 a3=fffff621d248 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.572000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.572000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.572000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff621d148 a2=28 a3=fffff621d278 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.572000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.579000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.579000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff621d128 a2=28 a3=fffff621d258 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.579000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.579000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.579000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff621d148 a2=28 a3=fffff621d278 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.579000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.579000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.579000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff621d118 a2=28 a3=fffff621d248 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.579000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.579000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.579000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff621d198 a2=28 a3=fffff621d2d8 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.579000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff621ced0 a2=50 a3=0 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.584000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.584000 audit: BPF prog-id=192 op=LOAD Sep 13 00:05:57.584000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff621ced8 a2=94 a3=5 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.584000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.584000 audit: BPF prog-id=192 op=UNLOAD Sep 13 00:05:57.585000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.585000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff621cfe0 a2=50 a3=0 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.585000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.589000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.589000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff621d128 a2=4 a3=3 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.589000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.590000 audit[4755]: AVC avc: denied { confidentiality } for pid=4755 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:05:57.590000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff621d108 a2=94 a3=6 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.590000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.592000 audit[4755]: AVC avc: denied { confidentiality } for pid=4755 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:05:57.592000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff621c8d8 a2=94 a3=83 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.592000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { perfmon } for pid=4755 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.594000 audit[4755]: AVC avc: denied { confidentiality } for pid=4755 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:05:57.594000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff621c8d8 a2=94 a3=83 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.594000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.597000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.597000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff621e318 a2=10 a3=fffff621e408 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.597000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.598000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.598000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff621e1d8 a2=10 a3=fffff621e2c8 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.598000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.601000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.601000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff621e148 a2=10 a3=fffff621e2c8 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.602750 env[1805]: time="2025-09-13T00:05:57.602611241Z" level=info msg="StartContainer for \"9e452808defc626585b757626152dbab499469533add9c0ce7d5dcef93371c88\" returns successfully" Sep 13 00:05:57.601000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.602000 audit[4755]: AVC avc: denied { bpf } for pid=4755 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:57.602000 audit[4755]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff621e148 a2=10 a3=fffff621e2c8 items=0 ppid=4212 pid=4755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.602000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:05:57.628000 audit[4833]: AVC avc: denied { getattr } for pid=4833 comm="coredns" path="cgroup:[4026532990]" dev="nsfs" ino=4026532990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c359,c1023 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 00:05:57.628000 audit[4833]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=4783 pid=4833 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c359,c1023 key=(null) Sep 13 00:05:57.628000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 00:05:57.624000 audit: BPF prog-id=179 op=UNLOAD Sep 13 00:05:57.624000 audit[4212]: SYSCALL arch=c00000b7 syscall=22 success=yes exit=1 a0=4 a1=ffffc6b2ca10 a2=80 a3=8 items=0 ppid=4197 pid=4212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.624000 audit: PROCTITLE proctitle=63616C69636F2D6E6F6465002D66656C6978 Sep 13 00:05:57.726896 systemd-networkd[1528]: calidd58af4d211: Gained IPv6LL Sep 13 00:05:57.790877 systemd-networkd[1528]: vxlan.calico: Gained IPv6LL Sep 13 00:05:57.869000 audit[4879]: NETFILTER_CFG table=mangle:107 family=2 entries=16 op=nft_register_chain pid=4879 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:57.869000 audit[4879]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffe1b34a90 a2=0 a3=ffffa81e3fa8 items=0 ppid=4212 pid=4879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.869000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:57.889000 audit[4880]: NETFILTER_CFG table=nat:108 family=2 entries=15 op=nft_register_chain pid=4880 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:57.889000 audit[4880]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd68b1410 a2=0 a3=ffffa49d2fa8 items=0 ppid=4212 pid=4880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.889000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:57.889000 audit[4878]: NETFILTER_CFG table=raw:109 family=2 entries=21 op=nft_register_chain pid=4878 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:57.889000 audit[4878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff6765840 a2=0 a3=ffffb0584fa8 items=0 ppid=4212 pid=4878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.889000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:57.911388 env[1805]: time="2025-09-13T00:05:57.911304704Z" level=info msg="StopPodSandbox for \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\"" Sep 13 00:05:57.912293 env[1805]: time="2025-09-13T00:05:57.911797684Z" level=info msg="StopPodSandbox for \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\"" Sep 13 00:05:57.919647 systemd-networkd[1528]: calie01fd21419f: Gained IPv6LL Sep 13 00:05:57.902000 audit[4883]: NETFILTER_CFG table=filter:110 family=2 entries=128 op=nft_register_chain pid=4883 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:57.902000 audit[4883]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=72768 a0=3 a1=ffffda7c5fe0 a2=0 a3=ffff9073cfa8 items=0 ppid=4212 pid=4883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:57.902000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:58.169000 audit[4933]: NETFILTER_CFG table=filter:111 family=2 entries=106 op=nft_register_chain pid=4933 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:58.169000 audit[4933]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=61140 a0=3 a1=fffff9b0d2c0 a2=0 a3=ffff8cc39fa8 items=0 ppid=4212 pid=4933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:58.169000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.159 [INFO][4915] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.159 [INFO][4915] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" iface="eth0" netns="/var/run/netns/cni-3f783888-bba8-4925-e6fb-8b67099de8d9" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.159 [INFO][4915] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" iface="eth0" netns="/var/run/netns/cni-3f783888-bba8-4925-e6fb-8b67099de8d9" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.160 [INFO][4915] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" iface="eth0" netns="/var/run/netns/cni-3f783888-bba8-4925-e6fb-8b67099de8d9" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.160 [INFO][4915] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.160 [INFO][4915] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.238 [INFO][4935] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.238 [INFO][4935] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.239 [INFO][4935] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.252 [WARNING][4935] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.252 [INFO][4935] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.255 [INFO][4935] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:58.264166 env[1805]: 2025-09-13 00:05:58.259 [INFO][4915] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:05:58.270556 env[1805]: time="2025-09-13T00:05:58.269630718Z" level=info msg="TearDown network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\" successfully" Sep 13 00:05:58.270556 env[1805]: time="2025-09-13T00:05:58.269766705Z" level=info msg="StopPodSandbox for \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\" returns successfully" Sep 13 00:05:58.269793 systemd[1]: run-netns-cni\x2d3f783888\x2dbba8\x2d4925\x2de6fb\x2d8b67099de8d9.mount: Deactivated successfully. Sep 13 00:05:58.271963 env[1805]: time="2025-09-13T00:05:58.271588251Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cg48,Uid:b0dcc1ee-de25-4df5-b74d-9c2aaea5120e,Namespace:calico-system,Attempt:1,}" Sep 13 00:05:58.303518 systemd-networkd[1528]: calibab751eeb13: Gained IPv6LL Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.124 [INFO][4907] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.124 [INFO][4907] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" iface="eth0" netns="/var/run/netns/cni-aa248aa5-95df-bb79-cd28-1bd8f0bd52ea" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.125 [INFO][4907] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" iface="eth0" netns="/var/run/netns/cni-aa248aa5-95df-bb79-cd28-1bd8f0bd52ea" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.125 [INFO][4907] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" iface="eth0" netns="/var/run/netns/cni-aa248aa5-95df-bb79-cd28-1bd8f0bd52ea" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.125 [INFO][4907] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.125 [INFO][4907] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.250 [INFO][4928] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.251 [INFO][4928] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.255 [INFO][4928] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.289 [WARNING][4928] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.289 [INFO][4928] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.292 [INFO][4928] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:58.303830 env[1805]: 2025-09-13 00:05:58.295 [INFO][4907] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:05:58.308716 systemd[1]: run-netns-cni\x2daa248aa5\x2d95df\x2dbb79\x2dcd28\x2d1bd8f0bd52ea.mount: Deactivated successfully. Sep 13 00:05:58.315117 env[1805]: time="2025-09-13T00:05:58.314361708Z" level=info msg="TearDown network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\" successfully" Sep 13 00:05:58.315117 env[1805]: time="2025-09-13T00:05:58.314460638Z" level=info msg="StopPodSandbox for \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\" returns successfully" Sep 13 00:05:58.316111 env[1805]: time="2025-09-13T00:05:58.316052717Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-dq4cs,Uid:400e4927-6c99-4fc7-ad3d-99920d2dfd9d,Namespace:calico-apiserver,Attempt:1,}" Sep 13 00:05:58.468403 kubelet[2903]: I0913 00:05:58.468168 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-7h5lc" podStartSLOduration=52.468143759 podStartE2EDuration="52.468143759s" podCreationTimestamp="2025-09-13 00:05:06 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:05:58.428975427 +0000 UTC m=+57.919154853" watchObservedRunningTime="2025-09-13 00:05:58.468143759 +0000 UTC m=+57.958323149" Sep 13 00:05:58.570000 audit[4966]: NETFILTER_CFG table=filter:112 family=2 entries=14 op=nft_register_rule pid=4966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:58.570000 audit[4966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc7e31570 a2=0 a3=1 items=0 ppid=3004 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:58.570000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:58.576000 audit[4966]: NETFILTER_CFG table=nat:113 family=2 entries=44 op=nft_register_rule pid=4966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:58.576000 audit[4966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffc7e31570 a2=0 a3=1 items=0 ppid=3004 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:58.576000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:58.631000 audit[4981]: NETFILTER_CFG table=filter:114 family=2 entries=14 op=nft_register_rule pid=4981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:58.631000 audit[4981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd2628fd0 a2=0 a3=1 items=0 ppid=3004 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:58.631000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:58.678000 audit[4981]: NETFILTER_CFG table=nat:115 family=2 entries=56 op=nft_register_chain pid=4981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:05:58.678000 audit[4981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffd2628fd0 a2=0 a3=1 items=0 ppid=3004 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:58.678000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:05:58.802369 systemd-networkd[1528]: cali0ab72e28b96: Link UP Sep 13 00:05:58.809191 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:05:58.809363 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0ab72e28b96: link becomes ready Sep 13 00:05:58.809590 systemd-networkd[1528]: cali0ab72e28b96: Gained carrier Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.565 [INFO][4944] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0 csi-node-driver- calico-system b0dcc1ee-de25-4df5-b74d-9c2aaea5120e 966 0 2025-09-13 00:05:30 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-27-41 csi-node-driver-7cg48 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali0ab72e28b96 [] [] }} ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.566 [INFO][4944] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.671 [INFO][4970] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" HandleID="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.686 [INFO][4970] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" HandleID="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cbb80), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-41", "pod":"csi-node-driver-7cg48", "timestamp":"2025-09-13 00:05:58.671616592 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.686 [INFO][4970] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.686 [INFO][4970] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.687 [INFO][4970] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.723 [INFO][4970] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.732 [INFO][4970] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.744 [INFO][4970] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.749 [INFO][4970] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.758 [INFO][4970] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.758 [INFO][4970] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.761 [INFO][4970] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49 Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.771 [INFO][4970] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.790 [INFO][4970] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.6/26] block=192.168.102.0/26 handle="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.790 [INFO][4970] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.6/26] handle="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" host="ip-172-31-27-41" Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.791 [INFO][4970] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:58.847078 env[1805]: 2025-09-13 00:05:58.791 [INFO][4970] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.6/26] IPv6=[] ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" HandleID="k8s-pod-network.bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.850210 env[1805]: 2025-09-13 00:05:58.794 [INFO][4944] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"csi-node-driver-7cg48", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.102.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0ab72e28b96", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:58.850210 env[1805]: 2025-09-13 00:05:58.795 [INFO][4944] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.6/32] ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.850210 env[1805]: 2025-09-13 00:05:58.795 [INFO][4944] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0ab72e28b96 ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.850210 env[1805]: 2025-09-13 00:05:58.803 [INFO][4944] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.850210 env[1805]: 2025-09-13 00:05:58.810 [INFO][4944] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49", Pod:"csi-node-driver-7cg48", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.102.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0ab72e28b96", MAC:"f2:ef:30:b7:52:e1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:58.850210 env[1805]: 2025-09-13 00:05:58.841 [INFO][4944] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49" Namespace="calico-system" Pod="csi-node-driver-7cg48" WorkloadEndpoint="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:05:58.882634 env[1805]: time="2025-09-13T00:05:58.882514009Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:58.882990 env[1805]: time="2025-09-13T00:05:58.882905515Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:58.883191 env[1805]: time="2025-09-13T00:05:58.883128971Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:58.884118 env[1805]: time="2025-09-13T00:05:58.883816594Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49 pid=4998 runtime=io.containerd.runc.v2 Sep 13 00:05:58.918105 env[1805]: time="2025-09-13T00:05:58.918034520Z" level=info msg="StopPodSandbox for \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\"" Sep 13 00:05:58.993387 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali10b2da7abc7: link becomes ready Sep 13 00:05:58.992585 systemd-networkd[1528]: cali10b2da7abc7: Link UP Sep 13 00:05:58.993013 systemd-networkd[1528]: cali10b2da7abc7: Gained carrier Sep 13 00:05:58.998237 systemd[1]: Started cri-containerd-bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49.scope. Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.564 [INFO][4953] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0 calico-apiserver-58c7664cd6- calico-apiserver 400e4927-6c99-4fc7-ad3d-99920d2dfd9d 965 0 2025-09-13 00:05:20 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:58c7664cd6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-41 calico-apiserver-58c7664cd6-dq4cs eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali10b2da7abc7 [] [] }} ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.564 [INFO][4953] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.714 [INFO][4976] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" HandleID="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.715 [INFO][4976] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" HandleID="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000285820), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-41", "pod":"calico-apiserver-58c7664cd6-dq4cs", "timestamp":"2025-09-13 00:05:58.714742795 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.715 [INFO][4976] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.790 [INFO][4976] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.790 [INFO][4976] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.864 [INFO][4976] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.876 [INFO][4976] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.899 [INFO][4976] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.905 [INFO][4976] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.913 [INFO][4976] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.913 [INFO][4976] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.921 [INFO][4976] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.933 [INFO][4976] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.972 [INFO][4976] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.7/26] block=192.168.102.0/26 handle="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.972 [INFO][4976] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.7/26] handle="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" host="ip-172-31-27-41" Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.972 [INFO][4976] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:59.061861 env[1805]: 2025-09-13 00:05:58.972 [INFO][4976] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.7/26] IPv6=[] ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" HandleID="k8s-pod-network.c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:59.063072 env[1805]: 2025-09-13 00:05:58.980 [INFO][4953] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"400e4927-6c99-4fc7-ad3d-99920d2dfd9d", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"calico-apiserver-58c7664cd6-dq4cs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10b2da7abc7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:59.063072 env[1805]: 2025-09-13 00:05:58.983 [INFO][4953] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.7/32] ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:59.063072 env[1805]: 2025-09-13 00:05:58.983 [INFO][4953] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali10b2da7abc7 ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:59.063072 env[1805]: 2025-09-13 00:05:58.994 [INFO][4953] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:59.063072 env[1805]: 2025-09-13 00:05:58.995 [INFO][4953] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"400e4927-6c99-4fc7-ad3d-99920d2dfd9d", ResourceVersion:"965", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a", Pod:"calico-apiserver-58c7664cd6-dq4cs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10b2da7abc7", MAC:"1a:be:d0:90:ab:25", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:59.063072 env[1805]: 2025-09-13 00:05:59.052 [INFO][4953] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a" Namespace="calico-apiserver" Pod="calico-apiserver-58c7664cd6-dq4cs" WorkloadEndpoint="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:05:59.082000 audit[5037]: NETFILTER_CFG table=filter:116 family=2 entries=52 op=nft_register_chain pid=5037 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:59.082000 audit[5037]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24328 a0=3 a1=ffffe8e7dc90 a2=0 a3=ffff89f86fa8 items=0 ppid=4212 pid=5037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.082000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:59.116190 env[1805]: time="2025-09-13T00:05:59.114792505Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:59.116190 env[1805]: time="2025-09-13T00:05:59.114884511Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:59.116190 env[1805]: time="2025-09-13T00:05:59.114911571Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:59.116190 env[1805]: time="2025-09-13T00:05:59.115632951Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a pid=5056 runtime=io.containerd.runc.v2 Sep 13 00:05:59.