Sep 13 00:22:26.993450 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Sep 13 00:22:26.993485 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 12 23:05:37 -00 2025 Sep 13 00:22:26.993508 kernel: efi: EFI v2.70 by EDK II Sep 13 00:22:26.993523 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Sep 13 00:22:26.993536 kernel: ACPI: Early table checksum verification disabled Sep 13 00:22:26.993550 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Sep 13 00:22:26.993565 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Sep 13 00:22:26.993580 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Sep 13 00:22:26.993593 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Sep 13 00:22:26.993607 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Sep 13 00:22:26.993625 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Sep 13 00:22:26.993639 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Sep 13 00:22:26.993652 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Sep 13 00:22:26.993666 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Sep 13 00:22:26.993683 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Sep 13 00:22:26.993702 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Sep 13 00:22:26.993716 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Sep 13 00:22:26.993730 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Sep 13 00:22:26.993745 kernel: printk: bootconsole [uart0] enabled Sep 13 00:22:26.993759 kernel: NUMA: Failed to initialise from firmware Sep 13 00:22:26.993774 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Sep 13 00:22:26.993789 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Sep 13 00:22:26.993803 kernel: Zone ranges: Sep 13 00:22:26.993818 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Sep 13 00:22:26.993832 kernel: DMA32 empty Sep 13 00:22:26.993846 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Sep 13 00:22:26.993864 kernel: Movable zone start for each node Sep 13 00:22:26.993879 kernel: Early memory node ranges Sep 13 00:22:26.993893 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Sep 13 00:22:26.993907 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Sep 13 00:22:26.993922 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Sep 13 00:22:26.993936 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Sep 13 00:22:26.999675 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Sep 13 00:22:26.999705 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Sep 13 00:22:26.999721 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Sep 13 00:22:26.999736 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Sep 13 00:22:26.999751 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Sep 13 00:22:26.999766 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Sep 13 00:22:26.999789 kernel: psci: probing for conduit method from ACPI. Sep 13 00:22:26.999804 kernel: psci: PSCIv1.0 detected in firmware. Sep 13 00:22:26.999825 kernel: psci: Using standard PSCI v0.2 function IDs Sep 13 00:22:26.999841 kernel: psci: Trusted OS migration not required Sep 13 00:22:26.999857 kernel: psci: SMC Calling Convention v1.1 Sep 13 00:22:26.999876 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Sep 13 00:22:26.999892 kernel: ACPI: SRAT not present Sep 13 00:22:26.999908 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Sep 13 00:22:26.999923 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Sep 13 00:22:26.999939 kernel: pcpu-alloc: [0] 0 [0] 1 Sep 13 00:22:26.999986 kernel: Detected PIPT I-cache on CPU0 Sep 13 00:22:27.000004 kernel: CPU features: detected: GIC system register CPU interface Sep 13 00:22:27.000020 kernel: CPU features: detected: Spectre-v2 Sep 13 00:22:27.000035 kernel: CPU features: detected: Spectre-v3a Sep 13 00:22:27.000050 kernel: CPU features: detected: Spectre-BHB Sep 13 00:22:27.000065 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 13 00:22:27.000085 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 13 00:22:27.000101 kernel: CPU features: detected: ARM erratum 1742098 Sep 13 00:22:27.000116 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Sep 13 00:22:27.000132 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Sep 13 00:22:27.000147 kernel: Policy zone: Normal Sep 13 00:22:27.000164 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 00:22:27.000181 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 13 00:22:27.000196 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 13 00:22:27.000211 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 13 00:22:27.000226 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 13 00:22:27.000246 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Sep 13 00:22:27.000262 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Sep 13 00:22:27.000278 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 13 00:22:27.000293 kernel: trace event string verifier disabled Sep 13 00:22:27.000308 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 13 00:22:27.000324 kernel: rcu: RCU event tracing is enabled. Sep 13 00:22:27.000340 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 13 00:22:27.000355 kernel: Trampoline variant of Tasks RCU enabled. Sep 13 00:22:27.000371 kernel: Tracing variant of Tasks RCU enabled. Sep 13 00:22:27.000386 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 13 00:22:27.000401 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 13 00:22:27.000416 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 13 00:22:27.000435 kernel: GICv3: 96 SPIs implemented Sep 13 00:22:27.000450 kernel: GICv3: 0 Extended SPIs implemented Sep 13 00:22:27.000465 kernel: GICv3: Distributor has no Range Selector support Sep 13 00:22:27.000480 kernel: Root IRQ handler: gic_handle_irq Sep 13 00:22:27.000495 kernel: GICv3: 16 PPIs implemented Sep 13 00:22:27.000510 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Sep 13 00:22:27.000525 kernel: ACPI: SRAT not present Sep 13 00:22:27.000539 kernel: ITS [mem 0x10080000-0x1009ffff] Sep 13 00:22:27.000554 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Sep 13 00:22:27.000570 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Sep 13 00:22:27.000585 kernel: GICv3: using LPI property table @0x00000004000b0000 Sep 13 00:22:27.000604 kernel: ITS: Using hypervisor restricted LPI range [128] Sep 13 00:22:27.000619 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Sep 13 00:22:27.000634 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Sep 13 00:22:27.000650 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Sep 13 00:22:27.000665 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Sep 13 00:22:27.000680 kernel: Console: colour dummy device 80x25 Sep 13 00:22:27.000695 kernel: printk: console [tty1] enabled Sep 13 00:22:27.000711 kernel: ACPI: Core revision 20210730 Sep 13 00:22:27.000727 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Sep 13 00:22:27.000743 kernel: pid_max: default: 32768 minimum: 301 Sep 13 00:22:27.000762 kernel: LSM: Security Framework initializing Sep 13 00:22:27.000778 kernel: SELinux: Initializing. Sep 13 00:22:27.000806 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 00:22:27.000840 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 00:22:27.000857 kernel: rcu: Hierarchical SRCU implementation. Sep 13 00:22:27.000872 kernel: Platform MSI: ITS@0x10080000 domain created Sep 13 00:22:27.000888 kernel: PCI/MSI: ITS@0x10080000 domain created Sep 13 00:22:27.000903 kernel: Remapping and enabling EFI services. Sep 13 00:22:27.000919 kernel: smp: Bringing up secondary CPUs ... Sep 13 00:22:27.000934 kernel: Detected PIPT I-cache on CPU1 Sep 13 00:22:27.000981 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Sep 13 00:22:27.001000 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Sep 13 00:22:27.001016 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Sep 13 00:22:27.001032 kernel: smp: Brought up 1 node, 2 CPUs Sep 13 00:22:27.001048 kernel: SMP: Total of 2 processors activated. Sep 13 00:22:27.001063 kernel: CPU features: detected: 32-bit EL0 Support Sep 13 00:22:27.001079 kernel: CPU features: detected: 32-bit EL1 Support Sep 13 00:22:27.001095 kernel: CPU features: detected: CRC32 instructions Sep 13 00:22:27.001110 kernel: CPU: All CPU(s) started at EL1 Sep 13 00:22:27.002909 kernel: alternatives: patching kernel code Sep 13 00:22:27.002926 kernel: devtmpfs: initialized Sep 13 00:22:27.002977 kernel: KASLR disabled due to lack of seed Sep 13 00:22:27.003002 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 13 00:22:27.003019 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 13 00:22:27.003035 kernel: pinctrl core: initialized pinctrl subsystem Sep 13 00:22:27.003051 kernel: SMBIOS 3.0.0 present. Sep 13 00:22:27.003067 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Sep 13 00:22:27.003083 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 13 00:22:27.003100 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 13 00:22:27.003116 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 