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.158000 audit: BPF prog-id=193 op=LOAD Sep 13 00:05:59.160000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.160000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4998 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313738623764306333656637393233393037636561646435346335 Sep 13 00:05:59.160000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.160000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4998 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313738623764306333656637393233393037636561646435346335 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit: BPF prog-id=194 op=LOAD Sep 13 00:05:59.161000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4998 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313738623764306333656637393233393037636561646435346335 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.161000 audit: BPF prog-id=195 op=LOAD Sep 13 00:05:59.161000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4998 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313738623764306333656637393233393037636561646435346335 Sep 13 00:05:59.165000 audit: BPF prog-id=195 op=UNLOAD Sep 13 00:05:59.166000 audit: BPF prog-id=194 op=UNLOAD Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.166000 audit: BPF prog-id=196 op=LOAD Sep 13 00:05:59.166000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4998 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313738623764306333656637393233393037636561646435346335 Sep 13 00:05:59.191034 systemd[1]: Started cri-containerd-c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a.scope. Sep 13 00:05:59.265000 audit[5080]: NETFILTER_CFG table=filter:117 family=2 entries=57 op=nft_register_chain pid=5080 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:59.265000 audit[5080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27828 a0=3 a1=ffffc064f460 a2=0 a3=ffffb05f0fa8 items=0 ppid=4212 pid=5080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.265000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:59.277081 env[1805]: time="2025-09-13T00:05:59.277012653Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7cg48,Uid:b0dcc1ee-de25-4df5-b74d-9c2aaea5120e,Namespace:calico-system,Attempt:1,} returns sandbox id \"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49\"" Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.310000 audit: BPF prog-id=197 op=LOAD Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=5056 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336313434353830353134393266373662326136373964323931363064 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=5056 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336313434353830353134393266373662326136373964323931363064 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit: BPF prog-id=198 op=LOAD Sep 13 00:05:59.312000 audit[5067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=5056 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336313434353830353134393266373662326136373964323931363064 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit: BPF prog-id=199 op=LOAD Sep 13 00:05:59.312000 audit[5067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=5056 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336313434353830353134393266373662326136373964323931363064 Sep 13 00:05:59.312000 audit: BPF prog-id=199 op=UNLOAD Sep 13 00:05:59.312000 audit: BPF prog-id=198 op=UNLOAD Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { perfmon } for pid=5067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit[5067]: AVC avc: denied { bpf } for pid=5067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.312000 audit: BPF prog-id=200 op=LOAD Sep 13 00:05:59.312000 audit[5067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=5056 pid=5067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336313434353830353134393266373662326136373964323931363064 Sep 13 00:05:59.390942 env[1805]: time="2025-09-13T00:05:59.390882524Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58c7664cd6-dq4cs,Uid:400e4927-6c99-4fc7-ad3d-99920d2dfd9d,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a\"" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.201 [INFO][5029] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.201 [INFO][5029] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" iface="eth0" netns="/var/run/netns/cni-f26f18b0-72cc-c991-6996-3849fd0bd475" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.202 [INFO][5029] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" iface="eth0" netns="/var/run/netns/cni-f26f18b0-72cc-c991-6996-3849fd0bd475" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.202 [INFO][5029] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" iface="eth0" netns="/var/run/netns/cni-f26f18b0-72cc-c991-6996-3849fd0bd475" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.202 [INFO][5029] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.202 [INFO][5029] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.370 [INFO][5081] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.371 [INFO][5081] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.371 [INFO][5081] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.393 [WARNING][5081] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.393 [INFO][5081] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.402 [INFO][5081] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:59.409416 env[1805]: 2025-09-13 00:05:59.404 [INFO][5029] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:05:59.410494 env[1805]: time="2025-09-13T00:05:59.409679775Z" level=info msg="TearDown network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\" successfully" Sep 13 00:05:59.410494 env[1805]: time="2025-09-13T00:05:59.409751140Z" level=info msg="StopPodSandbox for \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\" returns successfully" Sep 13 00:05:59.411000 env[1805]: time="2025-09-13T00:05:59.410953692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-f9knf,Uid:b1e4c2ec-3183-488e-95d1-65b4d985c105,Namespace:calico-system,Attempt:1,}" Sep 13 00:05:59.662298 systemd[1]: run-netns-cni\x2df26f18b0\x2d72cc\x2dc991\x2d6996\x2d3849fd0bd475.mount: Deactivated successfully. Sep 13 00:05:59.696995 systemd-networkd[1528]: cali1ac94193ac3: Link UP Sep 13 00:05:59.701041 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1ac94193ac3: link becomes ready Sep 13 00:05:59.701258 systemd-networkd[1528]: cali1ac94193ac3: Gained carrier Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.535 [INFO][5108] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0 goldmane-54d579b49d- calico-system b1e4c2ec-3183-488e-95d1-65b4d985c105 986 0 2025-09-13 00:05:29 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-27-41 goldmane-54d579b49d-f9knf eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali1ac94193ac3 [] [] }} ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.536 [INFO][5108] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.591 [INFO][5120] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" HandleID="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.591 [INFO][5120] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" HandleID="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c2ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-41", "pod":"goldmane-54d579b49d-f9knf", "timestamp":"2025-09-13 00:05:59.591125497 +0000 UTC"}, Hostname:"ip-172-31-27-41", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.591 [INFO][5120] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.591 [INFO][5120] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.591 [INFO][5120] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-41' Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.607 [INFO][5120] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.615 [INFO][5120] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.622 [INFO][5120] ipam/ipam.go 511: Trying affinity for 192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.625 [INFO][5120] ipam/ipam.go 158: Attempting to load block cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.633 [INFO][5120] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.102.0/26 host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.634 [INFO][5120] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.102.0/26 handle="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.652 [INFO][5120] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.661 [INFO][5120] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.102.0/26 handle="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.682 [INFO][5120] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.102.8/26] block=192.168.102.0/26 handle="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.682 [INFO][5120] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.102.8/26] handle="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" host="ip-172-31-27-41" Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.682 [INFO][5120] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:05:59.737804 env[1805]: 2025-09-13 00:05:59.682 [INFO][5120] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.102.8/26] IPv6=[] ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" HandleID="k8s-pod-network.4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.739258 env[1805]: 2025-09-13 00:05:59.687 [INFO][5108] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"b1e4c2ec-3183-488e-95d1-65b4d985c105", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"", Pod:"goldmane-54d579b49d-f9knf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.102.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1ac94193ac3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:59.739258 env[1805]: 2025-09-13 00:05:59.687 [INFO][5108] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.102.8/32] ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.739258 env[1805]: 2025-09-13 00:05:59.688 [INFO][5108] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1ac94193ac3 ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.739258 env[1805]: 2025-09-13 00:05:59.702 [INFO][5108] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.739258 env[1805]: 2025-09-13 00:05:59.710 [INFO][5108] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"b1e4c2ec-3183-488e-95d1-65b4d985c105", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f", Pod:"goldmane-54d579b49d-f9knf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.102.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1ac94193ac3", MAC:"92:9d:cf:39:b5:bd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:05:59.739258 env[1805]: 2025-09-13 00:05:59.732 [INFO][5108] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f" Namespace="calico-system" Pod="goldmane-54d579b49d-f9knf" WorkloadEndpoint="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:05:59.784610 env[1805]: time="2025-09-13T00:05:59.784458805Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:05:59.785117 env[1805]: time="2025-09-13T00:05:59.784625596Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:05:59.785117 env[1805]: time="2025-09-13T00:05:59.784719497Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:05:59.785973 env[1805]: time="2025-09-13T00:05:59.785479242Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f pid=5143 runtime=io.containerd.runc.v2 Sep 13 00:05:59.793000 audit[5147]: NETFILTER_CFG table=filter:118 family=2 entries=74 op=nft_register_chain pid=5147 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:05:59.793000 audit[5147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35160 a0=3 a1=ffffc51a1130 a2=0 a3=ffffb5643fa8 items=0 ppid=4212 pid=5147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.793000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:05:59.868278 systemd[1]: run-containerd-runc-k8s.io-4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f-runc.a8Www5.mount: Deactivated successfully. Sep 13 00:05:59.874725 systemd[1]: Started cri-containerd-4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f.scope. Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.918000 audit: BPF prog-id=201 op=LOAD Sep 13 00:05:59.922000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.922000 audit[5154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=5143 pid=5154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461636564656532373536616138303339636238336462306334623736 Sep 13 00:05:59.922000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.922000 audit[5154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=5143 pid=5154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461636564656532373536616138303339636238336462306334623736 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.923000 audit: BPF prog-id=202 op=LOAD Sep 13 00:05:59.923000 audit[5154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=5143 pid=5154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461636564656532373536616138303339636238336462306334623736 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.924000 audit: BPF prog-id=203 op=LOAD Sep 13 00:05:59.924000 audit[5154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=5143 pid=5154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461636564656532373536616138303339636238336462306334623736 Sep 13 00:05:59.925000 audit: BPF prog-id=203 op=UNLOAD Sep 13 00:05:59.925000 audit: BPF prog-id=202 op=UNLOAD Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { perfmon } for pid=5154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit[5154]: AVC avc: denied { bpf } for pid=5154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:05:59.926000 audit: BPF prog-id=204 op=LOAD Sep 13 00:05:59.926000 audit[5154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=5143 pid=5154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:05:59.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461636564656532373536616138303339636238336462306334623736 Sep 13 00:05:59.971792 env[1805]: time="2025-09-13T00:05:59.971628609Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-f9knf,Uid:b1e4c2ec-3183-488e-95d1-65b4d985c105,Namespace:calico-system,Attempt:1,} returns sandbox id \"4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f\"" Sep 13 00:06:00.159456 systemd-networkd[1528]: cali10b2da7abc7: Gained IPv6LL Sep 13 00:06:00.223764 systemd-networkd[1528]: cali0ab72e28b96: Gained IPv6LL Sep 13 00:06:00.760896 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2619062689.mount: Deactivated successfully. Sep 13 00:06:00.800307 env[1805]: time="2025-09-13T00:06:00.800244047Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:00.804708 env[1805]: time="2025-09-13T00:06:00.804574207Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:00.809377 env[1805]: time="2025-09-13T00:06:00.809323595Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:00.813558 env[1805]: time="2025-09-13T00:06:00.813459425Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:00.815167 env[1805]: time="2025-09-13T00:06:00.815090947Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 13 00:06:00.821610 env[1805]: time="2025-09-13T00:06:00.821511589Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 00:06:00.823612 env[1805]: time="2025-09-13T00:06:00.823559421Z" level=info msg="CreateContainer within sandbox \"95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 13 00:06:00.848853 env[1805]: time="2025-09-13T00:06:00.848801138Z" level=info msg="StopPodSandbox for \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\"" Sep 13 00:06:00.868081 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2626812544.mount: Deactivated successfully. Sep 13 00:06:00.878363 env[1805]: time="2025-09-13T00:06:00.878279739Z" level=info msg="CreateContainer within sandbox \"95b79863c2c0496e5477adf622cb9a11805181874f41e6423209a13d2d239099\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"49b1e648283b14d45aa40629b882fdcb005f16b9da40c681db64f31994513e5c\"" Sep 13 00:06:00.881242 env[1805]: time="2025-09-13T00:06:00.879061647Z" level=info msg="StartContainer for \"49b1e648283b14d45aa40629b882fdcb005f16b9da40c681db64f31994513e5c\"" Sep 13 00:06:00.958459 systemd[1]: Started cri-containerd-49b1e648283b14d45aa40629b882fdcb005f16b9da40c681db64f31994513e5c.scope. Sep 13 00:06:01.021000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.024675 kernel: kauditd_printk_skb: 1013 callbacks suppressed Sep 13 00:06:01.024823 kernel: audit: type=1400 audit(1757721961.021:1332): avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.021000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.047326 kernel: audit: type=1400 audit(1757721961.021:1333): avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.021000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40021b43a0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:01.065342 kernel: audit: type=1300 audit(1757721961.021:1332): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40021b43a0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:01.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:01.078136 kernel: audit: type=1327 audit(1757721961.021:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:01.021000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.091969 kernel: audit: type=1400 audit(1757721961.021:1334): avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.021000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021b4560 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:01.104852 kernel: audit: type=1300 audit(1757721961.021:1334): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021b4560 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:01.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:01.115833 kernel: audit: type=1327 audit(1757721961.021:1334): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:01.129181 kernel: audit: type=1400 audit(1757721961.024:1335): avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.024000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:01.128012 systemd-networkd[1528]: cali1ac94193ac3: Gained IPv6LL Sep 13 00:06:01.024000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021b4620 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:01.143587 kernel: audit: type=1300 audit(1757721961.024:1335): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021b4620 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:01.157331 kernel: audit: type=1327 audit(1757721961.024:1335): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:01.024000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:01.021000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002086b20 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:01.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.081000 audit: BPF prog-id=205 op=LOAD Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4168 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623165363438323833623134643435616134303632396238383266 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4168 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623165363438323833623134643435616134303632396238383266 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.082000 audit: BPF prog-id=206 op=LOAD Sep 13 00:06:01.082000 audit[5200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4168 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623165363438323833623134643435616134303632396238383266 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.092000 audit: BPF prog-id=207 op=LOAD Sep 13 00:06:01.092000 audit[5200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4168 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623165363438323833623134643435616134303632396238383266 Sep 13 00:06:01.120000 audit: BPF prog-id=207 op=UNLOAD Sep 13 00:06:01.121000 audit: BPF prog-id=206 op=UNLOAD Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { perfmon } for pid=5200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit[5200]: AVC avc: denied { bpf } for pid=5200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:01.121000 audit: BPF prog-id=208 op=LOAD Sep 13 00:06:01.121000 audit[5200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4168 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623165363438323833623134643435616134303632396238383266 Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.047 [WARNING][5187] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"400e4927-6c99-4fc7-ad3d-99920d2dfd9d", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a", Pod:"calico-apiserver-58c7664cd6-dq4cs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10b2da7abc7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.048 [INFO][5187] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.048 [INFO][5187] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" iface="eth0" netns="" Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.048 [INFO][5187] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.048 [INFO][5187] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.211 [INFO][5221] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.216 [INFO][5221] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.225 [INFO][5221] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.246 [WARNING][5221] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.246 [INFO][5221] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.252 [INFO][5221] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:01.260805 env[1805]: 2025-09-13 00:06:01.256 [INFO][5187] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.260805 env[1805]: time="2025-09-13T00:06:01.259436948Z" level=info msg="TearDown network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\" successfully" Sep 13 00:06:01.260805 env[1805]: time="2025-09-13T00:06:01.259486653Z" level=info msg="StopPodSandbox for \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\" returns successfully" Sep 13 00:06:01.264028 env[1805]: time="2025-09-13T00:06:01.263970439Z" level=info msg="RemovePodSandbox for \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\"" Sep 13 00:06:01.265118 env[1805]: time="2025-09-13T00:06:01.265035299Z" level=info msg="Forcibly stopping sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\"" Sep 13 00:06:01.269511 env[1805]: time="2025-09-13T00:06:01.269132762Z" level=info msg="StartContainer for \"49b1e648283b14d45aa40629b882fdcb005f16b9da40c681db64f31994513e5c\" returns successfully" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.391 [WARNING][5246] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"400e4927-6c99-4fc7-ad3d-99920d2dfd9d", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a", Pod:"calico-apiserver-58c7664cd6-dq4cs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10b2da7abc7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.391 [INFO][5246] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.391 [INFO][5246] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" iface="eth0" netns="" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.391 [INFO][5246] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.391 [INFO][5246] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.455 [INFO][5253] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.455 [INFO][5253] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.455 [INFO][5253] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.482 [WARNING][5253] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.482 [INFO][5253] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" HandleID="k8s-pod-network.b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--dq4cs-eth0" Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.498 [INFO][5253] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:01.503802 env[1805]: 2025-09-13 00:06:01.501 [INFO][5246] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c" Sep 13 00:06:01.504726 env[1805]: time="2025-09-13T00:06:01.503843915Z" level=info msg="TearDown network for sandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\" successfully" Sep 13 00:06:01.513588 env[1805]: time="2025-09-13T00:06:01.513494236Z" level=info msg="RemovePodSandbox \"b2258bfc5e1ffef12f90658a37692396cbd7dadb6b03f3bb2a348bb7acdd519c\" returns successfully" Sep 13 00:06:01.514375 env[1805]: time="2025-09-13T00:06:01.514318205Z" level=info msg="StopPodSandbox for \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\"" Sep 13 00:06:01.612000 audit[5274]: NETFILTER_CFG table=filter:119 family=2 entries=13 op=nft_register_rule pid=5274 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:01.612000 audit[5274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd9bb2560 a2=0 a3=1 items=0 ppid=3004 pid=5274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.612000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:01.694000 audit[5274]: NETFILTER_CFG table=nat:120 family=2 entries=27 op=nft_register_chain pid=5274 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:01.694000 audit[5274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffd9bb2560 a2=0 a3=1 items=0 ppid=3004 pid=5274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.694000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:01.760647 systemd[1]: Started sshd@7-172.31.27.41:22-139.178.89.65:58280.service. Sep 13 00:06:01.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.41:22-139.178.89.65:58280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:01.775076 systemd[1]: run-containerd-runc-k8s.io-49b1e648283b14d45aa40629b882fdcb005f16b9da40c681db64f31994513e5c-runc.eo1uUb.mount: Deactivated successfully. Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.785 [WARNING][5269] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49", Pod:"csi-node-driver-7cg48", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.102.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0ab72e28b96", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.785 [INFO][5269] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.785 [INFO][5269] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" iface="eth0" netns="" Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.785 [INFO][5269] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.785 [INFO][5269] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.881 [INFO][5282] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.882 [INFO][5282] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.882 [INFO][5282] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.900 [WARNING][5282] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.900 [INFO][5282] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.903 [INFO][5282] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:01.909592 env[1805]: 2025-09-13 00:06:01.906 [INFO][5269] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:01.910710 env[1805]: time="2025-09-13T00:06:01.910627614Z" level=info msg="TearDown network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\" successfully" Sep 13 00:06:01.910893 env[1805]: time="2025-09-13T00:06:01.910854969Z" level=info msg="StopPodSandbox for \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\" returns successfully" Sep 13 00:06:01.911691 env[1805]: time="2025-09-13T00:06:01.911607753Z" level=info msg="RemovePodSandbox for \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\"" Sep 13 00:06:01.911923 env[1805]: time="2025-09-13T00:06:01.911858677Z" level=info msg="Forcibly stopping sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\"" Sep 13 00:06:01.992000 audit[5280]: USER_ACCT pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:01.994069 sshd[5280]: Accepted publickey for core from 139.178.89.65 port 58280 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:01.997000 audit[5280]: CRED_ACQ pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:01.997000 audit[5280]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcd47930 a2=3 a3=1 items=0 ppid=1 pid=5280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:01.997000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:01.999764 sshd[5280]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:02.023327 systemd[1]: Started session-8.scope. Sep 13 00:06:02.026839 systemd-logind[1798]: New session 8 of user core. Sep 13 00:06:02.047000 audit[5280]: USER_START pid=5280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:02.050000 audit[5303]: CRED_ACQ pid=5303 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.111 [WARNING][5297] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b0dcc1ee-de25-4df5-b74d-9c2aaea5120e", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49", Pod:"csi-node-driver-7cg48", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.102.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0ab72e28b96", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.111 [INFO][5297] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.111 [INFO][5297] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" iface="eth0" netns="" Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.112 [INFO][5297] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.112 [INFO][5297] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.226 [INFO][5309] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.233 [INFO][5309] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.233 [INFO][5309] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.247 [WARNING][5309] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.248 [INFO][5309] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" HandleID="k8s-pod-network.0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Workload="ip--172--31--27--41-k8s-csi--node--driver--7cg48-eth0" Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.250 [INFO][5309] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:02.281022 env[1805]: 2025-09-13 00:06:02.271 [INFO][5297] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479" Sep 13 00:06:02.283413 env[1805]: time="2025-09-13T00:06:02.283356927Z" level=info msg="TearDown network for sandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\" successfully" Sep 13 00:06:02.293869 env[1805]: time="2025-09-13T00:06:02.293745484Z" level=info msg="RemovePodSandbox \"0094b700b90780109a5e98c58ccca9728bcfe9c49d38f99d8a857c16ab8f0479\" returns successfully" Sep 13 00:06:02.306687 env[1805]: time="2025-09-13T00:06:02.306614718Z" level=info msg="StopPodSandbox for \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\"" Sep 13 00:06:02.473095 sshd[5280]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:02.477000 audit[5280]: USER_END pid=5280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:02.477000 audit[5280]: CRED_DISP pid=5280 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:02.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.41:22-139.178.89.65:58280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:02.480718 systemd[1]: sshd@7-172.31.27.41:22-139.178.89.65:58280.service: Deactivated successfully. Sep 13 00:06:02.482349 systemd[1]: session-8.scope: Deactivated successfully. Sep 13 00:06:02.486789 systemd-logind[1798]: Session 8 logged out. Waiting for processes to exit. Sep 13 00:06:02.489451 systemd-logind[1798]: Removed session 8. Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.516 [WARNING][5332] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"b1e4c2ec-3183-488e-95d1-65b4d985c105", ResourceVersion:"991", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f", Pod:"goldmane-54d579b49d-f9knf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.102.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1ac94193ac3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.517 [INFO][5332] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.517 [INFO][5332] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" iface="eth0" netns="" Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.517 [INFO][5332] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.518 [INFO][5332] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.571 [INFO][5340] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.571 [INFO][5340] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.571 [INFO][5340] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.588 [WARNING][5340] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.588 [INFO][5340] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.591 [INFO][5340] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:02.601771 env[1805]: 2025-09-13 00:06:02.596 [INFO][5332] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.601771 env[1805]: time="2025-09-13T00:06:02.600184622Z" level=info msg="TearDown network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\" successfully" Sep 13 00:06:02.601771 env[1805]: time="2025-09-13T00:06:02.600234350Z" level=info msg="StopPodSandbox for \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\" returns successfully" Sep 13 00:06:02.601771 env[1805]: time="2025-09-13T00:06:02.601032986Z" level=info msg="RemovePodSandbox for \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\"" Sep 13 00:06:02.601771 env[1805]: time="2025-09-13T00:06:02.601189277Z" level=info msg="Forcibly stopping sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\"" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.712 [WARNING][5357] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"b1e4c2ec-3183-488e-95d1-65b4d985c105", ResourceVersion:"991", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f", Pod:"goldmane-54d579b49d-f9knf", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.102.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1ac94193ac3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.713 [INFO][5357] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.713 [INFO][5357] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" iface="eth0" netns="" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.713 [INFO][5357] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.713 [INFO][5357] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.779 [INFO][5364] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.780 [INFO][5364] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.780 [INFO][5364] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.792 [WARNING][5364] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.793 [INFO][5364] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" HandleID="k8s-pod-network.ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Workload="ip--172--31--27--41-k8s-goldmane--54d579b49d--f9knf-eth0" Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.795 [INFO][5364] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:02.801907 env[1805]: 2025-09-13 00:06:02.798 [INFO][5357] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5" Sep 13 00:06:02.803081 env[1805]: time="2025-09-13T00:06:02.802776883Z" level=info msg="TearDown network for sandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\" successfully" Sep 13 00:06:02.807513 env[1805]: time="2025-09-13T00:06:02.807439853Z" level=info msg="RemovePodSandbox \"ec45ceecc017dfdb1163cbe1a5b93f1cbd4a671006ae232685df755bbd63f4d5\" returns successfully" Sep 13 00:06:02.808259 env[1805]: time="2025-09-13T00:06:02.808198372Z" level=info msg="StopPodSandbox for \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\"" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.899 [WARNING][5380] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"00fac785-3036-476f-9a65-bb93b0ebd4d3", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c", Pod:"coredns-668d6bf9bc-7h5lc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibab751eeb13", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.899 [INFO][5380] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.899 [INFO][5380] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" iface="eth0" netns="" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.899 [INFO][5380] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.899 [INFO][5380] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.975 [INFO][5389] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.979 [INFO][5389] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.979 [INFO][5389] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.994 [WARNING][5389] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.994 [INFO][5389] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:02.998 [INFO][5389] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:03.007705 env[1805]: 2025-09-13 00:06:03.002 [INFO][5380] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.007705 env[1805]: time="2025-09-13T00:06:03.007003218Z" level=info msg="TearDown network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\" successfully" Sep 13 00:06:03.007705 env[1805]: time="2025-09-13T00:06:03.007049071Z" level=info msg="StopPodSandbox for \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\" returns successfully" Sep 13 00:06:03.008826 env[1805]: time="2025-09-13T00:06:03.007732433Z" level=info msg="RemovePodSandbox for \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\"" Sep 13 00:06:03.008826 env[1805]: time="2025-09-13T00:06:03.007780925Z" level=info msg="Forcibly stopping sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\"" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.117 [WARNING][5408] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"00fac785-3036-476f-9a65-bb93b0ebd4d3", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"2797d13f449e99611564a40afbe71b2e1d0406e19928101d23093d7a1430a10c", Pod:"coredns-668d6bf9bc-7h5lc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibab751eeb13", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.118 [INFO][5408] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.118 [INFO][5408] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" iface="eth0" netns="" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.118 [INFO][5408] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.118 [INFO][5408] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.165 [INFO][5415] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.166 [INFO][5415] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.166 [INFO][5415] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.179 [WARNING][5415] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.179 [INFO][5415] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" HandleID="k8s-pod-network.fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--7h5lc-eth0" Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.181 [INFO][5415] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:03.187169 env[1805]: 2025-09-13 00:06:03.184 [INFO][5408] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9" Sep 13 00:06:03.188157 env[1805]: time="2025-09-13T00:06:03.187211843Z" level=info msg="TearDown network for sandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\" successfully" Sep 13 00:06:03.191844 env[1805]: time="2025-09-13T00:06:03.191773122Z" level=info msg="RemovePodSandbox \"fd6f8bb5f46ef4d143039a508bbb8d77d1e9f38544ee4d0bbe563be4dabfe2c9\" returns successfully" Sep 13 00:06:03.192588 env[1805]: time="2025-09-13T00:06:03.192472276Z" level=info msg="StopPodSandbox for \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\"" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.291 [WARNING][5431] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a1522724-283e-46a0-a49f-d4dd6e34c25d", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887", Pod:"coredns-668d6bf9bc-ldbcb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86f151cd3b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.292 [INFO][5431] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.292 [INFO][5431] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" iface="eth0" netns="" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.292 [INFO][5431] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.292 [INFO][5431] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.342 [INFO][5438] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.342 [INFO][5438] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.343 [INFO][5438] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.380 [WARNING][5438] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.380 [INFO][5438] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.388 [INFO][5438] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:03.395046 env[1805]: 2025-09-13 00:06:03.391 [INFO][5431] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.402731 env[1805]: time="2025-09-13T00:06:03.395003281Z" level=info msg="TearDown network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\" successfully" Sep 13 00:06:03.402967 env[1805]: time="2025-09-13T00:06:03.402723294Z" level=info msg="StopPodSandbox for \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\" returns successfully" Sep 13 00:06:03.403440 env[1805]: time="2025-09-13T00:06:03.403373176Z" level=info msg="RemovePodSandbox for \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\"" Sep 13 00:06:03.403575 env[1805]: time="2025-09-13T00:06:03.403438265Z" level=info msg="Forcibly stopping sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\"" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.531 [WARNING][5454] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a1522724-283e-46a0-a49f-d4dd6e34c25d", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"95dae7784fe30d307d0acb7ed597e3a64ee1971aa1a0ce3b7fb5704e7d4ec887", Pod:"coredns-668d6bf9bc-ldbcb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.102.