13 00:22:27.003137 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 13 00:22:27.003154 kernel: audit: initializing netlink subsys (disabled) Sep 13 00:22:27.003170 kernel: audit: type=2000 audit(0.293:1): state=initialized audit_enabled=0 res=1 Sep 13 00:22:27.003187 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 13 00:22:27.003221 kernel: cpuidle: using governor menu Sep 13 00:22:27.003244 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 13 00:22:27.003261 kernel: ASID allocator initialised with 32768 entries Sep 13 00:22:27.003277 kernel: ACPI: bus type PCI registered Sep 13 00:22:27.003294 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 13 00:22:27.003310 kernel: Serial: AMBA PL011 UART driver Sep 13 00:22:27.003326 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 13 00:22:27.003343 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 13 00:22:27.003359 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 13 00:22:27.003375 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 13 00:22:27.003396 kernel: cryptd: max_cpu_qlen set to 1000 Sep 13 00:22:27.003412 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 13 00:22:27.003428 kernel: ACPI: Added _OSI(Module Device) Sep 13 00:22:27.003444 kernel: ACPI: Added _OSI(Processor Device) Sep 13 00:22:27.003461 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 13 00:22:27.003477 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 13 00:22:27.003493 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 13 00:22:27.003509 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 13 00:22:27.003525 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 13 00:22:27.003541 kernel: ACPI: Interpreter enabled Sep 13 00:22:27.003561 kernel: ACPI: Using GIC for interrupt routing Sep 13 00:22:27.003577 kernel: ACPI: MCFG table detected, 1 entries Sep 13 00:22:27.003593 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Sep 13 00:22:27.003870 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Sep 13 00:22:27.004105 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Sep 13 00:22:27.004300 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Sep 13 00:22:27.004488 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Sep 13 00:22:27.004682 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Sep 13 00:22:27.004705 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Sep 13 00:22:27.004721 kernel: acpiphp: Slot [1] registered Sep 13 00:22:27.004738 kernel: acpiphp: Slot [2] registered Sep 13 00:22:27.004754 kernel: acpiphp: Slot [3] registered Sep 13 00:22:27.004770 kernel: acpiphp: Slot [4] registered Sep 13 00:22:27.004786 kernel: acpiphp: Slot [5] registered Sep 13 00:22:27.004802 kernel: acpiphp: Slot [6] registered Sep 13 00:22:27.004818 kernel: acpiphp: Slot [7] registered Sep 13 00:22:27.004839 kernel: acpiphp: Slot [8] registered Sep 13 00:22:27.004855 kernel: acpiphp: Slot [9] registered Sep 13 00:22:27.004871 kernel: acpiphp: Slot [10] registered Sep 13 00:22:27.004887 kernel: acpiphp: Slot [11] registered Sep 13 00:22:27.004904 kernel: acpiphp: Slot [12] registered Sep 13 00:22:27.004920 kernel: acpiphp: Slot [13] registered Sep 13 00:22:27.004936 kernel: acpiphp: Slot [14] registered Sep 13 00:22:27.004980 kernel: acpiphp: Slot [15] registered Sep 13 00:22:27.004999 kernel: acpiphp: Slot [16] registered Sep 13 00:22:27.005020 kernel: acpiphp: Slot [17] registered Sep 13 00:22:27.005036 kernel: acpiphp: Slot [18] registered Sep 13 00:22:27.005052 kernel: acpiphp: Slot [19] registered Sep 13 00:22:27.005068 kernel: acpiphp: Slot [20] registered Sep 13 00:22:27.005084 kernel: acpiphp: Slot [21] registered Sep 13 00:22:27.005100 kernel: acpiphp: Slot [22] registered Sep 13 00:22:27.005116 kernel: acpiphp: Slot [23] registered Sep 13 00:22:27.005132 kernel: acpiphp: Slot [24] registered Sep 13 00:22:27.005148 kernel: acpiphp: Slot [25] registered Sep 13 00:22:27.005164 kernel: acpiphp: Slot [26] registered Sep 13 00:22:27.005184 kernel: acpiphp: Slot [27] registered Sep 13 00:22:27.005200 kernel: acpiphp: Slot [28] registered Sep 13 00:22:27.005216 kernel: acpiphp: Slot [29] registered Sep 13 00:22:27.005231 kernel: acpiphp: Slot [30] registered Sep 13 00:22:27.005247 kernel: acpiphp: Slot [31] registered Sep 13 00:22:27.005263 kernel: PCI host bridge to bus 0000:00 Sep 13 00:22:27.005458 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Sep 13 00:22:27.005633 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Sep 13 00:22:27.005809 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Sep 13 00:22:27.006010 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Sep 13 00:22:27.006244 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Sep 13 00:22:27.006460 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Sep 13 00:22:27.006655 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Sep 13 00:22:27.006870 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Sep 13 00:22:27.007099 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Sep 13 00:22:27.007322 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 13 00:22:27.007534 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Sep 13 00:22:27.007734 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Sep 13 00:22:27.007933 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Sep 13 00:22:27.015247 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Sep 13 00:22:27.015464 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Sep 13 00:22:27.015673 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Sep 13 00:22:27.015875 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Sep 13 00:22:27.016129 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Sep 13 00:22:27.016332 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Sep 13 00:22:27.023672 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Sep 13 00:22:27.023918 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Sep 13 00:22:27.024160 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Sep 13 00:22:27.024351 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Sep 13 00:22:27.024376 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Sep 13 00:22:27.024393 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Sep 13 00:22:27.024410 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Sep 13 00:22:27.024427 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Sep 13 00:22:27.024444 kernel: iommu: Default domain type: Translated Sep 13 00:22:27.024460 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 13 00:22:27.024477 kernel: vgaarb: loaded Sep 13 00:22:27.024493 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 13 00:22:27.024514 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 13 00:22:27.024531 kernel: PTP clock support registered Sep 13 00:22:27.024547 kernel: Registered efivars operations Sep 13 00:22:27.024563 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 13 00:22:27.024579 kernel: VFS: Disk quotas dquot_6.6.0 Sep 13 00:22:27.024596 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 13 00:22:27.024613 kernel: pnp: PnP ACPI init Sep 13 00:22:27.024810 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Sep 13 00:22:27.024839 kernel: pnp: PnP ACPI: found 1 devices Sep 13 00:22:27.024857 kernel: NET: Registered PF_INET protocol family Sep 13 00:22:27.024873 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 13 00:22:27.024890 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 13 00:22:27.024907 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 13 00:22:27.024923 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 13 00:22:27.024940 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 13 00:22:27.026038 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 13 00:22:27.026087 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 00:22:27.026113 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 00:22:27.026130 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 13 00:22:27.026146 kernel: PCI: CLS 0 bytes, default 64 Sep 13 00:22:27.026163 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Sep 13 00:22:27.026180 kernel: kvm [1]: HYP mode not available Sep 13 00:22:27.026196 kernel: Initialise system trusted keyrings Sep 13 00:22:27.026213 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 13 00:22:27.026229 kernel: Key type asymmetric registered Sep 13 00:22:27.026245 kernel: Asymmetric key parser 'x509' registered Sep 13 00:22:27.026266 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 13 00:22:27.026282 kernel: io scheduler mq-deadline registered Sep 13 00:22:27.026298 kernel: io scheduler kyber registered Sep 13 00:22:27.026314 kernel: io scheduler bfq registered Sep 13 00:22:27.026533 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Sep 13 00:22:27.026559 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Sep 13 00:22:27.026576 kernel: ACPI: button: Power Button [PWRB] Sep 13 00:22:27.026592 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Sep 13 00:22:27.026608 