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86f151cd3b9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.531 [INFO][5454] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.532 [INFO][5454] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" iface="eth0" netns="" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.532 [INFO][5454] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.532 [INFO][5454] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.584 [INFO][5462] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.584 [INFO][5462] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.584 [INFO][5462] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.597 [WARNING][5462] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.597 [INFO][5462] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" HandleID="k8s-pod-network.4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Workload="ip--172--31--27--41-k8s-coredns--668d6bf9bc--ldbcb-eth0" Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.600 [INFO][5462] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:03.607053 env[1805]: 2025-09-13 00:06:03.603 [INFO][5454] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92" Sep 13 00:06:03.608087 env[1805]: time="2025-09-13T00:06:03.607103514Z" level=info msg="TearDown network for sandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\" successfully" Sep 13 00:06:03.611608 env[1805]: time="2025-09-13T00:06:03.611529959Z" level=info msg="RemovePodSandbox \"4c628a1c5dab55f72e5e10cb631ec88f8e7e190c8c1f3cb4ab6f0c05d9361f92\" returns successfully" Sep 13 00:06:03.612278 env[1805]: time="2025-09-13T00:06:03.612215337Z" level=info msg="StopPodSandbox for \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\"" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.728 [WARNING][5478] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0", GenerateName:"calico-kube-controllers-79454d85df-", Namespace:"calico-system", SelfLink:"", UID:"037d762d-2612-437e-bef1-8e3b01281517", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79454d85df", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68", Pod:"calico-kube-controllers-79454d85df-z9hzc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.102.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie01fd21419f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.729 [INFO][5478] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.729 [INFO][5478] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" iface="eth0" netns="" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.729 [INFO][5478] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.729 [INFO][5478] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.778 [INFO][5485] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.779 [INFO][5485] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.779 [INFO][5485] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.795 [WARNING][5485] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.795 [INFO][5485] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.798 [INFO][5485] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:03.803296 env[1805]: 2025-09-13 00:06:03.800 [INFO][5478] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.804717 env[1805]: time="2025-09-13T00:06:03.804627457Z" level=info msg="TearDown network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\" successfully" Sep 13 00:06:03.804864 env[1805]: time="2025-09-13T00:06:03.804830296Z" level=info msg="StopPodSandbox for \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\" returns successfully" Sep 13 00:06:03.805838 env[1805]: time="2025-09-13T00:06:03.805633300Z" level=info msg="RemovePodSandbox for \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\"" Sep 13 00:06:03.805838 env[1805]: time="2025-09-13T00:06:03.805735745Z" level=info msg="Forcibly stopping sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\"" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.888 [WARNING][5501] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0", GenerateName:"calico-kube-controllers-79454d85df-", Namespace:"calico-system", SelfLink:"", UID:"037d762d-2612-437e-bef1-8e3b01281517", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79454d85df", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68", Pod:"calico-kube-controllers-79454d85df-z9hzc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.102.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie01fd21419f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.888 [INFO][5501] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.889 [INFO][5501] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" iface="eth0" netns="" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.889 [INFO][5501] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.889 [INFO][5501] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.936 [INFO][5508] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.937 [INFO][5508] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.937 [INFO][5508] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.950 [WARNING][5508] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.951 [INFO][5508] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" HandleID="k8s-pod-network.e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Workload="ip--172--31--27--41-k8s-calico--kube--controllers--79454d85df--z9hzc-eth0" Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.954 [INFO][5508] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:03.960404 env[1805]: 2025-09-13 00:06:03.957 [INFO][5501] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5" Sep 13 00:06:03.961310 env[1805]: time="2025-09-13T00:06:03.960444044Z" level=info msg="TearDown network for sandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\" successfully" Sep 13 00:06:03.964977 env[1805]: time="2025-09-13T00:06:03.964903826Z" level=info msg="RemovePodSandbox \"e56048d66fc8e146f1b5bb54700f54fbfb03833efeaf593948a0b46774ba7de5\" returns successfully" Sep 13 00:06:03.965628 env[1805]: time="2025-09-13T00:06:03.965570807Z" level=info msg="StopPodSandbox for \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\"" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.075 [WARNING][5523] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.075 [INFO][5523] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.075 [INFO][5523] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" iface="eth0" netns="" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.075 [INFO][5523] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.075 [INFO][5523] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.130 [INFO][5530] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.130 [INFO][5530] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.130 [INFO][5530] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.145 [WARNING][5530] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.145 [INFO][5530] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.147 [INFO][5530] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:04.154434 env[1805]: 2025-09-13 00:06:04.150 [INFO][5523] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.155345 env[1805]: time="2025-09-13T00:06:04.154483714Z" level=info msg="TearDown network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\" successfully" Sep 13 00:06:04.155345 env[1805]: time="2025-09-13T00:06:04.154529506Z" level=info msg="StopPodSandbox for \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\" returns successfully" Sep 13 00:06:04.156128 env[1805]: time="2025-09-13T00:06:04.156081333Z" level=info msg="RemovePodSandbox for \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\"" Sep 13 00:06:04.156342 env[1805]: time="2025-09-13T00:06:04.156277919Z" level=info msg="Forcibly stopping sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\"" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.252 [WARNING][5546] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" WorkloadEndpoint="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.252 [INFO][5546] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.252 [INFO][5546] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" iface="eth0" netns="" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.252 [INFO][5546] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.252 [INFO][5546] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.297 [INFO][5554] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.298 [INFO][5554] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.298 [INFO][5554] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.312 [WARNING][5554] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.312 [INFO][5554] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" HandleID="k8s-pod-network.2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Workload="ip--172--31--27--41-k8s-whisker--dcc647db9--7ljwb-eth0" Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.316 [INFO][5554] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:04.323096 env[1805]: 2025-09-13 00:06:04.319 [INFO][5546] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3" Sep 13 00:06:04.323922 env[1805]: time="2025-09-13T00:06:04.323164689Z" level=info msg="TearDown network for sandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\" successfully" Sep 13 00:06:04.329792 env[1805]: time="2025-09-13T00:06:04.329719639Z" level=info msg="RemovePodSandbox \"2f79212238acfc6796d7271cf16cbd18a90d62d65a71af75bdce3f3fe3df0ca3\" returns successfully" Sep 13 00:06:04.330712 env[1805]: time="2025-09-13T00:06:04.330618428Z" level=info msg="StopPodSandbox for \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\"" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.427 [WARNING][5570] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6ba0554-7bef-42d6-9956-756ffc73e462", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8", Pod:"calico-apiserver-58c7664cd6-mxhm5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd58af4d211", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.428 [INFO][5570] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.428 [INFO][5570] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" iface="eth0" netns="" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.428 [INFO][5570] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.428 [INFO][5570] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.526 [INFO][5579] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.527 [INFO][5579] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.527 [INFO][5579] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.552 [WARNING][5579] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.552 [INFO][5579] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.556 [INFO][5579] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:04.567283 env[1805]: 2025-09-13 00:06:04.562 [INFO][5570] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.571528 env[1805]: time="2025-09-13T00:06:04.571452727Z" level=info msg="TearDown network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\" successfully" Sep 13 00:06:04.571528 env[1805]: time="2025-09-13T00:06:04.571518188Z" level=info msg="StopPodSandbox for \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\" returns successfully" Sep 13 00:06:04.572453 env[1805]: time="2025-09-13T00:06:04.572391981Z" level=info msg="RemovePodSandbox for \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\"" Sep 13 00:06:04.572590 env[1805]: time="2025-09-13T00:06:04.572468794Z" level=info msg="Forcibly stopping sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\"" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.675 [WARNING][5595] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0", GenerateName:"calico-apiserver-58c7664cd6-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6ba0554-7bef-42d6-9956-756ffc73e462", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 5, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58c7664cd6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-41", ContainerID:"68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8", Pod:"calico-apiserver-58c7664cd6-mxhm5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.102.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd58af4d211", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.675 [INFO][5595] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.675 [INFO][5595] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" iface="eth0" netns="" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.675 [INFO][5595] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.675 [INFO][5595] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.730 [INFO][5603] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.730 [INFO][5603] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.730 [INFO][5603] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.742 [WARNING][5603] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.742 [INFO][5603] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" HandleID="k8s-pod-network.ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Workload="ip--172--31--27--41-k8s-calico--apiserver--58c7664cd6--mxhm5-eth0" Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.745 [INFO][5603] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:06:04.753117 env[1805]: 2025-09-13 00:06:04.748 [INFO][5595] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9" Sep 13 00:06:04.754607 env[1805]: time="2025-09-13T00:06:04.754555209Z" level=info msg="TearDown network for sandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\" successfully" Sep 13 00:06:04.764551 env[1805]: time="2025-09-13T00:06:04.764488975Z" level=info msg="RemovePodSandbox \"ad66438575b61cc37118641ee6414eccc1ab8d348c5065e18174d743cceee3b9\" returns successfully" Sep 13 00:06:04.800306 env[1805]: time="2025-09-13T00:06:04.800227730Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:04.805466 env[1805]: time="2025-09-13T00:06:04.805401316Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:04.809543 env[1805]: time="2025-09-13T00:06:04.809487627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:04.813106 env[1805]: time="2025-09-13T00:06:04.813040769Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:04.814442 env[1805]: time="2025-09-13T00:06:04.814381717Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 00:06:04.818271 env[1805]: time="2025-09-13T00:06:04.818120478Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 13 00:06:04.832056 env[1805]: time="2025-09-13T00:06:04.831997272Z" level=info msg="CreateContainer within sandbox \"68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 00:06:04.869012 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1095738086.mount: Deactivated successfully. Sep 13 00:06:04.871883 env[1805]: time="2025-09-13T00:06:04.871777349Z" level=info msg="CreateContainer within sandbox \"68e575cc52e36d434609fd58f3aca482d877fa5595faddd5ad44b8e6f7ef1fe8\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c78f5c249c84c46e21cb4b22485783b0bf1bc8a23bc5a266c589aa98dd0a0b4e\"" Sep 13 00:06:04.875260 env[1805]: time="2025-09-13T00:06:04.873069648Z" level=info msg="StartContainer for \"c78f5c249c84c46e21cb4b22485783b0bf1bc8a23bc5a266c589aa98dd0a0b4e\"" Sep 13 00:06:04.931782 systemd[1]: Started cri-containerd-c78f5c249c84c46e21cb4b22485783b0bf1bc8a23bc5a266c589aa98dd0a0b4e.scope. Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.977000 audit: BPF prog-id=209 op=LOAD Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4672 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:04.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337386635633234396338346334366532316362346232323438353738 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4672 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:04.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337386635633234396338346334366532316362346232323438353738 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit: BPF prog-id=210 op=LOAD Sep 13 00:06:04.978000 audit[5619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4672 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:04.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337386635633234396338346334366532316362346232323438353738 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.978000 audit: BPF prog-id=211 op=LOAD Sep 13 00:06:04.978000 audit[5619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4672 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:04.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337386635633234396338346334366532316362346232323438353738 Sep 13 00:06:04.979000 audit: BPF prog-id=211 op=UNLOAD Sep 13 00:06:04.979000 audit: BPF prog-id=210 op=UNLOAD Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { perfmon } for pid=5619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit[5619]: AVC avc: denied { bpf } for pid=5619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:04.979000 audit: BPF prog-id=212 op=LOAD Sep 13 00:06:04.979000 audit[5619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4672 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:04.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337386635633234396338346334366532316362346232323438353738 Sep 13 00:06:05.049230 env[1805]: time="2025-09-13T00:06:05.049164060Z" level=info msg="StartContainer for \"c78f5c249c84c46e21cb4b22485783b0bf1bc8a23bc5a266c589aa98dd0a0b4e\" returns successfully" Sep 13 00:06:05.486311 kubelet[2903]: I0913 00:06:05.486196 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-6cfb9f6b68-5ldzn" podStartSLOduration=5.873912626 podStartE2EDuration="13.486150206s" podCreationTimestamp="2025-09-13 00:05:52 +0000 UTC" firstStartedPulling="2025-09-13 00:05:53.205892175 +0000 UTC m=+52.696071577" lastFinishedPulling="2025-09-13 00:06:00.818129683 +0000 UTC m=+60.308309157" observedRunningTime="2025-09-13 00:06:01.44062606 +0000 UTC m=+60.930805474" watchObservedRunningTime="2025-09-13 00:06:05.486150206 +0000 UTC m=+64.976329608" Sep 13 00:06:05.519000 audit[5651]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=5651 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:05.519000 audit[5651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc95fabc0 a2=0 a3=1 items=0 ppid=3004 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:05.519000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:05.525000 audit[5651]: NETFILTER_CFG table=nat:122 family=2 entries=22 op=nft_register_rule pid=5651 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:05.525000 audit[5651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc95fabc0 a2=0 a3=1 items=0 ppid=3004 pid=5651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:05.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:07.470761 kubelet[2903]: I0913 00:06:07.470693 2903 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:06:07.518609 kernel: kauditd_printk_skb: 139 callbacks suppressed Sep 13 00:06:07.518826 kernel: audit: type=1130 audit(1757721967.505:1385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.41:22-139.178.89.65:58288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:07.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.41:22-139.178.89.65:58288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:07.505402 systemd[1]: Started sshd@8-172.31.27.41:22-139.178.89.65:58288.service. Sep 13 00:06:07.735000 audit[5656]: USER_ACCT pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.749052 sshd[5656]: Accepted publickey for core from 139.178.89.65 port 58288 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:07.751308 sshd[5656]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:07.762592 kernel: audit: type=1101 audit(1757721967.735:1386): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.762779 kernel: audit: type=1103 audit(1757721967.749:1387): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.749000 audit[5656]: CRED_ACQ pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.772399 systemd[1]: Started session-9.scope. Sep 13 00:06:07.780629 kernel: audit: type=1006 audit(1757721967.749:1388): pid=5656 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Sep 13 00:06:07.774062 systemd-logind[1798]: New session 9 of user core. Sep 13 00:06:07.796546 kernel: audit: type=1300 audit(1757721967.749:1388): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd6baba0 a2=3 a3=1 items=0 ppid=1 pid=5656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:07.749000 audit[5656]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd6baba0 a2=3 a3=1 items=0 ppid=1 pid=5656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:07.812091 kernel: audit: type=1327 audit(1757721967.749:1388): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:07.749000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:07.823742 kernel: audit: type=1105 audit(1757721967.803:1389): pid=5656 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.803000 audit[5656]: USER_START pid=5656 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.844763 kernel: audit: type=1103 audit(1757721967.805:1390): pid=5658 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.805000 audit[5658]: CRED_ACQ pid=5658 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:07.906000 audit[5629]: AVC avc: denied { watch } for pid=5629 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_05_41.3487453471/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c640,c826 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c640,c826 tclass=file permissive=0 Sep 13 00:06:07.937606 kernel: audit: type=1400 audit(1757721967.906:1391): avc: denied { watch } for pid=5629 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_05_41.3487453471/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c640,c826 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c640,c826 tclass=file permissive=0 Sep 13 00:06:07.937779 kernel: audit: type=1300 audit(1757721967.906:1391): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f6b3c0 a2=fc6 a3=0 items=0 ppid=4672 pid=5629 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c640,c826 key=(null) Sep 13 00:06:07.906000 audit[5629]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f6b3c0 a2=fc6 a3=0 items=0 ppid=4672 pid=5629 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c640,c826 key=(null) Sep 13 00:06:07.906000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:06:08.030270 kubelet[2903]: I0913 00:06:08.029499 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-58c7664cd6-mxhm5" podStartSLOduration=40.155713696 podStartE2EDuration="48.029472128s" podCreationTimestamp="2025-09-13 00:05:20 +0000 UTC" firstStartedPulling="2025-09-13 00:05:56.943590075 +0000 UTC m=+56.433769477" lastFinishedPulling="2025-09-13 00:06:04.817348435 +0000 UTC m=+64.307527909" observedRunningTime="2025-09-13 00:06:05.489027246 +0000 UTC m=+64.979206672" watchObservedRunningTime="2025-09-13 00:06:08.029472128 +0000 UTC m=+67.519651530" Sep 13 00:06:08.234414 sshd[5656]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:08.235000 audit[5656]: USER_END pid=5656 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:08.235000 audit[5656]: CRED_DISP pid=5656 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:08.