kernel: ACPI: button: Sleep Button [SLPB] Sep 13 00:22:27.026630 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 13 00:22:27.026647 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Sep 13 00:22:27.026843 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Sep 13 00:22:27.026866 kernel: printk: console [ttyS0] disabled Sep 13 00:22:27.026883 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Sep 13 00:22:27.026899 kernel: printk: console [ttyS0] enabled Sep 13 00:22:27.026916 kernel: printk: bootconsole [uart0] disabled Sep 13 00:22:27.026932 kernel: thunder_xcv, ver 1.0 Sep 13 00:22:27.026978 kernel: thunder_bgx, ver 1.0 Sep 13 00:22:27.027005 kernel: nicpf, ver 1.0 Sep 13 00:22:27.027022 kernel: nicvf, ver 1.0 Sep 13 00:22:27.027259 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 13 00:22:27.027447 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-13T00:22:26 UTC (1757722946) Sep 13 00:22:27.027471 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 13 00:22:27.027488 kernel: NET: Registered PF_INET6 protocol family Sep 13 00:22:27.027505 kernel: Segment Routing with IPv6 Sep 13 00:22:27.027521 kernel: In-situ OAM (IOAM) with IPv6 Sep 13 00:22:27.027542 kernel: NET: Registered PF_PACKET protocol family Sep 13 00:22:27.027558 kernel: Key type dns_resolver registered Sep 13 00:22:27.027574 kernel: registered taskstats version 1 Sep 13 00:22:27.027590 kernel: Loading compiled-in X.509 certificates Sep 13 00:22:27.027607 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 47ac98e9306f36eebe4291d409359a5a5d0c2b9c' Sep 13 00:22:27.027623 kernel: Key type .fscrypt registered Sep 13 00:22:27.027639 kernel: Key type fscrypt-provisioning registered Sep 13 00:22:27.027655 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 13 00:22:27.027671 kernel: ima: Allocated hash algorithm: sha1 Sep 13 00:22:27.027692 kernel: ima: No architecture policies found Sep 13 00:22:27.027708 kernel: clk: Disabling unused clocks Sep 13 00:22:27.027724 kernel: Freeing unused kernel memory: 36416K Sep 13 00:22:27.027740 kernel: Run /init as init process Sep 13 00:22:27.027756 kernel: with arguments: Sep 13 00:22:27.027772 kernel: /init Sep 13 00:22:27.027787 kernel: with environment: Sep 13 00:22:27.027803 kernel: HOME=/ Sep 13 00:22:27.027819 kernel: TERM=linux Sep 13 00:22:27.027839 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 13 00:22:27.027860 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 00:22:27.027880 systemd[1]: Detected virtualization amazon. Sep 13 00:22:27.027899 systemd[1]: Detected architecture arm64. Sep 13 00:22:27.027916 systemd[1]: Running in initrd. Sep 13 00:22:27.027933 systemd[1]: No hostname configured, using default hostname. Sep 13 00:22:27.027966 systemd[1]: Hostname set to . Sep 13 00:22:27.027994 systemd[1]: Initializing machine ID from VM UUID. Sep 13 00:22:27.028013 systemd[1]: Queued start job for default target initrd.target. Sep 13 00:22:27.028030 systemd[1]: Started systemd-ask-password-console.path. Sep 13 00:22:27.028047 systemd[1]: Reached target cryptsetup.target. Sep 13 00:22:27.028065 systemd[1]: Reached target paths.target. Sep 13 00:22:27.028082 systemd[1]: Reached target slices.target. Sep 13 00:22:27.028099 systemd[1]: Reached target swap.target. Sep 13 00:22:27.028116 systemd[1]: Reached target timers.target. Sep 13 00:22:27.028139 systemd[1]: Listening on iscsid.socket. Sep 13 00:22:27.028156 systemd[1]: Listening on iscsiuio.socket. Sep 13 00:22:27.028174 systemd[1]: Listening on systemd-journald-audit.socket. Sep 13 00:22:27.028191 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 13 00:22:27.028209 systemd[1]: Listening on systemd-journald.socket. Sep 13 00:22:27.028226 systemd[1]: Listening on systemd-networkd.socket. Sep 13 00:22:27.028244 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 00:22:27.028261 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 00:22:27.028282 systemd[1]: Reached target sockets.target. Sep 13 00:22:27.028300 systemd[1]: Starting kmod-static-nodes.service... Sep 13 00:22:27.028318 systemd[1]: Finished network-cleanup.service. Sep 13 00:22:27.028335 systemd[1]: Starting systemd-fsck-usr.service... Sep 13 00:22:27.028353 systemd[1]: Starting systemd-journald.service... Sep 13 00:22:27.028371 systemd[1]: Starting systemd-modules-load.service... Sep 13 00:22:27.028388 systemd[1]: Starting systemd-resolved.service... Sep 13 00:22:27.028405 systemd[1]: Starting systemd-vconsole-setup.service... Sep 13 00:22:27.028423 systemd[1]: Finished kmod-static-nodes.service. Sep 13 00:22:27.028444 systemd[1]: Finished systemd-fsck-usr.service. Sep 13 00:22:27.028463 kernel: audit: type=1130 audit(1757722946.987:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.028480 systemd[1]: Finished systemd-vconsole-setup.service. Sep 13 00:22:27.028498 kernel: audit: type=1130 audit(1757722947.001:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.028516 systemd[1]: Starting dracut-cmdline-ask.service... Sep 13 00:22:27.028533 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 00:22:27.028555 systemd-journald[309]: Journal started Sep 13 00:22:27.045104 systemd-journald[309]: Runtime Journal (/run/log/journal/ec27a4747eab5766f05a628c5bacc9a1) is 8.0M, max 75.4M, 67.4M free. Sep 13 00:22:26.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:26.978258 systemd-modules-load[310]: Inserted module 'overlay' Sep 13 00:22:27.054859 systemd[1]: Started systemd-journald.service. Sep 13 00:22:27.054919 kernel: audit: type=1130 audit(1757722947.052:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.071294 kernel: audit: type=1130 audit(1757722947.062:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.064029 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 00:22:27.083680 systemd[1]: Finished dracut-cmdline-ask.service. Sep 13 00:22:27.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.090720 systemd-resolved[311]: Positive Trust Anchors: Sep 13 00:22:27.090978 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 00:22:27.111427 kernel: audit: type=1130 audit(1757722947.083:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.111462 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 13 00:22:27.091031 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 00:22:27.096152 systemd[1]: Starting dracut-cmdline.service... Sep 13 00:22:27.126578 systemd-modules-load[310]: Inserted module 'br_netfilter' Sep 13 00:22:27.128620 kernel: Bridge firewalling registered Sep 13 00:22:27.152980 kernel: SCSI subsystem initialized Sep 13 00:22:27.154639 dracut-cmdline[326]: dracut-dracut-053 Sep 13 00:22:27.170366 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 13 00:22:27.170438 kernel: device-mapper: uevent: version 1.0.3 Sep 13 00:22:27.173966 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 13 00:22:27.174162 dracut-cmdline[326]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 00:22:27.187317 systemd-modules-load[310]: Inserted module 'dm_multipath' Sep 13 00:22:27.190729 systemd[1]: Finished systemd-modules-load.service. Sep 13 00:22:27.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.203864 systemd[1]: Starting systemd-sysctl.service... Sep 13 00:22:27.206077 kernel: audit: type=1130 audit(1757722947.191:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.230294 systemd[1]: Finished systemd-sysctl.service. Sep 13 00:22:27.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.242033 kernel: audit: type=1130 audit(1757722947.230:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.328002 kernel: Loading iSCSI transport class v2.0-870. Sep 13 00:22:27.349987 kernel: iscsi: registered transport (tcp) Sep 13 00:22:27.377359 kernel: iscsi: registered transport (qla4xxx) Sep 13 00:22:27.377427 kernel: QLogic iSCSI HBA Driver Sep 13 00:22:27.559989 kernel: random: crng init done Sep 13 00:22:27.560141 systemd-resolved[311]: Defaulting to hostname 'linux'. Sep 13 00:22:27.564101 systemd[1]: Started systemd-resolved.service. Sep 13 00:22:27.575037 kernel: audit: type=1130 audit(1757722947.564:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.574568 systemd[1]: Reached target nss-lookup.target. Sep 13 00:22:27.592549 systemd[1]: Finished dracut-cmdline.service. Sep 13 00:22:27.