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.41:22-139.178.89.65:58288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:08.239383 systemd[1]: session-9.scope: Deactivated successfully. Sep 13 00:06:08.240548 systemd[1]: sshd@8-172.31.27.41:22-139.178.89.65:58288.service: Deactivated successfully. Sep 13 00:06:08.245010 systemd-logind[1798]: Session 9 logged out. Waiting for processes to exit. Sep 13 00:06:08.247575 systemd-logind[1798]: Removed session 9. Sep 13 00:06:08.257000 audit[5678]: NETFILTER_CFG table=filter:123 family=2 entries=11 op=nft_register_rule pid=5678 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:08.257000 audit[5678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd28e6290 a2=0 a3=1 items=0 ppid=3004 pid=5678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:08.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:08.264000 audit[5678]: NETFILTER_CFG table=nat:124 family=2 entries=29 op=nft_register_chain pid=5678 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:08.264000 audit[5678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd28e6290 a2=0 a3=1 items=0 ppid=3004 pid=5678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:08.264000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:08.801273 env[1805]: time="2025-09-13T00:06:08.801205245Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:08.807697 env[1805]: time="2025-09-13T00:06:08.807601292Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:08.811387 env[1805]: time="2025-09-13T00:06:08.811330508Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:08.815274 env[1805]: time="2025-09-13T00:06:08.815202166Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:08.816559 env[1805]: time="2025-09-13T00:06:08.816501723Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 13 00:06:08.823441 env[1805]: time="2025-09-13T00:06:08.823365871Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 13 00:06:08.852090 env[1805]: time="2025-09-13T00:06:08.852016708Z" level=info msg="CreateContainer within sandbox \"5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 13 00:06:08.882725 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3778443558.mount: Deactivated successfully. Sep 13 00:06:08.888261 env[1805]: time="2025-09-13T00:06:08.888193275Z" level=info msg="CreateContainer within sandbox \"5f4f71819d741ee2d7f7796f4695fea139abc0aa291eb4e0b73161639ae52f68\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b2eee124c33e43ddc60a600fcdf35ff86ab5cffe9520a9e777c0b0299209b31b\"" Sep 13 00:06:08.891711 env[1805]: time="2025-09-13T00:06:08.891639431Z" level=info msg="StartContainer for \"b2eee124c33e43ddc60a600fcdf35ff86ab5cffe9520a9e777c0b0299209b31b\"" Sep 13 00:06:08.942786 systemd[1]: Started cri-containerd-b2eee124c33e43ddc60a600fcdf35ff86ab5cffe9520a9e777c0b0299209b31b.scope. Sep 13 00:06:08.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.992000 audit: BPF prog-id=213 op=LOAD Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4637 pid=5690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:08.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232656565313234633333653433646463363061363030666364663335 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4637 pid=5690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:08.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232656565313234633333653433646463363061363030666364663335 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit: BPF prog-id=214 op=LOAD Sep 13 00:06:08.993000 audit[5690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4637 pid=5690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:08.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232656565313234633333653433646463363061363030666364663335 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit: BPF prog-id=215 op=LOAD Sep 13 00:06:08.993000 audit[5690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4637 pid=5690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:08.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232656565313234633333653433646463363061363030666364663335 Sep 13 00:06:08.993000 audit: BPF prog-id=215 op=UNLOAD Sep 13 00:06:08.993000 audit: BPF prog-id=214 op=UNLOAD Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { perfmon } for pid=5690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit[5690]: AVC avc: denied { bpf } for pid=5690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:08.993000 audit: BPF prog-id=216 op=LOAD Sep 13 00:06:08.993000 audit[5690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4637 pid=5690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:08.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232656565313234633333653433646463363061363030666364663335 Sep 13 00:06:09.062374 env[1805]: time="2025-09-13T00:06:09.062192150Z" level=info msg="StartContainer for \"b2eee124c33e43ddc60a600fcdf35ff86ab5cffe9520a9e777c0b0299209b31b\" returns successfully" Sep 13 00:06:09.594049 kubelet[2903]: I0913 00:06:09.593920 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-79454d85df-z9hzc" podStartSLOduration=27.934567704 podStartE2EDuration="39.5938731s" podCreationTimestamp="2025-09-13 00:05:30 +0000 UTC" firstStartedPulling="2025-09-13 00:05:57.159866841 +0000 UTC m=+56.650046255" lastFinishedPulling="2025-09-13 00:06:08.819172261 +0000 UTC m=+68.309351651" observedRunningTime="2025-09-13 00:06:09.506500314 +0000 UTC m=+68.996679716" watchObservedRunningTime="2025-09-13 00:06:09.5938731 +0000 UTC m=+69.084052490" Sep 13 00:06:10.325240 env[1805]: time="2025-09-13T00:06:10.325175798Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.329248 env[1805]: time="2025-09-13T00:06:10.329188707Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.332430 env[1805]: time="2025-09-13T00:06:10.332378526Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.335572 env[1805]: time="2025-09-13T00:06:10.335518556Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.336851 env[1805]: time="2025-09-13T00:06:10.336762947Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 13 00:06:10.343460 env[1805]: time="2025-09-13T00:06:10.343359752Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 00:06:10.348465 env[1805]: time="2025-09-13T00:06:10.348368014Z" level=info msg="CreateContainer within sandbox \"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 13 00:06:10.389494 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2249190229.mount: Deactivated successfully. Sep 13 00:06:10.393023 env[1805]: time="2025-09-13T00:06:10.392903199Z" level=info msg="CreateContainer within sandbox \"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"0277fe21fb8f64caac6a63db685086d16cee0541788eb57b2edfe54adc82386d\"" Sep 13 00:06:10.396358 env[1805]: time="2025-09-13T00:06:10.395025401Z" level=info msg="StartContainer for \"0277fe21fb8f64caac6a63db685086d16cee0541788eb57b2edfe54adc82386d\"" Sep 13 00:06:10.447367 systemd[1]: Started cri-containerd-0277fe21fb8f64caac6a63db685086d16cee0541788eb57b2edfe54adc82386d.scope. Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4998 pid=5756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373766653231666238663634636161633661363364623638353038 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit: BPF prog-id=217 op=LOAD Sep 13 00:06:10.520000 audit[5756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4998 pid=5756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373766653231666238663634636161633661363364623638353038 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.520000 audit: BPF prog-id=218 op=LOAD Sep 13 00:06:10.520000 audit[5756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4998 pid=5756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373766653231666238663634636161633661363364623638353038 Sep 13 00:06:10.521000 audit: BPF prog-id=218 op=UNLOAD Sep 13 00:06:10.521000 audit: BPF prog-id=217 op=UNLOAD Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { perfmon } for pid=5756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit[5756]: AVC avc: denied { bpf } for pid=5756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.521000 audit: BPF prog-id=219 op=LOAD Sep 13 00:06:10.521000 audit[5756]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4998 pid=5756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373766653231666238663634636161633661363364623638353038 Sep 13 00:06:10.565287 env[1805]: time="2025-09-13T00:06:10.565180502Z" level=info msg="StartContainer for \"0277fe21fb8f64caac6a63db685086d16cee0541788eb57b2edfe54adc82386d\" returns successfully" Sep 13 00:06:10.675193 env[1805]: time="2025-09-13T00:06:10.675039485Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.680217 env[1805]: time="2025-09-13T00:06:10.680143951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.685134 env[1805]: time="2025-09-13T00:06:10.685076072Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.688612 env[1805]: time="2025-09-13T00:06:10.688559882Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:10.689744 env[1805]: time="2025-09-13T00:06:10.689688592Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 00:06:10.694361 env[1805]: time="2025-09-13T00:06:10.694294717Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 13 00:06:10.696734 env[1805]: time="2025-09-13T00:06:10.696619685Z" level=info msg="CreateContainer within sandbox \"c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 00:06:10.724088 env[1805]: time="2025-09-13T00:06:10.724012361Z" level=info msg="CreateContainer within sandbox \"c614458051492f76b2a679d29160d74acc4bbb6a703baa1e3abd97cf58ee563a\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"2ad7021ede197343a47c560f6828232e0776ce362786da0d673b595013ff3eed\"" Sep 13 00:06:10.727017 env[1805]: time="2025-09-13T00:06:10.726953801Z" level=info msg="StartContainer for \"2ad7021ede197343a47c560f6828232e0776ce362786da0d673b595013ff3eed\"" Sep 13 00:06:10.760049 systemd[1]: Started cri-containerd-2ad7021ede197343a47c560f6828232e0776ce362786da0d673b595013ff3eed.scope. Sep 13 00:06:10.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.805000 audit: BPF prog-id=220 op=LOAD Sep 13 00:06:10.807000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.807000 audit[5789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5056 pid=5789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261643730323165646531393733343361343763353630663638323832 Sep 13 00:06:10.807000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.807000 audit[5789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5056 pid=5789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261643730323165646531393733343361343763353630663638323832 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.808000 audit: BPF prog-id=221 op=LOAD Sep 13 00:06:10.808000 audit[5789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5056 pid=5789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261643730323165646531393733343361343763353630663638323832 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.810000 audit: BPF prog-id=222 op=LOAD Sep 13 00:06:10.810000 audit[5789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5056 pid=5789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261643730323165646531393733343361343763353630663638323832 Sep 13 00:06:10.812000 audit: BPF prog-id=222 op=UNLOAD Sep 13 00:06:10.812000 audit: BPF prog-id=221 op=UNLOAD Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { perfmon } for pid=5789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit[5789]: AVC avc: denied { bpf } for pid=5789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:10.812000 audit: BPF prog-id=223 op=LOAD Sep 13 00:06:10.812000 audit[5789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5056 pid=5789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:10.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261643730323165646531393733343361343763353630663638323832 Sep 13 00:06:10.834292 systemd[1]: run-containerd-runc-k8s.io-0277fe21fb8f64caac6a63db685086d16cee0541788eb57b2edfe54adc82386d-runc.stTMnf.mount: Deactivated successfully. Sep 13 00:06:10.880249 env[1805]: time="2025-09-13T00:06:10.880178410Z" level=info msg="StartContainer for \"2ad7021ede197343a47c560f6828232e0776ce362786da0d673b595013ff3eed\" returns successfully" Sep 13 00:06:11.519233 kubelet[2903]: I0913 00:06:11.519149 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-58c7664cd6-dq4cs" podStartSLOduration=40.225392519 podStartE2EDuration="51.519125446s" podCreationTimestamp="2025-09-13 00:05:20 +0000 UTC" firstStartedPulling="2025-09-13 00:05:59.398323726 +0000 UTC m=+58.888503128" lastFinishedPulling="2025-09-13 00:06:10.692056581 +0000 UTC m=+70.182236055" observedRunningTime="2025-09-13 00:06:11.518138314 +0000 UTC m=+71.008317728" watchObservedRunningTime="2025-09-13 00:06:11.519125446 +0000 UTC m=+71.009304848" Sep 13 00:06:11.610000 audit[5823]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=5823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:11.610000 audit[5823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe8664880 a2=0 a3=1 items=0 ppid=3004 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:11.610000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:11.620000 audit[5823]: NETFILTER_CFG table=nat:126 family=2 entries=32 op=nft_register_rule pid=5823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:11.620000 audit[5823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe8664880 a2=0 a3=1 items=0 ppid=3004 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:11.620000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:13.277347 kernel: kauditd_printk_skb: 173 callbacks suppressed Sep 13 00:06:13.277550 kernel: audit: type=1130 audit(1757721973.264:1441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.41:22-139.178.89.65:53370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:13.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.41:22-139.178.89.65:53370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:13.266154 systemd[1]: Started sshd@9-172.31.27.41:22-139.178.89.65:53370.service. Sep 13 00:06:13.499671 kubelet[2903]: I0913 00:06:13.498862 2903 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:06:13.514221 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3086357362.mount: Deactivated successfully. Sep 13 00:06:13.516000 audit[5825]: USER_ACCT pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.522213 sshd[5825]: Accepted publickey for core from 139.178.89.65 port 53370 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:13.530688 kernel: audit: type=1101 audit(1757721973.516:1442): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.532000 audit[5825]: CRED_ACQ pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.545327 sshd[5825]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:13.552012 kernel: audit: type=1103 audit(1757721973.532:1443): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.552173 kernel: audit: type=1006 audit(1757721973.532:1444): pid=5825 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 13 00:06:13.532000 audit[5825]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef31d330 a2=3 a3=1 items=0 ppid=1 pid=5825 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:13.563690 kernel: audit: type=1300 audit(1757721973.532:1444): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef31d330 a2=3 a3=1 items=0 ppid=1 pid=5825 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:13.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:13.570053 kernel: audit: type=1327 audit(1757721973.532:1444): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:13.580706 systemd-logind[1798]: New session 10 of user core. Sep 13 00:06:13.584002 systemd[1]: Started session-10.scope. Sep 13 00:06:13.606000 audit[5825]: USER_START pid=5825 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.619000 audit[5827]: CRED_ACQ pid=5827 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.633617 kernel: audit: type=1105 audit(1757721973.606:1445): pid=5825 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.633813 kernel: audit: type=1103 audit(1757721973.619:1446): pid=5827 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.992849 sshd[5825]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:13.994000 audit[5825]: USER_END pid=5825 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:14.009814 systemd[1]: sshd@9-172.31.27.41:22-139.178.89.65:53370.service: Deactivated successfully. Sep 13 00:06:14.011312 systemd[1]: session-10.scope: Deactivated successfully. Sep 13 00:06:14.015290 systemd-logind[1798]: Session 10 logged out. Waiting for processes to exit. Sep 13 00:06:14.028643 kernel: audit: type=1106 audit(1757721973.994:1447): pid=5825 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:14.028971 kernel: audit: type=1104 audit(1757721973.995:1448): pid=5825 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:13.995000 audit[5825]: CRED_DISP pid=5825 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:14.034067 systemd-logind[1798]: Removed session 10. Sep 13 00:06:14.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.41:22-139.178.89.65:53370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:14.884797 env[1805]: time="2025-09-13T00:06:14.884707345Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:14.890770 env[1805]: time="2025-09-13T00:06:14.890194838Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:14.895059 env[1805]: time="2025-09-13T00:06:14.894945715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:14.899491 env[1805]: time="2025-09-13T00:06:14.899365880Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 13 00:06:14.899751 env[1805]: time="2025-09-13T00:06:14.899644835Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:14.907048 env[1805]: time="2025-09-13T00:06:14.906576556Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 13 00:06:14.915365 env[1805]: time="2025-09-13T00:06:14.915266368Z" level=info msg="CreateContainer within sandbox \"4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 13 00:06:14.973130 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount435721024.mount: Deactivated successfully. Sep 13 00:06:14.973990 env[1805]: time="2025-09-13T00:06:14.973819662Z" level=info msg="CreateContainer within sandbox \"4acedee2756aa8039cb83db0c4b76886faf57694f5ea32f6f6898cf3ce68e99f\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"880b2efbd20f59f6b0637110dcbc260185d1efda6604d0bdfbf902fc387e484c\"" Sep 13 00:06:14.979080 env[1805]: time="2025-09-13T00:06:14.979013259Z" level=info msg="StartContainer for \"880b2efbd20f59f6b0637110dcbc260185d1efda6604d0bdfbf902fc387e484c\"" Sep 13 00:06:15.059953 systemd[1]: Started cri-containerd-880b2efbd20f59f6b0637110dcbc260185d1efda6604d0bdfbf902fc387e484c.scope. Sep 13 00:06:15.084000 audit[5800]: AVC avc: denied { watch } for pid=5800 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_05_41.452338287/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c161 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c61,c161 tclass=file permissive=0 Sep 13 00:06:15.084000 audit[5800]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ed25a0 a2=fc6 a3=0 items=0 ppid=5056 pid=5800 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c161 key=(null) Sep 13 00:06:15.084000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:06:15.183000 audit[5861]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=5861 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:15.183000 audit[5861]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd7b69900 a2=0 a3=1 items=0 ppid=3004 pid=5861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.183000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:15.190000 audit[5861]: NETFILTER_CFG table=nat:128 family=2 entries=36 op=nft_register_chain pid=5861 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:15.190000 audit[5861]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffd7b69900 a2=0 a3=1 items=0 ppid=3004 pid=5861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.206000 audit: BPF prog-id=224 op=LOAD Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5143 pid=5844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838306232656662643230663539663662303633373131306463626332 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5143 pid=5844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838306232656662643230663539663662303633373131306463626332 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit: BPF prog-id=225 op=LOAD Sep 13 00:06:15.207000 audit[5844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5143 pid=5844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838306232656662643230663539663662303633373131306463626332 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit: BPF prog-id=226 op=LOAD Sep 13 00:06:15.207000 audit[5844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5143 pid=5844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838306232656662643230663539663662303633373131306463626332 Sep 13 00:06:15.207000 audit: BPF prog-id=226 op=UNLOAD Sep 13 00:06:15.207000 audit: BPF prog-id=225 op=UNLOAD Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { perfmon } for pid=5844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit[5844]: AVC avc: denied { bpf } for pid=5844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:15.207000 audit: BPF prog-id=227 op=LOAD Sep 13 00:06:15.207000 