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.597162 systemd[1]: Starting dracut-pre-udev.service... Sep 13 00:22:27.609128 kernel: audit: type=1130 audit(1757722947.592:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:27.663994 kernel: raid6: neonx8 gen() 6423 MB/s Sep 13 00:22:27.681984 kernel: raid6: neonx8 xor() 4727 MB/s Sep 13 00:22:27.699984 kernel: raid6: neonx4 gen() 6581 MB/s Sep 13 00:22:27.717983 kernel: raid6: neonx4 xor() 4927 MB/s Sep 13 00:22:27.735982 kernel: raid6: neonx2 gen() 5806 MB/s Sep 13 00:22:27.753985 kernel: raid6: neonx2 xor() 4508 MB/s Sep 13 00:22:27.771984 kernel: raid6: neonx1 gen() 4510 MB/s Sep 13 00:22:27.789983 kernel: raid6: neonx1 xor() 3681 MB/s Sep 13 00:22:27.807983 kernel: raid6: int64x8 gen() 3448 MB/s Sep 13 00:22:27.825986 kernel: raid6: int64x8 xor() 2085 MB/s Sep 13 00:22:27.843985 kernel: raid6: int64x4 gen() 3846 MB/s Sep 13 00:22:27.861984 kernel: raid6: int64x4 xor() 2189 MB/s Sep 13 00:22:27.879985 kernel: raid6: int64x2 gen() 3621 MB/s Sep 13 00:22:27.897983 kernel: raid6: int64x2 xor() 1947 MB/s Sep 13 00:22:27.915983 kernel: raid6: int64x1 gen() 2770 MB/s Sep 13 00:22:27.935409 kernel: raid6: int64x1 xor() 1450 MB/s Sep 13 00:22:27.935439 kernel: raid6: using algorithm neonx4 gen() 6581 MB/s Sep 13 00:22:27.935463 kernel: raid6: .... xor() 4927 MB/s, rmw enabled Sep 13 00:22:27.937161 kernel: raid6: using neon recovery algorithm Sep 13 00:22:27.957226 kernel: xor: measuring software checksum speed Sep 13 00:22:27.957288 kernel: 8regs : 9282 MB/sec Sep 13 00:22:27.959073 kernel: 32regs : 11105 MB/sec Sep 13 00:22:27.960984 kernel: arm64_neon : 9271 MB/sec Sep 13 00:22:27.961014 kernel: xor: using function: 32regs (11105 MB/sec) Sep 13 00:22:28.058009 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 13 00:22:28.075245 systemd[1]: Finished dracut-pre-udev.service. Sep 13 00:22:28.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:28.076000 audit: BPF prog-id=7 op=LOAD Sep 13 00:22:28.077000 audit: BPF prog-id=8 op=LOAD Sep 13 00:22:28.080537 systemd[1]: Starting systemd-udevd.service... Sep 13 00:22:28.109733 systemd-udevd[509]: Using default interface naming scheme 'v252'. Sep 13 00:22:28.118845 systemd[1]: Started systemd-udevd.service. Sep 13 00:22:28.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:28.134621 systemd[1]: Starting dracut-pre-trigger.service... Sep 13 00:22:28.159070 dracut-pre-trigger[524]: rd.md=0: removing MD RAID activation Sep 13 00:22:28.218617 systemd[1]: Finished dracut-pre-trigger.service. Sep 13 00:22:28.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:28.222099 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 00:22:28.329933 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 00:22:28.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:28.438410 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Sep 13 00:22:28.438480 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Sep 13 00:22:28.466124 kernel: ena 0000:00:05.0: ENA device version: 0.10 Sep 13 00:22:28.466354 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Sep 13 00:22:28.466572 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:d6:ef:0c:96:59 Sep 13 00:22:28.466777 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Sep 13 00:22:28.469647 (udev-worker)[566]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:22:28.472544 kernel: nvme nvme0: pci function 0000:00:04.0 Sep 13 00:22:28.479986 kernel: nvme nvme0: 2/0/0 default/read/poll queues Sep 13 00:22:28.488203 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Sep 13 00:22:28.488259 kernel: GPT:9289727 != 16777215 Sep 13 00:22:28.490478 kernel: GPT:Alternate GPT header not at the end of the disk. Sep 13 00:22:28.491829 kernel: GPT:9289727 != 16777215 Sep 13 00:22:28.493749 kernel: GPT: Use GNU Parted to correct GPT errors. Sep 13 00:22:28.495338 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 00:22:28.558998 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (568) Sep 13 00:22:28.608276 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 13 00:22:28.638099 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 13 00:22:28.644981 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 13 00:22:28.663001 systemd[1]: Starting disk-uuid.service... Sep 13 00:22:28.675349 disk-uuid[663]: Primary Header is updated. Sep 13 00:22:28.675349 disk-uuid[663]: Secondary Entries is updated. Sep 13 00:22:28.675349 disk-uuid[663]: Secondary Header is updated. Sep 13 00:22:28.692481 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 00:22:28.710078 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 13 00:22:29.705006 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 13 00:22:29.706244 disk-uuid[668]: The operation has completed successfully. Sep 13 00:22:29.887348 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 13 00:22:29.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:29.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:29.887549 systemd[1]: Finished disk-uuid.service. Sep 13 00:22:29.912028 systemd[1]: Starting verity-setup.service... Sep 13 00:22:29.950993 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 13 00:22:30.052979 systemd[1]: Found device dev-mapper-usr.device. Sep 13 00:22:30.058046 systemd[1]: Finished verity-setup.service. Sep 13 00:22:30.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:30.062660 systemd[1]: Mounting sysusr-usr.mount... Sep 13 00:22:30.164997 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 13 00:22:30.166347 systemd[1]: Mounted sysusr-usr.mount. Sep 13 00:22:30.166693 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 13 00:22:30.167933 systemd[1]: Starting ignition-setup.service... Sep 13 00:22:30.180828 systemd[1]: Starting parse-ip-for-networkd.service... Sep 13 00:22:30.220820 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:22:30.220890 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 00:22:30.223123 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 00:22:30.263000 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 00:22:30.281907 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 13 00:22:30.317769 systemd[1]: Finished ignition-setup.service. Sep 13 00:22:30.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:30.321049 systemd[1]: Starting ignition-fetch-offline.service... Sep 13 00:22:30.337391 systemd[1]: Finished parse-ip-for-networkd.service. Sep 13 00:22:30.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:30.341000 audit: BPF prog-id=9 op=LOAD Sep 13 00:22:30.345821 systemd[1]: Starting systemd-networkd.service... Sep 13 00:22:30.393333 systemd-networkd[1108]: lo: Link UP Sep 13 00:22:30.393354 systemd-networkd[1108]: lo: Gained carrier Sep 13 00:22:30.397363 systemd-networkd[1108]: Enumeration completed Sep 13 00:22:30.397876 systemd-networkd[1108]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 00:22:30.398100 systemd[1]: Started systemd-networkd.service. Sep 13 00:22:30.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:30.407075 systemd[1]: Reached target network.target. Sep 13 00:22:30.409944 systemd-networkd[1108]: eth0: Link UP Sep 13 00:22:30.409984 systemd-networkd[1108]: eth0: Gained carrier Sep 13 00:22:30.417157 systemd[1]: Starting iscsiuio.service... Sep 13 00:22:30.433161 systemd-networkd[1108]: eth0: DHCPv4 address 172.31.25.123/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 13 00:22:30.438506 systemd[1]: Started iscsiuio.service. Sep 13 00:22:30.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:30.443097 systemd[1]: Starting iscsid.service... Sep 13 00:22:30.451899 iscsid[1113]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 13 00:22:30.455220 iscsid[1113]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 13 00:22:30.455220 iscsid[1113]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 13 00:22:30.455220 iscsid[1113]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 13 00:22:30.455220 iscsid[1113]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 13 00:22:30.455220 iscsid[1113]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 13 00:22:30.466987 systemd[1]: Started iscsid.service. Sep 13 00:22:30.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:30.480536 systemd[1]: Starting dracut-initqueue.service... Sep 13 00:22:30.501928 systemd[1]: Finished dracut-initqueue.service. Sep 13 00:22:30.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:30.505673 systemd[1]: Reached target remote-fs-pre.target. Sep 13 00:22:30.509023 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 00:22:30.514156 systemd[1]: Reached target remote-fs.target. Sep 13 00:22:30.520396 systemd[1]: Starting dracut-pre-mount.service... Sep 13 00:22:30.538324 systemd[1]: Finished dracut-pre-mount.service. Sep 13 00:22:30.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.103391 ignition[1104]: Ignition 2.14.0 Sep 13 00:22:31.103421 ignition[1104]: Stage: fetch-offline Sep 13 00:22:31.104046 ignition[1104]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:22:31.104270 ignition[1104]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:22:31.130002 ignition[1104]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:22:31.131422 ignition[1104]: Ignition finished successfully Sep 13 00:22:31.135695 systemd[1]: Finished ignition-fetch-offline.service. Sep 13 00:22:31.148844 kernel: kauditd_printk_skb: 17 callbacks suppressed Sep 13 00:22:31.148880 kernel: audit: type=1130 audit(1757722951.135:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.139549 systemd[1]: Starting ignition-fetch.service... Sep 13 00:22:31.165112 ignition[1132]: Ignition 2.14.0 Sep 13 00:22:31.165140 ignition[1132]: Stage: fetch Sep 13 00:22:31.165439 ignition[1132]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:22:31.165497 ignition[1132]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:22:31.181368 ignition[1132]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:22:31.184259 ignition[1132]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:22:31.193511 ignition[1132]: INFO : PUT result: OK Sep 13 00:22:31.196759 ignition[1132]: DEBUG : parsed url from cmdline: "" Sep 13 00:22:31.196759 ignition[1132]: INFO : no config URL provided Sep 13 00:22:31.196759 ignition[1132]: INFO : reading system config file "/usr/lib/ignition/user.ign" Sep 13 00:22:31.203352 ignition[1132]: INFO : no config at "/usr/lib/ignition/user.ign" Sep 13 00:22:31.203352 ignition[1132]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:22:31.203352 ignition[1132]: INFO : PUT result: OK Sep 13 00:22:31.203352 ignition[1132]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Sep 13 00:22:31.214137 ignition[1132]: INFO : GET result: OK Sep 13 00:22:31.214137 ignition[1132]: DEBUG : parsing config with SHA512: 2f5a102535bb87e4190c9487922d8e9c9a9ca9cef12b73696567551498f0389a50ca0ba7195782a4b0e4813186cea641bde2d0c221052224af33386b00d35ae9 Sep 13 00:22:31.222687 unknown[1132]: fetched base config from "system" Sep 13 00:22:31.223335 unknown[1132]: fetched base config from "system" Sep 13 00:22:31.223358 unknown[1132]: fetched user config from "aws" Sep 13 00:22:31.229124 ignition[1132]: fetch: fetch complete Sep 13 00:22:31.229151 ignition[1132]: fetch: fetch passed Sep 13 00:22:31.229250 ignition[1132]: Ignition finished successfully Sep 13 00:22:31.236015 systemd[1]: Finished ignition-fetch.service. Sep 13 00:22:31.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.246619 systemd[1]: Starting ignition-kargs.service... Sep 13 00:22:31.259539 kernel: audit: type=1130 audit(1757722951.238:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.262458 ignition[1138]: Ignition 2.14.0 Sep 13 00:22:31.262486 ignition[1138]: Stage: kargs Sep 13 00:22:31.262790 ignition[1138]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:22:31.262847 ignition[1138]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:22:31.278221 ignition[1138]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:22:31.280851 ignition[1138]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:22:31.284363 ignition[1138]: INFO : PUT result: OK Sep 13 00:22:31.294620 ignition[1138]: kargs: kargs passed Sep 13 00:22:31.294721 ignition[1138]: Ignition finished successfully Sep 13 00:22:31.299440 systemd[1]: Finished ignition-kargs.service. Sep 13 00:22:31.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.304062 systemd[1]: Starting ignition-disks.service... Sep 13 00:22:31.313195 kernel: audit: type=1130 audit(1757722951.301:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.320666 ignition[1144]: Ignition 2.14.0 Sep 13 00:22:31.320694 ignition[1144]: Stage: disks Sep 13 00:22:31.321061 ignition[1144]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:22:31.321125 ignition[1144]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:22:31.336641 ignition[1144]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:22:31.339159 ignition[1144]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:22:31.342389 ignition[1144]: INFO : PUT result: OK Sep 13 00:22:31.347646 ignition[1144]: disks: disks passed Sep 13 00:22:31.347750 ignition[1144]: Ignition finished successfully Sep 13 00:22:31.352034 systemd[1]: Finished ignition-disks.service. Sep 13 00:22:31.375403 kernel: audit: type=1130 audit(1757722951.352:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.353980 systemd[1]: Reached target initrd-root-device.target. Sep 13 00:22:31.354363 systemd[1]: Reached target local-fs-pre.target. Sep 13 00:22:31.354500 systemd[1]: Reached target local-fs.target. Sep 13 00:22:31.354842 systemd[1]: Reached target sysinit.target. Sep 13 00:22:31.355532 systemd[1]: Reached target basic.target. Sep 13 00:22:31.367540 systemd[1]: Starting systemd-fsck-root.service... Sep 13 00:22:31.432921 systemd-fsck[1152]: ROOT: clean, 629/553520 files, 56027/553472 blocks Sep 13 00:22:31.441385 systemd[1]: Finished systemd-fsck-root.service. Sep 13 00:22:31.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.447028 systemd[1]: Mounting sysroot.mount... Sep 13 00:22:31.455534 kernel: audit: type=1130 audit(1757722951.443:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.469992 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 13 00:22:31.470613 systemd[1]: Mounted sysroot.mount. Sep 13 00:22:31.475320 systemd[1]: Reached target initrd-root-fs.target. Sep 13 00:22:31.509497 systemd[1]: Mounting sysroot-usr.mount... Sep 13 00:22:31.517329 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Sep 13 00:22:31.517426 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 13 00:22:31.520365 systemd[1]: Reached target ignition-diskful.target. Sep 13 00:22:31.529158 systemd[1]: Mounted sysroot-usr.mount. Sep 13 00:22:31.548946 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 00:22:31.555877 systemd[1]: Starting initrd-setup-root.service... Sep 13 00:22:31.579980 initrd-setup-root[1174]: cut: /sysroot/etc/passwd: No such file or directory Sep 13 00:22:31.589094 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1169) Sep 13 00:22:31.589132 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:22:31.591596 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 00:22:31.594666 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 00:22:31.594741 initrd-setup-root[1182]: cut: /sysroot/etc/group: No such file or directory Sep 13 00:22:31.603781 initrd-setup-root[1206]: cut: /sysroot/etc/shadow: No such file or directory Sep 13 00:22:31.612369 initrd-setup-root[1214]: cut: /sysroot/etc/gshadow: No such file or directory Sep 13 00:22:31.621988 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 00:22:31.652675 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 00:22:31.902605 systemd[1]: Finished initrd-setup-root.service. Sep 13 00:22:31.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.907433 systemd[1]: Starting ignition-mount.service... Sep 13 00:22:31.923054 kernel: audit: type=1130 audit(1757722951.904:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.918406 systemd[1]: Starting sysroot-boot.service... Sep 13 00:22:31.930470 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 13 00:22:31.930631 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 13 00:22:31.967851 systemd[1]: Finished sysroot-boot.service. Sep 13 00:22:31.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.981065 kernel: audit: type=1130 audit(1757722951.970:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:31.993484 ignition[1237]: INFO : Ignition 2.14.0 Sep 13 00:22:31.995527 ignition[1237]: INFO : Stage: mount Sep 13 00:22:31.997369 ignition[1237]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:22:32.000036 ignition[1237]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:22:32.014966 ignition[1237]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:22:32.017634 ignition[1237]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:22:32.020864 ignition[1237]: INFO : PUT result: OK Sep 13 00:22:32.026126 ignition[1237]: INFO : mount: mount passed Sep 13 00:22:32.027897 ignition[1237]: INFO : Ignition finished successfully Sep 13 00:22:32.030059 systemd[1]: Finished ignition-mount.service. Sep 13 00:22:32.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:32.038152 systemd[1]: Starting ignition-files.service... Sep 13 00:22:32.047509 kernel: audit: type=1130 audit(1757722952.035:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:32.055111 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 00:22:32.078008 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1244) Sep 13 00:22:32.084155 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Sep 13 00:22:32.084197 kernel: BTRFS info (device nvme0n1p6): using free space tree Sep 13 00:22:32.084230 kernel: BTRFS info (device nvme0n1p6): has skinny extents Sep 13 00:22:32.099986 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 13 00:22:32.104814 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 00:22:32.120887 ignition[1263]: INFO : Ignition 2.14.0 Sep 13 00:22:32.120887 ignition[1263]: INFO : Stage: files Sep 13 00:22:32.126982 ignition[1263]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:22:32.126982 ignition[1263]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:22:32.140055 ignition[1263]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:22:32.140055 ignition[1263]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:22:32.145859 ignition[1263]: INFO : PUT result: OK Sep 13 00:22:32.150983 ignition[1263]: DEBUG : files: compiled without relabeling support, skipping Sep 13 00:22:32.156752 ignition[1263]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 13 00:22:32.159830 ignition[1263]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 13 00:22:32.186978 ignition[1263]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 13 00:22:32.189964 