audit[5844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5143 pid=5844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838306232656662643230663539663662303633373131306463626332 Sep 13 00:06:15.268891 env[1805]: time="2025-09-13T00:06:15.268804054Z" level=info msg="StartContainer for \"880b2efbd20f59f6b0637110dcbc260185d1efda6604d0bdfbf902fc387e484c\" returns successfully" Sep 13 00:06:15.587000 audit[5892]: NETFILTER_CFG table=filter:129 family=2 entries=10 op=nft_register_rule pid=5892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:15.587000 audit[5892]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff897c650 a2=0 a3=1 items=0 ppid=3004 pid=5892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.587000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:15.594000 audit[5892]: NETFILTER_CFG table=nat:130 family=2 entries=24 op=nft_register_rule pid=5892 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:15.594000 audit[5892]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=fffff897c650 a2=0 a3=1 items=0 ppid=3004 pid=5892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:15.594000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:15.784291 kubelet[2903]: I0913 00:06:15.784126 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-f9knf" podStartSLOduration=31.856119103 podStartE2EDuration="46.784101547s" podCreationTimestamp="2025-09-13 00:05:29 +0000 UTC" firstStartedPulling="2025-09-13 00:05:59.974353433 +0000 UTC m=+59.464532835" lastFinishedPulling="2025-09-13 00:06:14.902335889 +0000 UTC m=+74.392515279" observedRunningTime="2025-09-13 00:06:15.534877702 +0000 UTC m=+75.025057140" watchObservedRunningTime="2025-09-13 00:06:15.784101547 +0000 UTC m=+75.274280937" Sep 13 00:06:16.659000 audit[5898]: NETFILTER_CFG table=filter:131 family=2 entries=9 op=nft_register_rule pid=5898 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:16.659000 audit[5898]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc52d4790 a2=0 a3=1 items=0 ppid=3004 pid=5898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:16.659000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:16.678000 audit[5898]: NETFILTER_CFG table=nat:132 family=2 entries=31 op=nft_register_chain pid=5898 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:16.678000 audit[5898]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffc52d4790 a2=0 a3=1 items=0 ppid=3004 pid=5898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:16.678000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:16.785373 env[1805]: time="2025-09-13T00:06:16.785312249Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:16.789943 env[1805]: time="2025-09-13T00:06:16.789884885Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:16.793678 env[1805]: time="2025-09-13T00:06:16.793569680Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:16.798221 env[1805]: time="2025-09-13T00:06:16.798147020Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:06:16.799645 env[1805]: time="2025-09-13T00:06:16.799559903Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 13 00:06:16.807604 env[1805]: time="2025-09-13T00:06:16.807510707Z" level=info msg="CreateContainer within sandbox \"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 13 00:06:16.845034 env[1805]: time="2025-09-13T00:06:16.844932551Z" level=info msg="CreateContainer within sandbox \"bf178b7d0c3ef7923907ceadd54c5e71dc539e4675c6e82f5d230a738de8db49\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"2e0a596b42a661efdd9196bc92eb0b402dafe2139ea2357daadac85b0d6237ff\"" Sep 13 00:06:16.845928 env[1805]: time="2025-09-13T00:06:16.845871477Z" level=info msg="StartContainer for \"2e0a596b42a661efdd9196bc92eb0b402dafe2139ea2357daadac85b0d6237ff\"" Sep 13 00:06:16.924117 systemd[1]: Started cri-containerd-2e0a596b42a661efdd9196bc92eb0b402dafe2139ea2357daadac85b0d6237ff.scope. Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4998 pid=5910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:16.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265306135393662343261363631656664643931393662633932656230 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit: BPF prog-id=228 op=LOAD Sep 13 00:06:16.992000 audit[5910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4998 pid=5910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:16.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265306135393662343261363631656664643931393662633932656230 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit: BPF prog-id=229 op=LOAD Sep 13 00:06:16.992000 audit[5910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4998 pid=5910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:16.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265306135393662343261363631656664643931393662633932656230 Sep 13 00:06:16.992000 audit: BPF prog-id=229 op=UNLOAD Sep 13 00:06:16.992000 audit: BPF prog-id=228 op=UNLOAD Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { perfmon } for pid=5910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit[5910]: AVC avc: denied { bpf } for pid=5910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:06:16.992000 audit: BPF prog-id=230 op=LOAD Sep 13 00:06:16.992000 audit[5910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4998 pid=5910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:16.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265306135393662343261363631656664643931393662633932656230 Sep 13 00:06:17.049138 env[1805]: time="2025-09-13T00:06:17.049037343Z" level=info msg="StartContainer for \"2e0a596b42a661efdd9196bc92eb0b402dafe2139ea2357daadac85b0d6237ff\" returns successfully" Sep 13 00:06:17.271420 kubelet[2903]: I0913 00:06:17.271205 2903 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 13 00:06:17.271420 kubelet[2903]: I0913 00:06:17.271350 2903 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 13 00:06:19.023979 systemd[1]: Started sshd@10-172.31.27.41:22-139.178.89.65:53384.service. Sep 13 00:06:19.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.41:22-139.178.89.65:53384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:19.027257 kernel: kauditd_printk_skb: 122 callbacks suppressed Sep 13 00:06:19.027399 kernel: audit: type=1130 audit(1757721979.023:1481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.41:22-139.178.89.65:53384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:19.221000 audit[5947]: USER_ACCT pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.226803 sshd[5947]: Accepted publickey for core from 139.178.89.65 port 53384 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:19.227776 sshd[5947]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:19.221000 audit[5947]: CRED_ACQ pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.245488 kernel: audit: type=1101 audit(1757721979.221:1482): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.245740 kernel: audit: type=1103 audit(1757721979.221:1483): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.252037 kernel: audit: type=1006 audit(1757721979.221:1484): pid=5947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 13 00:06:19.253760 kernel: audit: type=1300 audit(1757721979.221:1484): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc04c6b00 a2=3 a3=1 items=0 ppid=1 pid=5947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:19.221000 audit[5947]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc04c6b00 a2=3 a3=1 items=0 ppid=1 pid=5947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:19.221000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:19.267702 kernel: audit: type=1327 audit(1757721979.221:1484): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:19.273235 systemd-logind[1798]: New session 11 of user core. Sep 13 00:06:19.275761 systemd[1]: Started session-11.scope. Sep 13 00:06:19.286000 audit[5947]: USER_START pid=5947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.286000 audit[5949]: CRED_ACQ pid=5949 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.310276 kernel: audit: type=1105 audit(1757721979.286:1485): pid=5947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.310414 kernel: audit: type=1103 audit(1757721979.286:1486): pid=5949 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.560091 sshd[5947]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:19.561000 audit[5947]: USER_END pid=5947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.566411 systemd[1]: session-11.scope: Deactivated successfully. Sep 13 00:06:19.568251 systemd[1]: sshd@10-172.31.27.41:22-139.178.89.65:53384.service: Deactivated successfully. Sep 13 00:06:19.562000 audit[5947]: CRED_DISP pid=5947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.586525 kernel: audit: type=1106 audit(1757721979.561:1487): pid=5947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.586706 kernel: audit: type=1104 audit(1757721979.562:1488): pid=5947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.586872 systemd-logind[1798]: Session 11 logged out. Waiting for processes to exit. Sep 13 00:06:19.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.41:22-139.178.89.65:53384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:19.592892 systemd[1]: Started sshd@11-172.31.27.41:22-139.178.89.65:53398.service. Sep 13 00:06:19.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.41:22-139.178.89.65:53398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:19.597111 systemd-logind[1798]: Removed session 11. Sep 13 00:06:19.764000 audit[5959]: USER_ACCT pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.766577 sshd[5959]: Accepted publickey for core from 139.178.89.65 port 53398 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:19.766000 audit[5959]: CRED_ACQ pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.767000 audit[5959]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff21d6720 a2=3 a3=1 items=0 ppid=1 pid=5959 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:19.767000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:19.769585 sshd[5959]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:19.778852 systemd[1]: Started session-12.scope. Sep 13 00:06:19.780165 systemd-logind[1798]: New session 12 of user core. Sep 13 00:06:19.788000 audit[5959]: USER_START pid=5959 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:19.790000 audit[5961]: CRED_ACQ pid=5961 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.148596 sshd[5959]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:20.149000 audit[5959]: USER_END pid=5959 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.149000 audit[5959]: CRED_DISP pid=5959 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.41:22-139.178.89.65:53398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:20.155131 systemd[1]: sshd@11-172.31.27.41:22-139.178.89.65:53398.service: Deactivated successfully. Sep 13 00:06:20.157835 systemd-logind[1798]: Session 12 logged out. Waiting for processes to exit. Sep 13 00:06:20.159102 systemd[1]: session-12.scope: Deactivated successfully. Sep 13 00:06:20.161595 systemd-logind[1798]: Removed session 12. Sep 13 00:06:20.183291 systemd[1]: Started sshd@12-172.31.27.41:22-139.178.89.65:43130.service. Sep 13 00:06:20.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.41:22-139.178.89.65:43130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:20.358000 audit[5970]: USER_ACCT pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.360612 sshd[5970]: Accepted publickey for core from 139.178.89.65 port 43130 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:20.360000 audit[5970]: CRED_ACQ pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.361000 audit[5970]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3abd000 a2=3 a3=1 items=0 ppid=1 pid=5970 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:20.361000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:20.363970 sshd[5970]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:20.371766 systemd-logind[1798]: New session 13 of user core. Sep 13 00:06:20.375206 systemd[1]: Started session-13.scope. Sep 13 00:06:20.383000 audit[5970]: USER_START pid=5970 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.386000 audit[5972]: CRED_ACQ pid=5972 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.655591 sshd[5970]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:20.656000 audit[5970]: USER_END pid=5970 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.657000 audit[5970]: CRED_DISP pid=5970 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:20.661877 systemd-logind[1798]: Session 13 logged out. Waiting for processes to exit. Sep 13 00:06:20.663090 systemd[1]: session-13.scope: Deactivated successfully. Sep 13 00:06:20.664267 systemd[1]: sshd@12-172.31.27.41:22-139.178.89.65:43130.service: Deactivated successfully. Sep 13 00:06:20.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.41:22-139.178.89.65:43130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:20.666174 systemd-logind[1798]: Removed session 13. Sep 13 00:06:23.460528 kubelet[2903]: I0913 00:06:23.460392 2903 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-7cg48" podStartSLOduration=35.937612034 podStartE2EDuration="53.460369116s" podCreationTimestamp="2025-09-13 00:05:30 +0000 UTC" firstStartedPulling="2025-09-13 00:05:59.281448634 +0000 UTC m=+58.771628036" lastFinishedPulling="2025-09-13 00:06:16.804205728 +0000 UTC m=+76.294385118" observedRunningTime="2025-09-13 00:06:17.551570449 +0000 UTC m=+77.041749863" watchObservedRunningTime="2025-09-13 00:06:23.460369116 +0000 UTC m=+82.950548506" Sep 13 00:06:23.637408 systemd[1]: run-containerd-runc-k8s.io-880b2efbd20f59f6b0637110dcbc260185d1efda6604d0bdfbf902fc387e484c-runc.oiQJVV.mount: Deactivated successfully. Sep 13 00:06:25.689178 systemd[1]: Started sshd@13-172.31.27.41:22-139.178.89.65:43136.service. Sep 13 00:06:25.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.41:22-139.178.89.65:43136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:25.692760 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 13 00:06:25.692960 kernel: audit: type=1130 audit(1757721985.688:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.41:22-139.178.89.65:43136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:25.873000 audit[6031]: USER_ACCT pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:25.876295 sshd[6031]: Accepted publickey for core from 139.178.89.65 port 43136 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:25.888741 kernel: audit: type=1101 audit(1757721985.873:1509): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:25.887000 audit[6031]: CRED_ACQ pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:25.890528 sshd[6031]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:25.906011 kernel: audit: type=1103 audit(1757721985.887:1510): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:25.906219 kernel: audit: type=1006 audit(1757721985.887:1511): pid=6031 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 13 00:06:25.887000 audit[6031]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff208d1d0 a2=3 a3=1 items=0 ppid=1 pid=6031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:25.918355 kernel: audit: type=1300 audit(1757721985.887:1511): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff208d1d0 a2=3 a3=1 items=0 ppid=1 pid=6031 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:25.887000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:25.922901 kernel: audit: type=1327 audit(1757721985.887:1511): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:25.929311 systemd-logind[1798]: New session 14 of user core. Sep 13 00:06:25.933026 systemd[1]: Started session-14.scope. Sep 13 00:06:25.949000 audit[6031]: USER_START pid=6031 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:25.962000 audit[6033]: CRED_ACQ pid=6033 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:25.975255 kernel: audit: type=1105 audit(1757721985.949:1512): pid=6031 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:25.975417 kernel: audit: type=1103 audit(1757721985.962:1513): pid=6033 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:26.264493 sshd[6031]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:26.266000 audit[6031]: USER_END pid=6031 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:26.267000 audit[6031]: CRED_DISP pid=6031 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:26.289379 kernel: audit: type=1106 audit(1757721986.266:1514): pid=6031 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:26.289504 kernel: audit: type=1104 audit(1757721986.267:1515): pid=6031 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:26.280224 systemd[1]: sshd@13-172.31.27.41:22-139.178.89.65:43136.service: Deactivated successfully. Sep 13 00:06:26.281631 systemd[1]: session-14.scope: Deactivated successfully. Sep 13 00:06:26.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.41:22-139.178.89.65:43136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:26.291065 systemd-logind[1798]: Session 14 logged out. Waiting for processes to exit. Sep 13 00:06:26.293548 systemd-logind[1798]: Removed session 14. Sep 13 00:06:31.299023 systemd[1]: Started sshd@14-172.31.27.41:22-139.178.89.65:48372.service. Sep 13 00:06:31.312421 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:06:31.312603 kernel: audit: type=1130 audit(1757721991.299:1517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.41:22-139.178.89.65:48372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:31.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.41:22-139.178.89.65:48372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:31.483451 sshd[6043]: Accepted publickey for core from 139.178.89.65 port 48372 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:31.481000 audit[6043]: USER_ACCT pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.497080 sshd[6043]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:31.510550 kernel: audit: type=1101 audit(1757721991.481:1518): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.510786 kernel: audit: type=1103 audit(1757721991.494:1519): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.494000 audit[6043]: CRED_ACQ pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.517438 kernel: audit: type=1006 audit(1757721991.494:1520): pid=6043 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 13 00:06:31.494000 audit[6043]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4fb0670 a2=3 a3=1 items=0 ppid=1 pid=6043 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:31.528359 kernel: audit: type=1300 audit(1757721991.494:1520): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4fb0670 a2=3 a3=1 items=0 ppid=1 pid=6043 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:31.533047 systemd-logind[1798]: New session 15 of user core. Sep 13 00:06:31.536406 systemd[1]: Started session-15.scope. Sep 13 00:06:31.494000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:31.540958 kernel: audit: type=1327 audit(1757721991.494:1520): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:31.550000 audit[6043]: USER_START pid=6043 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.562000 audit[6045]: CRED_ACQ pid=6045 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.574931 kernel: audit: type=1105 audit(1757721991.550:1521): pid=6043 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.575088 kernel: audit: type=1103 audit(1757721991.562:1522): pid=6045 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.886423 sshd[6043]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:31.887000 audit[6043]: USER_END pid=6043 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.901157 systemd[1]: sshd@14-172.31.27.41:22-139.178.89.65:48372.service: Deactivated successfully. Sep 13 00:06:31.902643 systemd[1]: session-15.scope: Deactivated successfully. Sep 13 00:06:31.893000 audit[6043]: CRED_DISP pid=6043 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.909206 systemd-logind[1798]: Session 15 logged out. Waiting for processes to exit. Sep 13 00:06:31.917855 kernel: audit: type=1106 audit(1757721991.887:1523): pid=6043 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.918016 kernel: audit: type=1104 audit(1757721991.893:1524): pid=6043 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:31.921711 systemd-logind[1798]: Removed session 15. Sep 13 00:06:31.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.41:22-139.178.89.65:48372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:36.917523 systemd[1]: Started sshd@15-172.31.27.41:22-139.178.89.65:48380.service. Sep 13 00:06:36.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.41:22-139.178.89.65:48380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:36.920670 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:06:36.920800 kernel: audit: type=1130 audit(1757721996.916:1526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.41:22-139.178.89.65:48380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:37.119432 sshd[6056]: Accepted publickey for core from 139.178.89.65 port 48380 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:37.117000 audit[6056]: USER_ACCT pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.131994 sshd[6056]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:37.128000 audit[6056]: CRED_ACQ pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.145965 kernel: audit: type=1101 audit(1757721997.117:1527): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.146124 kernel: audit: type=1103 audit(1757721997.128:1528): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.149918 systemd-logind[1798]: New session 16 of user core. Sep 13 00:06:37.151164 systemd[1]: Started session-16.scope. Sep 13 00:06:37.162053 kernel: audit: type=1006 audit(1757721997.128:1529): pid=6056 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 13 00:06:37.128000 audit[6056]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6dc7d00 a2=3 a3=1 items=0 ppid=1 pid=6056 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:37.175910 kernel: audit: type=1300 audit(1757721997.128:1529): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6dc7d00 a2=3 a3=1 items=0 ppid=1 pid=6056 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:37.128000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:37.189810 kernel: audit: type=1327 audit(1757721997.128:1529): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:37.189942 kernel: audit: type=1105 audit(1757721997.179:1530): pid=6056 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.179000 audit[6056]: USER_START pid=6056 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.182000 audit[6061]: CRED_ACQ pid=6061 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.215109 kernel: audit: type=1103 audit(1757721997.182:1531): pid=6061 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.494205 sshd[6056]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:37.494000 audit[6056]: USER_END pid=6056 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.510272 systemd[1]: session-16.scope: Deactivated successfully. Sep 13 00:06:37.512049 systemd-logind[1798]: Session 16 logged out. Waiting for processes to exit. Sep 13 00:06:37.512709 systemd[1]: sshd@15-172.31.27.41:22-139.178.89.65:48380.service: Deactivated successfully. Sep 13 00:06:37.516463 systemd-logind[1798]: Removed session 16. Sep 13 00:06:37.506000 audit[6056]: CRED_DISP pid=6056 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.526096 kernel: audit: type=1106 audit(1757721997.494:1532): pid=6056 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.526258 kernel: audit: type=1104 audit(1757721997.506:1533): pid=6056 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:37.