ignition[1263]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 13 00:22:32.192779 ignition[1263]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 13 00:22:32.190117 unknown[1263]: wrote ssh authorized keys file for user: core Sep 13 00:22:32.197856 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Sep 13 00:22:32.197856 ignition[1263]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Sep 13 00:22:32.283607 ignition[1263]: INFO : GET result: OK Sep 13 00:22:32.355135 systemd-networkd[1108]: eth0: Gained IPv6LL Sep 13 00:22:32.556870 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Sep 13 00:22:32.561106 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 13 00:22:32.561106 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:22:32.575074 ignition[1263]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2619126682" Sep 13 00:22:32.578548 ignition[1263]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2619126682": device or resource busy Sep 13 00:22:32.578548 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2619126682", trying btrfs: device or resource busy Sep 13 00:22:32.578548 ignition[1263]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2619126682" Sep 13 00:22:32.578548 ignition[1263]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2619126682" Sep 13 00:22:32.604216 ignition[1263]: INFO : op(3): [started] unmounting "/mnt/oem2619126682" Sep 13 00:22:32.604216 ignition[1263]: INFO : op(3): [finished] unmounting "/mnt/oem2619126682" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 00:22:32.604216 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 00:22:32.642278 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 00:22:32.642278 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 00:22:32.642278 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:22:32.642278 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:22:32.642278 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 13 00:22:32.642278 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:22:32.634891 systemd[1]: mnt-oem2619126682.mount: Deactivated successfully. Sep 13 00:22:32.679919 ignition[1263]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4040525374" Sep 13 00:22:32.679919 ignition[1263]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4040525374": device or resource busy Sep 13 00:22:32.679919 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4040525374", trying btrfs: device or resource busy Sep 13 00:22:32.679919 ignition[1263]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4040525374" Sep 13 00:22:32.694394 ignition[1263]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4040525374" Sep 13 00:22:32.694394 ignition[1263]: INFO : op(6): [started] unmounting "/mnt/oem4040525374" Sep 13 00:22:32.694394 ignition[1263]: INFO : op(6): [finished] unmounting "/mnt/oem4040525374" Sep 13 00:22:32.706444 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Sep 13 00:22:32.706444 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 13 00:22:32.706444 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:22:32.721000 ignition[1263]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem153638368" Sep 13 00:22:32.721000 ignition[1263]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem153638368": device or resource busy Sep 13 00:22:32.721000 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem153638368", trying btrfs: device or resource busy Sep 13 00:22:32.721000 ignition[1263]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem153638368" Sep 13 00:22:32.738126 ignition[1263]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem153638368" Sep 13 00:22:32.738126 ignition[1263]: INFO : op(9): [started] unmounting "/mnt/oem153638368" Sep 13 00:22:32.747321 ignition[1263]: INFO : op(9): [finished] unmounting "/mnt/oem153638368" Sep 13 00:22:32.749763 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Sep 13 00:22:32.755653 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 00:22:32.755653 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Sep 13 00:22:32.771343 ignition[1263]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem175439962" Sep 13 00:22:32.774402 ignition[1263]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem175439962": device or resource busy Sep 13 00:22:32.774402 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem175439962", trying btrfs: device or resource busy Sep 13 00:22:32.774402 ignition[1263]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem175439962" Sep 13 00:22:32.785692 ignition[1263]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem175439962" Sep 13 00:22:32.785692 ignition[1263]: INFO : op(c): [started] unmounting "/mnt/oem175439962" Sep 13 00:22:32.785692 ignition[1263]: INFO : op(c): [finished] unmounting "/mnt/oem175439962" Sep 13 00:22:32.785692 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 00:22:32.785692 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:22:32.785692 ignition[1263]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Sep 13 00:22:33.248314 ignition[1263]: INFO : GET result: OK Sep 13 00:22:33.472814 systemd[1]: mnt-oem153638368.mount: Deactivated successfully. Sep 13 00:22:33.770928 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(12): [started] processing unit "nvidia.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(12): [finished] processing unit "nvidia.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(15): [started] setting preset to enabled for "amazon-ssm-agent.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(15): [finished] setting preset to enabled for "amazon-ssm-agent.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(16): [started] setting preset to enabled for "nvidia.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(16): [finished] setting preset to enabled for "nvidia.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(17): [started] setting preset to enabled for "prepare-helm.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(17): [finished] setting preset to enabled for "prepare-helm.service" Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 00:22:33.775723 ignition[1263]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Sep 13 00:22:33.846455 ignition[1263]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 13 00:22:33.846455 ignition[1263]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 13 00:22:33.846455 ignition[1263]: INFO : files: files passed Sep 13 00:22:33.846455 ignition[1263]: INFO : Ignition finished successfully Sep 13 00:22:33.858657 systemd[1]: Finished ignition-files.service. Sep 13 00:22:33.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.869980 kernel: audit: type=1130 audit(1757722953.861:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.872078 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 13 00:22:33.876695 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 13 00:22:33.883805 systemd[1]: Starting ignition-quench.service... Sep 13 00:22:33.897731 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 13 00:22:33.898200 systemd[1]: Finished ignition-quench.service. Sep 13 00:22:33.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.905254 initrd-setup-root-after-ignition[1288]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 13 00:22:33.914339 kernel: audit: type=1130 audit(1757722953.901:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.906806 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 13 00:22:33.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.921524 systemd[1]: Reached target ignition-complete.target. Sep 13 00:22:33.931451 systemd[1]: Starting initrd-parse-etc.service... Sep 13 00:22:33.963471 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 13 00:22:33.963857 systemd[1]: Finished initrd-parse-etc.service. Sep 13 00:22:33.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:33.969371 systemd[1]: Reached target initrd-fs.target. Sep 13 00:22:33.973057 systemd[1]: Reached target initrd.target. Sep 13 00:22:33.976261 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 13 00:22:33.979541 systemd[1]: Starting dracut-pre-pivot.service... Sep 13 00:22:34.004282 systemd[1]: Finished dracut-pre-pivot.service. Sep 13 00:22:34.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.009168 systemd[1]: Starting initrd-cleanup.service... Sep 13 00:22:34.027651 systemd[1]: Stopped target nss-lookup.target. Sep 13 00:22:34.033070 systemd[1]: Stopped target remote-cryptsetup.target. Sep 13 00:22:34.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.033841 systemd[1]: Stopped target timers.target. Sep 13 00:22:34.034090 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 13 00:22:34.034302 systemd[1]: Stopped dracut-pre-pivot.service. Sep 13 00:22:34.034978 systemd[1]: Stopped target initrd.target. Sep 13 00:22:34.035498 systemd[1]: Stopped target basic.target. Sep 13 00:22:34.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.035842 systemd[1]: Stopped target ignition-complete.target. Sep 13 00:22:34.098005 ignition[1301]: INFO : Ignition 2.14.0 Sep 13 00:22:34.098005 ignition[1301]: INFO : Stage: umount Sep 13 00:22:34.036545 systemd[1]: Stopped target ignition-diskful.target. Sep 13 00:22:34.106703 ignition[1301]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 00:22:34.106703 ignition[1301]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Sep 13 00:22:34.036887 systemd[1]: Stopped target initrd-root-device.target. Sep 13 00:22:34.037258 systemd[1]: Stopped target remote-fs.target. Sep 13 00:22:34.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.037588 systemd[1]: Stopped target remote-fs-pre.target. Sep 13 00:22:34.037963 systemd[1]: Stopped target sysinit.target. Sep 13 00:22:34.038300 systemd[1]: Stopped target local-fs.target. Sep 13 00:22:34.147638 ignition[1301]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Sep 13 00:22:34.147638 ignition[1301]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Sep 13 00:22:34.147638 ignition[1301]: INFO : PUT result: OK Sep 13 00:22:34.038636 systemd[1]: Stopped target local-fs-pre.target. Sep 13 00:22:34.159612 ignition[1301]: INFO : umount: umount passed Sep 13 00:22:34.159612 ignition[1301]: INFO : Ignition finished successfully Sep 13 00:22:34.039009 systemd[1]: Stopped target swap.target. Sep 13 00:22:34.042612 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 13 00:22:34.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.046211 systemd[1]: Stopped dracut-pre-mount.service. Sep 13 00:22:34.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.047600 systemd[1]: Stopped target cryptsetup.target. Sep 13 00:22:34.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.047765 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 13 00:22:34.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.047962 systemd[1]: Stopped dracut-initqueue.service. Sep 13 00:22:34.048281 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 13 00:22:34.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.048479 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 13 00:22:34.048922 systemd[1]: ignition-files.service: Deactivated successfully. Sep 13 00:22:34.049119 systemd[1]: Stopped ignition-files.service. Sep 13 00:22:34.050996 systemd[1]: Stopping ignition-mount.service... Sep 13 00:22:34.067645 systemd[1]: Stopping sysroot-boot.service... Sep 13 00:22:34.069115 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 13 00:22:34.069395 systemd[1]: Stopped systemd-udev-trigger.service. Sep 13 00:22:34.084108 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 13 00:22:34.084369 systemd[1]: Stopped dracut-pre-trigger.service. Sep 13 00:22:34.116560 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 13 00:22:34.118277 systemd[1]: Finished initrd-cleanup.service. Sep 13 00:22:34.135923 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 13 00:22:34.163747 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 13 00:22:34.163930 systemd[1]: Stopped ignition-mount.service. Sep 13 00:22:34.169259 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 13 00:22:34.169358 systemd[1]: Stopped ignition-disks.service. Sep 13 00:22:34.172732 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 13 00:22:34.172818 systemd[1]: Stopped ignition-kargs.service. Sep 13 00:22:34.176112 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 13 00:22:34.176196 systemd[1]: Stopped ignition-fetch.service. Sep 13 00:22:34.179570 systemd[1]: Stopped target network.target. Sep 13 00:22:34.181739 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 13 00:22:34.182605 systemd[1]: Stopped ignition-fetch-offline.service. Sep 13 00:22:34.187169 systemd[1]: Stopped target paths.target. Sep 13 00:22:34.188792 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 13 00:22:34.195271 systemd[1]: Stopped systemd-ask-password-console.path. Sep 13 00:22:34.200200 systemd[1]: Stopped target slices.target. Sep 13 00:22:34.206485 systemd[1]: Stopped target sockets.target. Sep 13 00:22:34.209803 systemd[1]: iscsid.socket: Deactivated successfully. Sep 13 00:22:34.214832 systemd[1]: Closed iscsid.socket. Sep 13 00:22:34.228015 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 13 00:22:34.228084 systemd[1]: Closed iscsiuio.socket. Sep 13 00:22:34.256975 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 13 00:22:34.257099 systemd[1]: Stopped ignition-setup.service. Sep 13 00:22:34.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.262575 systemd[1]: Stopping systemd-networkd.service... Sep 13 00:22:34.267570 systemd[1]: Stopping systemd-resolved.service... Sep 13 00:22:34.273034 systemd-networkd[1108]: eth0: DHCPv6 lease lost Sep 13 00:22:34.278865 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 13 00:22:34.279118 systemd[1]: Stopped systemd-resolved.service. Sep 13 00:22:34.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.284000 audit: BPF prog-id=6 op=UNLOAD Sep 13 00:22:34.285757 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 13 00:22:34.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.286163 systemd[1]: Stopped systemd-networkd.service. Sep 13 00:22:34.286757 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 13 00:22:34.294000 audit: BPF prog-id=9 op=UNLOAD Sep 13 00:22:34.286829 systemd[1]: Closed systemd-networkd.socket. Sep 13 00:22:34.306103 systemd[1]: Stopping network-cleanup.service... Sep 13 00:22:34.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.310059 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 13 00:22:34.310191 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 13 00:22:34.313714 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 13 00:22:34.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.313811 systemd[1]: Stopped systemd-sysctl.service. Sep 13 00:22:34.315822 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 13 00:22:34.316396 systemd[1]: Stopped systemd-modules-load.service. Sep 13 00:22:34.323025 systemd[1]: Stopping systemd-udevd.service... Sep 13 00:22:34.326754 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 13 00:22:34.337447 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 13 00:22:34.337652 systemd[1]: Stopped sysroot-boot.service. Sep 13 00:22:34.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.350315 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 13 00:22:34.350760 systemd[1]: Stopped systemd-udevd.service. Sep 13 00:22:34.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.358464 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 13 00:22:34.358754 systemd[1]: Closed systemd-udevd-control.socket. Sep 13 00:22:34.364762 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 13 00:22:34.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.364846 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 13 00:22:34.365406 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 13 00:22:34.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.365493 systemd[1]: Stopped dracut-pre-udev.service. Sep 13 00:22:34.366108 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 13 00:22:34.366183 systemd[1]: Stopped dracut-cmdline.service. Sep 13 00:22:34.377186 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 13 00:22:34.377282 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 13 00:22:34.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.385840 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 13 00:22:34.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.385934 systemd[1]: Stopped initrd-setup-root.service. Sep 13 00:22:34.392472 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 13 00:22:34.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.403219 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 13 00:22:34.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.403339 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Sep 13 00:22:34.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.409515 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 13 00:22:34.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.409610 systemd[1]: Stopped kmod-static-nodes.service. Sep 13 00:22:34.413463 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 13 00:22:34.413564 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 13 00:22:34.419465 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Sep 13 00:22:34.420439 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 13 00:22:34.420644 systemd[1]: Stopped network-cleanup.service. Sep 13 00:22:34.425661 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 13 00:22:34.425846 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 13 00:22:34.