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.41:22-139.178.89.65:48380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:39.536321 systemd[1]: run-containerd-runc-k8s.io-b2eee124c33e43ddc60a600fcdf35ff86ab5cffe9520a9e777c0b0299209b31b-runc.kuOdxI.mount: Deactivated successfully. Sep 13 00:06:42.525099 systemd[1]: Started sshd@16-172.31.27.41:22-139.178.89.65:56590.service. Sep 13 00:06:42.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.41:22-139.178.89.65:56590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:42.536520 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:06:42.536714 kernel: audit: type=1130 audit(1757722002.532:1535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.41:22-139.178.89.65:56590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:42.726035 sshd[6097]: Accepted publickey for core from 139.178.89.65 port 56590 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:42.724000 audit[6097]: USER_ACCT pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:42.737716 sshd[6097]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:42.735000 audit[6097]: CRED_ACQ pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:42.749730 kernel: audit: type=1101 audit(1757722002.724:1536): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:42.749853 kernel: audit: type=1103 audit(1757722002.735:1537): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:42.758695 kernel: audit: type=1006 audit(1757722002.735:1538): pid=6097 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 13 00:06:42.735000 audit[6097]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd70701c0 a2=3 a3=1 items=0 ppid=1 pid=6097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:42.764626 systemd[1]: Started session-17.scope. Sep 13 00:06:42.767518 systemd-logind[1798]: New session 17 of user core. Sep 13 00:06:42.770851 kernel: audit: type=1300 audit(1757722002.735:1538): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd70701c0 a2=3 a3=1 items=0 ppid=1 pid=6097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:42.735000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:42.781667 kernel: audit: type=1327 audit(1757722002.735:1538): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:42.784401 kernel: audit: type=1105 audit(1757722002.782:1539): pid=6097 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:42.782000 audit[6097]: USER_START pid=6097 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:42.794000 audit[6099]: CRED_ACQ pid=6099 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:42.809701 kernel: audit: type=1103 audit(1757722002.794:1540): pid=6099 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.089465 sshd[6097]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:43.089000 audit[6097]: USER_END pid=6097 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.095385 systemd-logind[1798]: Session 17 logged out. Waiting for processes to exit. Sep 13 00:06:43.097864 systemd[1]: session-17.scope: Deactivated successfully. Sep 13 00:06:43.099623 systemd[1]: sshd@16-172.31.27.41:22-139.178.89.65:56590.service: Deactivated successfully. Sep 13 00:06:43.102346 systemd-logind[1798]: Removed session 17. Sep 13 00:06:43.090000 audit[6097]: CRED_DISP pid=6097 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.113575 kernel: audit: type=1106 audit(1757722003.089:1541): pid=6097 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.113728 kernel: audit: type=1104 audit(1757722003.090:1542): pid=6097 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.41:22-139.178.89.65:56590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:43.131155 systemd[1]: Started sshd@17-172.31.27.41:22-139.178.89.65:56604.service. Sep 13 00:06:43.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.41:22-139.178.89.65:56604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:43.315000 audit[6109]: USER_ACCT pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.317295 sshd[6109]: Accepted publickey for core from 139.178.89.65 port 56604 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:43.317000 audit[6109]: CRED_ACQ pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.317000 audit[6109]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7610300 a2=3 a3=1 items=0 ppid=1 pid=6109 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:43.317000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:43.319979 sshd[6109]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:43.331055 systemd[1]: Started session-18.scope. Sep 13 00:06:43.333929 systemd-logind[1798]: New session 18 of user core. Sep 13 00:06:43.345000 audit[6109]: USER_START pid=6109 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:43.349000 audit[6111]: CRED_ACQ pid=6111 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:44.002436 sshd[6109]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:44.003000 audit[6109]: USER_END pid=6109 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:44.004000 audit[6109]: CRED_DISP pid=6109 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:44.008483 systemd[1]: session-18.scope: Deactivated successfully. Sep 13 00:06:44.010180 systemd[1]: sshd@17-172.31.27.41:22-139.178.89.65:56604.service: Deactivated successfully. Sep 13 00:06:44.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.41:22-139.178.89.65:56604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:44.011580 systemd-logind[1798]: Session 18 logged out. Waiting for processes to exit. Sep 13 00:06:44.013401 systemd-logind[1798]: Removed session 18. Sep 13 00:06:44.033218 systemd[1]: Started sshd@18-172.31.27.41:22-139.178.89.65:56608.service. Sep 13 00:06:44.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.41:22-139.178.89.65:56608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:44.229000 audit[6119]: USER_ACCT pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:44.231027 sshd[6119]: Accepted publickey for core from 139.178.89.65 port 56608 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:44.231000 audit[6119]: CRED_ACQ pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:44.232000 audit[6119]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7d04d60 a2=3 a3=1 items=0 ppid=1 pid=6119 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:44.232000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:44.234570 sshd[6119]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:44.244057 systemd-logind[1798]: New session 19 of user core. Sep 13 00:06:44.246151 systemd[1]: Started session-19.scope. Sep 13 00:06:44.256000 audit[6119]: USER_START pid=6119 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:44.260000 audit[6121]: CRED_ACQ pid=6121 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:45.616057 sshd[6119]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:45.618000 audit[6119]: USER_END pid=6119 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:45.619000 audit[6119]: CRED_DISP pid=6119 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:45.625174 systemd[1]: sshd@18-172.31.27.41:22-139.178.89.65:56608.service: Deactivated successfully. Sep 13 00:06:45.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.41:22-139.178.89.65:56608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:45.626793 systemd[1]: session-19.scope: Deactivated successfully. Sep 13 00:06:45.627642 systemd-logind[1798]: Session 19 logged out. Waiting for processes to exit. Sep 13 00:06:45.630487 systemd-logind[1798]: Removed session 19. Sep 13 00:06:45.645589 systemd[1]: Started sshd@19-172.31.27.41:22-139.178.89.65:56614.service. Sep 13 00:06:45.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.41:22-139.178.89.65:56614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:45.740000 audit[6153]: NETFILTER_CFG table=filter:133 family=2 entries=20 op=nft_register_rule pid=6153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:45.740000 audit[6153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffff1e1910 a2=0 a3=1 items=0 ppid=3004 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:45.740000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:45.748000 audit[6153]: NETFILTER_CFG table=nat:134 family=2 entries=26 op=nft_register_rule pid=6153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:45.748000 audit[6153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffff1e1910 a2=0 a3=1 items=0 ppid=3004 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:45.748000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:45.816000 audit[6158]: NETFILTER_CFG table=filter:135 family=2 entries=32 op=nft_register_rule pid=6158 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:45.816000 audit[6158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffcc4053e0 a2=0 a3=1 items=0 ppid=3004 pid=6158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:45.816000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:45.822000 audit[6151]: USER_ACCT pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:45.824440 sshd[6151]: Accepted publickey for core from 139.178.89.65 port 56614 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:45.825000 audit[6151]: CRED_ACQ pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:45.825000 audit[6151]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc79d45a0 a2=3 a3=1 items=0 ppid=1 pid=6151 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:45.825000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:45.828249 sshd[6151]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:45.827000 audit[6158]: NETFILTER_CFG table=nat:136 family=2 entries=26 op=nft_register_rule pid=6158 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:45.827000 audit[6158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffcc4053e0 a2=0 a3=1 items=0 ppid=3004 pid=6158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:45.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:45.839383 systemd-logind[1798]: New session 20 of user core. Sep 13 00:06:45.840546 systemd[1]: Started session-20.scope. Sep 13 00:06:45.851000 audit[6151]: USER_START pid=6151 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:45.855000 audit[6159]: CRED_ACQ pid=6159 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:46.472330 sshd[6151]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:46.473000 audit[6151]: USER_END pid=6151 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:46.473000 audit[6151]: CRED_DISP pid=6151 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:46.479144 systemd[1]: sshd@19-172.31.27.41:22-139.178.89.65:56614.service: Deactivated successfully. Sep 13 00:06:46.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.41:22-139.178.89.65:56614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:46.480884 systemd-logind[1798]: Session 20 logged out. Waiting for processes to exit. Sep 13 00:06:46.481947 systemd[1]: session-20.scope: Deactivated successfully. Sep 13 00:06:46.486240 systemd-logind[1798]: Removed session 20. Sep 13 00:06:46.500386 systemd[1]: Started sshd@20-172.31.27.41:22-139.178.89.65:56630.service. Sep 13 00:06:46.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.41:22-139.178.89.65:56630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:46.674000 audit[6167]: USER_ACCT pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:46.676601 sshd[6167]: Accepted publickey for core from 139.178.89.65 port 56630 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:46.677000 audit[6167]: CRED_ACQ pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:46.677000 audit[6167]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb4eac90 a2=3 a3=1 items=0 ppid=1 pid=6167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:46.677000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:46.680314 sshd[6167]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:46.690847 systemd-logind[1798]: New session 21 of user core. Sep 13 00:06:46.692112 systemd[1]: Started session-21.scope. Sep 13 00:06:46.702000 audit[6167]: USER_START pid=6167 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:46.706000 audit[6169]: CRED_ACQ pid=6169 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:47.006577 sshd[6167]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:47.009000 audit[6167]: USER_END pid=6167 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:47.009000 audit[6167]: CRED_DISP pid=6167 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:47.014994 systemd[1]: sshd@20-172.31.27.41:22-139.178.89.65:56630.service: Deactivated successfully. Sep 13 00:06:47.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.41:22-139.178.89.65:56630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:47.016593 systemd[1]: session-21.scope: Deactivated successfully. Sep 13 00:06:47.017468 systemd-logind[1798]: Session 21 logged out. Waiting for processes to exit. Sep 13 00:06:47.022012 systemd-logind[1798]: Removed session 21. Sep 13 00:06:52.050149 kernel: kauditd_printk_skb: 57 callbacks suppressed Sep 13 00:06:52.050319 kernel: audit: type=1130 audit(1757722012.037:1584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.41:22-139.178.89.65:45078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:52.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.41:22-139.178.89.65:45078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:52.039075 systemd[1]: Started sshd@21-172.31.27.41:22-139.178.89.65:45078.service. Sep 13 00:06:52.238000 audit[6179]: USER_ACCT pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.250214 sshd[6179]: Accepted publickey for core from 139.178.89.65 port 45078 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:52.252702 kernel: audit: type=1101 audit(1757722012.238:1585): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.251000 audit[6179]: CRED_ACQ pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.253758 sshd[6179]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:52.270186 kernel: audit: type=1103 audit(1757722012.251:1586): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.270327 kernel: audit: type=1006 audit(1757722012.251:1587): pid=6179 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 13 00:06:52.251000 audit[6179]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff82b020 a2=3 a3=1 items=0 ppid=1 pid=6179 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:52.281690 kernel: audit: type=1300 audit(1757722012.251:1587): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff82b020 a2=3 a3=1 items=0 ppid=1 pid=6179 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:52.251000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:52.285810 kernel: audit: type=1327 audit(1757722012.251:1587): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:52.292142 systemd-logind[1798]: New session 22 of user core. Sep 13 00:06:52.293885 systemd[1]: Started session-22.scope. Sep 13 00:06:52.303000 audit[6179]: USER_START pid=6179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.317000 audit[6182]: CRED_ACQ pid=6182 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.329182 kernel: audit: type=1105 audit(1757722012.303:1588): pid=6179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.329350 kernel: audit: type=1103 audit(1757722012.317:1589): pid=6182 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.599844 sshd[6179]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:52.601000 audit[6179]: USER_END pid=6179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.615558 systemd[1]: sshd@21-172.31.27.41:22-139.178.89.65:45078.service: Deactivated successfully. Sep 13 00:06:52.617125 systemd[1]: session-22.scope: Deactivated successfully. Sep 13 00:06:52.619096 systemd-logind[1798]: Session 22 logged out. Waiting for processes to exit. Sep 13 00:06:52.622895 systemd-logind[1798]: Removed session 22. Sep 13 00:06:52.602000 audit[6179]: CRED_DISP pid=6179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.633144 kernel: audit: type=1106 audit(1757722012.601:1590): pid=6179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.633398 kernel: audit: type=1104 audit(1757722012.602:1591): pid=6179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:52.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.41:22-139.178.89.65:45078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:53.913000 audit[6212]: NETFILTER_CFG table=filter:137 family=2 entries=20 op=nft_register_rule pid=6212 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:53.913000 audit[6212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffdd253750 a2=0 a3=1 items=0 ppid=3004 pid=6212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:53.913000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:53.922000 audit[6212]: NETFILTER_CFG table=nat:138 family=2 entries=110 op=nft_register_chain pid=6212 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:06:53.922000 audit[6212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffdd253750 a2=0 a3=1 items=0 ppid=3004 pid=6212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:53.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:06:55.472000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:55.472000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002abcd50 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:55.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:55.477000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:55.477000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400302dae0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:06:55.477000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:06:56.335000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:56.335000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=40132f88e0 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:06:56.335000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:06:56.336000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:56.336000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=4003a6a870 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:06:56.336000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:06:56.337000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:56.337000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=400748a3f0 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:06:56.337000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:06:56.355000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:56.355000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=4003fc7860 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:06:56.355000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:06:56.478000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:56.478000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=400748b5f0 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:06:56.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:06:56.478000 audit[2593]: AVC avc: denied { watch } for pid=2593 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:06:56.478000 audit[2593]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=40132f9560 a2=fc6 a3=0 items=0 ppid=2452 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c923 key=(null) Sep 13 00:06:56.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3431002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 00:06:57.638874 systemd[1]: Started sshd@22-172.31.27.41:22-139.178.89.65:45080.service. Sep 13 00:06:57.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.41:22-139.178.89.65:45080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:57.641183 kernel: kauditd_printk_skb: 31 callbacks suppressed Sep 13 00:06:57.641303 kernel: audit: type=1130 audit(1757722017.637:1603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.41:22-139.178.89.65:45080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:06:57.820142 sshd[6214]: Accepted publickey for core from 139.178.89.65 port 45080 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:06:57.818000 audit[6214]: USER_ACCT pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:57.831377 sshd[6214]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:06:57.829000 audit[6214]: CRED_ACQ pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:57.841454 kernel: audit: type=1101 audit(1757722017.818:1604): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:57.841693 kernel: audit: type=1103 audit(1757722017.829:1605): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:57.848097 kernel: audit: type=1006 audit(1757722017.829:1606): pid=6214 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Sep 13 00:06:57.829000 audit[6214]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd03e9410 a2=3 a3=1 items=0 ppid=1 pid=6214 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:57.859587 kernel: audit: type=1300 audit(1757722017.829:1606): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd03e9410 a2=3 a3=1 items=0 ppid=1 pid=6214 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:06:57.829000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:57.863999 kernel: audit: type=1327 audit(1757722017.829:1606): proctitle=737368643A20636F7265205B707269765D Sep 13 00:06:57.868966 systemd-logind[1798]: New session 23 of user core. Sep 13 00:06:57.872887 systemd[1]: Started session-23.scope. Sep 13 00:06:57.884000 audit[6214]: USER_START pid=6214 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:57.896000 audit[6216]: CRED_ACQ pid=6216 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:57.907963 kernel: audit: type=1105 audit(1757722017.884:1607): pid=6214 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:57.908101 kernel: audit: type=1103 audit(1757722017.896:1608): pid=6216 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:58.171357 sshd[6214]: pam_unix(sshd:session): session closed for user core Sep 13 00:06:58.172000 audit[6214]: USER_END pid=6214 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:58.190713 systemd[1]: sshd@22-172.31.27.41:22-139.178.89.65:45080.service: Deactivated successfully. Sep 13 00:06:58.192304 systemd[1]: session-23.scope: Deactivated successfully. Sep 13 00:06:58.193397 systemd-logind[1798]: Session 23 logged out. Waiting for processes to exit. Sep 13 00:06:58.199812 systemd-logind[1798]: Removed session 23. Sep 13 00:06:58.172000 audit[6214]: CRED_DISP pid=6214 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:58.210525 kernel: audit: type=1106 audit(1757722018.172:1609): pid=6214 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:58.210683 kernel: audit: type=1104 audit(1757722018.172:1610): pid=6214 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:06:58.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.41:22-139.178.89.65:45080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:01.025000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:07:01.025000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f220c0 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:07:01.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:07:01.026000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:07:01.026000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f22100 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:07:01.026000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:07:01.028000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:07:01.028000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f22160 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:07:01.028000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:07:01.030000 audit[2560]: AVC avc: denied { watch } for pid=2560 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:07:01.030000 audit[2560]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400302dc40 a2=fc6 a3=0 items=0 ppid=2412 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c1000 key=(null) Sep 13 00:07:01.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:07:03.210910 systemd[1]: Started sshd@23-172.31.27.41:22-139.178.89.65:46790.service. Sep 13 00:07:03.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.41:22-139.178.89.65:46790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:03.213169 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 13 00:07:03.213302 kernel: audit: type=1130 audit(1757722023.209:1616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.41:22-139.178.89.65:46790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:03.389867 sshd[6228]: Accepted publickey for core from 139.178.89.65 port 46790 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:07:03.388000 audit[6228]: USER_ACCT pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.401008 sshd[6228]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:07:03.410933 systemd-logind[1798]: New session 24 of user core. Sep 13 00:07:03.413167 systemd[1]: Started session-24.scope. Sep 13 00:07:03.398000 audit[6228]: CRED_ACQ pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.426526 kernel: audit: type=1101 audit(1757722023.388:1617): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.426716 kernel: audit: type=1103 audit(1757722023.398:1618): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.442327 kernel: audit: type=1006 audit(1757722023.398:1619): pid=6228 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 13 00:07:03.398000 audit[6228]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7e4af60 a2=3 a3=1 items=0 ppid=1 pid=6228 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:03.452523 kernel: audit: type=1300 audit(1757722023.398:1619): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7e4af60 a2=3 a3=1 items=0 ppid=1 pid=6228 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:03.398000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:03.456192 kernel: audit: type=1327 audit(1757722023.398:1619): proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:03.456343 kernel: audit: type=1105 audit(1757722023.433:1620): pid=6228 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.433000 audit[6228]: USER_START pid=6228 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.440000 audit[6230]: CRED_ACQ pid=6230 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.476156 kernel: audit: type=1103 audit(1757722023.440:1621): pid=6230 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.758194 sshd[6228]: pam_unix(sshd:session): session closed for user core Sep 13 00:07:03.759000 audit[6228]: USER_END pid=6228 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.776263 systemd[1]: sshd@23-172.31.27.41:22-139.178.89.65:46790.service: Deactivated successfully. Sep 13 00:07:03.777894 systemd[1]: session-24.scope: Deactivated successfully. Sep 13 00:07:03.778977 systemd-logind[1798]: Session 24 logged out. Waiting for processes to exit. Sep 13 00:07:03.783314 systemd-logind[1798]: Removed session 24. Sep 13 00:07:03.759000 audit[6228]: CRED_DISP pid=6228 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.793504 kernel: audit: type=1106 audit(1757722023.759:1622): pid=6228 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.793750 kernel: audit: type=1104 audit(1757722023.759:1623): pid=6228 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:03.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.41:22-139.178.89.65:46790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:07.912000 audit[5629]: AVC avc: denied { watch } for pid=5629 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_05_41.3487453471/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c640,c826 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c640,c826 tclass=file permissive=0 Sep 13 00:07:07.912000 audit[5629]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40021ac3e0 a2=fc6 a3=0 items=0 ppid=4672 pid=5629 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c640,c826 key=(null) Sep 13 00:07:07.912000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:07:08.793400 systemd[1]: Started sshd@24-172.31.27.41:22-139.178.89.65:46804.service. Sep 13 00:07:08.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.41:22-139.178.89.65:46804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:08.796587 kernel: kauditd_printk_skb: 4 callbacks suppressed Sep 13 00:07:08.796769 kernel: audit: type=1130 audit(1757722028.792:1626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.41:22-139.178.89.65:46804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:08.987000 audit[6261]: USER_ACCT pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:08.989222 sshd[6261]: Accepted publickey for core from 139.178.89.65 port 46804 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:07:08.993444 sshd[6261]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:07:09.010969 systemd-logind[1798]: New session 25 of user core. Sep 13 00:07:09.012194 systemd[1]: Started session-25.scope. Sep 13 00:07:08.987000 audit[6261]: CRED_ACQ pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.028002 kernel: audit: type=1101 audit(1757722028.987:1627): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.028188 kernel: audit: type=1103 audit(1757722028.987:1628): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.047447 kernel: audit: type=1006 audit(1757722028.987:1629): pid=6261 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 13 00:07:08.987000 audit[6261]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1bf85f0 a2=3 a3=1 items=0 ppid=1 pid=6261 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:09.061561 kernel: audit: type=1300 audit(1757722028.987:1629): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1bf85f0 a2=3 a3=1 items=0 ppid=1 pid=6261 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:08.987000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:09.069774 kernel: audit: type=1327 audit(1757722028.987:1629): proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:09.038000 audit[6261]: USER_START pid=6261 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.082722 kernel: audit: type=1105 audit(1757722029.038:1630): pid=6261 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.046000 audit[6263]: CRED_ACQ pid=6263 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.096492 kernel: audit: type=1103 audit(1757722029.046:1631): pid=6263 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.383621 sshd[6261]: pam_unix(sshd:session): session closed for user core Sep 13 00:07:09.384000 audit[6261]: USER_END pid=6261 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.401993 systemd-logind[1798]: Session 25 logged out. Waiting for processes to exit. Sep 13 00:07:09.402413 systemd[1]: sshd@24-172.31.27.41:22-139.178.89.65:46804.service: Deactivated successfully. Sep 13 00:07:09.404427 systemd[1]: session-25.scope: Deactivated successfully. Sep 13 00:07:09.406248 systemd-logind[1798]: Removed session 25. Sep 13 00:07:09.385000 audit[6261]: CRED_DISP pid=6261 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.418928 kernel: audit: type=1106 audit(1757722029.384:1632): pid=6261 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.419093 kernel: audit: type=1104 audit(1757722029.385:1633): pid=6261 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:09.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.41:22-139.178.89.65:46804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:09.566702 systemd[1]: run-containerd-runc-k8s.io-b2eee124c33e43ddc60a600fcdf35ff86ab5cffe9520a9e777c0b0299209b31b-runc.aqyds6.mount: Deactivated successfully. Sep 13 00:07:14.417816 systemd[1]: Started sshd@25-172.31.27.41:22-139.178.89.65:41840.service. Sep 13 00:07:14.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.41:22-139.178.89.65:41840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:14.422421 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:07:14.422594 kernel: audit: type=1130 audit(1757722034.418:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.41:22-139.178.89.65:41840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:14.595000 audit[6292]: USER_ACCT pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.597419 sshd[6292]: Accepted publickey for core from 139.178.89.65 port 41840 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:07:14.610164 sshd[6292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:07:14.607000 audit[6292]: CRED_ACQ pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.620080 kernel: audit: type=1101 audit(1757722034.595:1636): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.620238 kernel: audit: type=1103 audit(1757722034.607:1637): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.627509 kernel: audit: type=1006 audit(1757722034.607:1638): pid=6292 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 13 00:07:14.637848 systemd[1]: Started session-26.scope. Sep 13 00:07:14.607000 audit[6292]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdafa3b10 a2=3 a3=1 items=0 ppid=1 pid=6292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:14.650542 kernel: audit: type=1300 audit(1757722034.607:1638): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdafa3b10 a2=3 a3=1 items=0 ppid=1 pid=6292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:14.650679 systemd-logind[1798]: New session 26 of user core. Sep 13 00:07:14.607000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:14.662122 kernel: audit: type=1327 audit(1757722034.607:1638): proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:14.666000 audit[6292]: USER_START pid=6292 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.682000 audit[6295]: CRED_ACQ pid=6295 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.693934 kernel: audit: type=1105 audit(1757722034.666:1639): pid=6292 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.694100 kernel: audit: type=1103 audit(1757722034.682:1640): pid=6295 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.979570 sshd[6292]: pam_unix(sshd:session): session closed for user core Sep 13 00:07:14.982000 audit[6292]: USER_END pid=6292 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:14.997291 systemd[1]: sshd@25-172.31.27.41:22-139.178.89.65:41840.service: Deactivated successfully. Sep 13 00:07:14.999860 systemd[1]: session-26.scope: Deactivated successfully. Sep 13 00:07:14.982000 audit[6292]: CRED_DISP pid=6292 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:15.010680 kernel: audit: type=1106 audit(1757722034.982:1641): pid=6292 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:15.010840 kernel: audit: type=1104 audit(1757722034.982:1642): pid=6292 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:15.013261 systemd-logind[1798]: Session 26 logged out. Waiting for processes to exit. Sep 13 00:07:15.015942 systemd-logind[1798]: Removed session 26. Sep 13 00:07:14.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.41:22-139.178.89.65:41840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:15.086000 audit[5800]: AVC avc: denied { watch } for pid=5800 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_05_41.452338287/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c61,c161 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c61,c161 tclass=file permissive=0 Sep 13 00:07:15.086000 audit[5800]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001bbdaa0 a2=fc6 a3=0 items=0 ppid=5056 pid=5800 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c61,c161 key=(null) Sep 13 00:07:15.086000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:07:15.572394 systemd[1]: run-containerd-runc-k8s.io-880b2efbd20f59f6b0637110dcbc260185d1efda6604d0bdfbf902fc387e484c-runc.hnmKkZ.mount: Deactivated successfully. Sep 13 00:07:20.009269 systemd[1]: Started sshd@26-172.31.27.41:22-139.178.89.65:60510.service. Sep 13 00:07:20.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.41:22-139.178.89.65:60510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:20.013977 kernel: kauditd_printk_skb: 4 callbacks suppressed Sep 13 00:07:20.014149 kernel: audit: type=1130 audit(1757722040.010:1645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.41:22-139.178.89.65:60510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:20.189000 audit[6330]: USER_ACCT pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.191611 sshd[6330]: Accepted publickey for core from 139.178.89.65 port 60510 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:07:20.194852 sshd[6330]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:07:20.189000 audit[6330]: CRED_ACQ pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.214256 kernel: audit: type=1101 audit(1757722040.189:1646): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.214385 kernel: audit: type=1103 audit(1757722040.189:1647): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.218252 systemd-logind[1798]: New session 27 of user core. Sep 13 00:07:20.219702 systemd[1]: Started session-27.scope. Sep 13 00:07:20.224801 kernel: audit: type=1006 audit(1757722040.189:1648): pid=6330 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Sep 13 00:07:20.189000 audit[6330]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd71b6fc0 a2=3 a3=1 items=0 ppid=1 pid=6330 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:20.243932 kernel: audit: type=1300 audit(1757722040.189:1648): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd71b6fc0 a2=3 a3=1 items=0 ppid=1 pid=6330 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:20.189000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:20.254145 kernel: audit: type=1327 audit(1757722040.189:1648): proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:20.254298 kernel: audit: type=1105 audit(1757722040.246:1649): pid=6330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.246000 audit[6330]: USER_START pid=6330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.248000 audit[6332]: CRED_ACQ pid=6332 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.275125 kernel: audit: type=1103 audit(1757722040.248:1650): pid=6332 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.561104 sshd[6330]: pam_unix(sshd:session): session closed for user core Sep 13 00:07:20.562000 audit[6330]: USER_END pid=6330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.567250 systemd[1]: session-27.scope: Deactivated successfully. Sep 13 00:07:20.568847 systemd[1]: sshd@26-172.31.27.41:22-139.178.89.65:60510.service: Deactivated successfully. Sep 13 00:07:20.577611 systemd-logind[1798]: Session 27 logged out. Waiting for processes to exit. Sep 13 00:07:20.562000 audit[6330]: CRED_DISP pid=6330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.588116 kernel: audit: type=1106 audit(1757722040.562:1651): pid=6330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.588315 kernel: audit: type=1104 audit(1757722040.562:1652): pid=6330 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:20.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.41:22-139.178.89.65:60510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:20.588948 systemd-logind[1798]: Removed session 27. Sep 13 00:07:23.303544 systemd[1]: run-containerd-runc-k8s.io-c2b76ea67ab2ca606c021fcc09df0e18da3cee884ce089fa61f22dee79583ba3-runc.Kl18xi.mount: Deactivated successfully. Sep 13 00:07:23.627036 systemd[1]: run-containerd-runc-k8s.io-880b2efbd20f59f6b0637110dcbc260185d1efda6604d0bdfbf902fc387e484c-runc.EVKpxP.mount: Deactivated successfully. Sep 13 00:07:25.592895 systemd[1]: Started sshd@27-172.31.27.41:22-139.178.89.65:60524.service. Sep 13 00:07:25.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.41:22-139.178.89.65:60524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:25.596284 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:07:25.596428 kernel: audit: type=1130 audit(1757722045.592:1654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.41:22-139.178.89.65:60524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:25.789000 audit[6383]: USER_ACCT pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:25.791756 sshd[6383]: Accepted publickey for core from 139.178.89.65 port 60524 ssh2: RSA SHA256:hZ9iVout2PrR+GbvdOVRihMPHc0rDrYOM1fRKHgWdwM Sep 13 00:07:25.803823 kernel: audit: type=1101 audit(1757722045.789:1655): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:25.803979 kernel: audit: type=1103 audit(1757722045.801:1656): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:25.801000 audit[6383]: CRED_ACQ pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:25.805209 sshd[6383]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:07:25.821921 kernel: audit: type=1006 audit(1757722045.802:1657): pid=6383 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 13 00:07:25.822045 kernel: audit: type=1300 audit(1757722045.802:1657): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff376d5e0 a2=3 a3=1 items=0 ppid=1 pid=6383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:25.802000 audit[6383]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff376d5e0 a2=3 a3=1 items=0 ppid=1 pid=6383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:07:25.820495 systemd[1]: Started session-28.scope. Sep 13 00:07:25.828554 systemd-logind[1798]: New session 28 of user core. Sep 13 00:07:25.834940 kernel: audit: type=1327 audit(1757722045.802:1657): proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:25.802000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:07:25.846000 audit[6383]: USER_START pid=6383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:25.859000 audit[6385]: CRED_ACQ pid=6385 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:25.875739 kernel: audit: type=1105 audit(1757722045.846:1658): pid=6383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:25.875882 kernel: audit: type=1103 audit(1757722045.859:1659): pid=6385 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:26.153762 sshd[6383]: pam_unix(sshd:session): session closed for user core Sep 13 00:07:26.154000 audit[6383]: USER_END pid=6383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:26.159945 systemd-logind[1798]: Session 28 logged out. Waiting for processes to exit. Sep 13 00:07:26.161334 systemd[1]: session-28.scope: Deactivated successfully. Sep 13 00:07:26.162416 systemd[1]: sshd@27-172.31.27.41:22-139.178.89.65:60524.service: Deactivated successfully. Sep 13 00:07:26.165617 systemd-logind[1798]: Removed session 28. Sep 13 00:07:26.154000 audit[6383]: CRED_DISP pid=6383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:26.176872 kernel: audit: type=1106 audit(1757722046.154:1660): pid=6383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:26.177041 kernel: audit: type=1104 audit(1757722046.154:1661): pid=6383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:07:26.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.41:22-139.178.89.65:60524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:07:39.519645 systemd[1]: run-containerd-runc-k8s.io-b2eee124c33e43ddc60a600fcdf35ff86ab5cffe9520a9e777c0b0299209b31b-runc.86QUHo.mount: Deactivated successfully.