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:34.447938 systemd[1]: Reached target initrd-switch-root.target. Sep 13 00:22:34.450838 systemd[1]: Starting initrd-switch-root.service... Sep 13 00:22:34.468691 systemd[1]: Switching root. Sep 13 00:22:34.494397 iscsid[1113]: iscsid shutting down. Sep 13 00:22:34.503382 systemd-journald[309]: Received SIGTERM from PID 1 (systemd). Sep 13 00:22:34.503493 systemd-journald[309]: Journal stopped Sep 13 00:22:40.352983 kernel: SELinux: Class mctp_socket not defined in policy. Sep 13 00:22:40.353087 kernel: SELinux: Class anon_inode not defined in policy. Sep 13 00:22:40.353121 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 13 00:22:40.353157 kernel: SELinux: policy capability network_peer_controls=1 Sep 13 00:22:40.353200 kernel: SELinux: policy capability open_perms=1 Sep 13 00:22:40.353232 kernel: SELinux: policy capability extended_socket_class=1 Sep 13 00:22:40.353263 kernel: SELinux: policy capability always_check_network=0 Sep 13 00:22:40.353294 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 13 00:22:40.353324 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 13 00:22:40.353355 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 13 00:22:40.353385 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 13 00:22:40.353418 systemd[1]: Successfully loaded SELinux policy in 174.338ms. Sep 13 00:22:40.353493 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.704ms. Sep 13 00:22:40.353529 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 00:22:40.353560 systemd[1]: Detected virtualization amazon. Sep 13 00:22:40.353592 systemd[1]: Detected architecture arm64. Sep 13 00:22:40.353621 systemd[1]: Detected first boot. Sep 13 00:22:40.353656 systemd[1]: Initializing machine ID from VM UUID. Sep 13 00:22:40.353777 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 13 00:22:40.353815 systemd[1]: Populated /etc with preset unit settings. Sep 13 00:22:40.353849 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:22:40.353888 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:22:40.353924 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:22:40.353990 kernel: kauditd_printk_skb: 55 callbacks suppressed Sep 13 00:22:40.354031 kernel: audit: type=1334 audit(1757722959.927:86): prog-id=12 op=LOAD Sep 13 00:22:40.354065 kernel: audit: type=1334 audit(1757722959.927:87): prog-id=3 op=UNLOAD Sep 13 00:22:40.354098 kernel: audit: type=1334 audit(1757722959.929:88): prog-id=13 op=LOAD Sep 13 00:22:40.354128 kernel: audit: type=1334 audit(1757722959.931:89): prog-id=14 op=LOAD Sep 13 00:22:40.354159 kernel: audit: type=1334 audit(1757722959.931:90): prog-id=4 op=UNLOAD Sep 13 00:22:40.354186 kernel: audit: type=1334 audit(1757722959.931:91): prog-id=5 op=UNLOAD Sep 13 00:22:40.354217 kernel: audit: type=1334 audit(1757722959.936:92): prog-id=15 op=LOAD Sep 13 00:22:40.354250 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 13 00:22:40.354281 kernel: audit: type=1334 audit(1757722959.936:93): prog-id=12 op=UNLOAD Sep 13 00:22:40.354312 systemd[1]: Stopped iscsiuio.service. Sep 13 00:22:40.354340 kernel: audit: type=1334 audit(1757722959.939:94): prog-id=16 op=LOAD Sep 13 00:22:40.354372 kernel: audit: type=1334 audit(1757722959.941:95): prog-id=17 op=LOAD Sep 13 00:22:40.354402 systemd[1]: iscsid.service: Deactivated successfully. Sep 13 00:22:40.354432 systemd[1]: Stopped iscsid.service. Sep 13 00:22:40.354463 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 13 00:22:40.354494 systemd[1]: Stopped initrd-switch-root.service. Sep 13 00:22:40.354525 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 13 00:22:40.354559 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 13 00:22:40.354597 systemd[1]: Created slice system-addon\x2drun.slice. Sep 13 00:22:40.354627 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Sep 13 00:22:40.354657 systemd[1]: Created slice system-getty.slice. Sep 13 00:22:40.354686 systemd[1]: Created slice system-modprobe.slice. Sep 13 00:22:40.354721 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 13 00:22:40.354755 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 13 00:22:40.354785 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 13 00:22:40.354817 systemd[1]: Created slice user.slice. Sep 13 00:22:40.354846 systemd[1]: Started systemd-ask-password-console.path. Sep 13 00:22:40.354880 systemd[1]: Started systemd-ask-password-wall.path. Sep 13 00:22:40.354910 systemd[1]: Set up automount boot.automount. Sep 13 00:22:40.354940 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 13 00:22:40.354992 systemd[1]: Stopped target initrd-switch-root.target. Sep 13 00:22:40.355025 systemd[1]: Stopped target initrd-fs.target. Sep 13 00:22:40.355057 systemd[1]: Stopped target initrd-root-fs.target. Sep 13 00:22:40.355086 systemd[1]: Reached target integritysetup.target. Sep 13 00:22:40.355132 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 00:22:40.355167 systemd[1]: Reached target remote-fs.target. Sep 13 00:22:40.355197 systemd[1]: Reached target slices.target. Sep 13 00:22:40.355232 systemd[1]: Reached target swap.target. Sep 13 00:22:40.355262 systemd[1]: Reached target torcx.target. Sep 13 00:22:40.355292 systemd[1]: Reached target veritysetup.target. Sep 13 00:22:40.355321 systemd[1]: Listening on systemd-coredump.socket. Sep 13 00:22:40.355354 systemd[1]: Listening on systemd-initctl.socket. Sep 13 00:22:40.355384 systemd[1]: Listening on systemd-networkd.socket. Sep 13 00:22:40.355418 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 00:22:40.355450 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 00:22:40.355482 systemd[1]: Listening on systemd-userdbd.socket. Sep 13 00:22:40.355515 systemd[1]: Mounting dev-hugepages.mount... Sep 13 00:22:40.355546 systemd[1]: Mounting dev-mqueue.mount... Sep 13 00:22:40.355576 systemd[1]: Mounting media.mount... Sep 13 00:22:40.355605 systemd[1]: Mounting sys-kernel-debug.mount... Sep 13 00:22:40.355673 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 13 00:22:40.355725 systemd[1]: Mounting tmp.mount... Sep 13 00:22:40.355761 systemd[1]: Starting flatcar-tmpfiles.service... Sep 13 00:22:40.355792 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:22:40.355821 systemd[1]: Starting kmod-static-nodes.service... Sep 13 00:22:40.355857 systemd[1]: Starting modprobe@configfs.service... Sep 13 00:22:40.355887 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:22:40.355918 systemd[1]: Starting modprobe@drm.service... Sep 13 00:22:40.356069 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:22:40.356107 systemd[1]: Starting modprobe@fuse.service... Sep 13 00:22:40.356141 systemd[1]: Starting modprobe@loop.service... Sep 13 00:22:40.356173 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 13 00:22:40.356205 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 13 00:22:40.356234 systemd[1]: Stopped systemd-fsck-root.service. Sep 13 00:22:40.356270 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 13 00:22:40.356302 systemd[1]: Stopped systemd-fsck-usr.service. Sep 13 00:22:40.356332 systemd[1]: Stopped systemd-journald.service. Sep 13 00:22:40.356362 systemd[1]: Starting systemd-journald.service... Sep 13 00:22:40.356392 systemd[1]: Starting systemd-modules-load.service... Sep 13 00:22:40.356421 kernel: fuse: init (API version 7.34) Sep 13 00:22:40.356459 kernel: loop: module loaded Sep 13 00:22:40.356489 systemd[1]: Starting systemd-network-generator.service... Sep 13 00:22:40.356518 systemd[1]: Starting systemd-remount-fs.service... Sep 13 00:22:40.356555 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 00:22:40.356589 systemd[1]: verity-setup.service: Deactivated successfully. Sep 13 00:22:40.356622 systemd[1]: Stopped verity-setup.service. Sep 13 00:22:40.356652 systemd[1]: Mounted dev-hugepages.mount. Sep 13 00:22:40.356684 systemd[1]: Mounted dev-mqueue.mount. Sep 13 00:22:40.356713 systemd[1]: Mounted media.mount. Sep 13 00:22:40.356743 systemd[1]: Mounted sys-kernel-debug.mount. Sep 13 00:22:40.356773 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 13 00:22:40.356802 systemd[1]: Mounted tmp.mount. Sep 13 00:22:40.356840 systemd[1]: Finished kmod-static-nodes.service. Sep 13 00:22:40.356870 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 13 00:22:40.356900 systemd[1]: Finished modprobe@configfs.service. Sep 13 00:22:40.356929 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:22:40.357048 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:22:40.357089 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 00:22:40.357119 systemd[1]: Finished modprobe@drm.service. Sep 13 00:22:40.357152 systemd-journald[1412]: Journal started Sep 13 00:22:40.358857 systemd-journald[1412]: Runtime Journal (/run/log/journal/ec27a4747eab5766f05a628c5bacc9a1) is 8.0M, max 75.4M, 67.4M free. Sep 13 00:22:35.507000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 13 00:22:35.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 00:22:35.694000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 00:22:35.694000 audit: BPF prog-id=10 op=LOAD Sep 13 00:22:35.694000 audit: BPF prog-id=10 op=UNLOAD Sep 13 00:22:35.694000 audit: BPF prog-id=11 op=LOAD Sep 13 00:22:35.694000 audit: BPF prog-id=11 op=UNLOAD Sep 13 00:22:35.841000 audit[1334]: AVC avc: denied { associate } for pid=1334 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 00:22:35.841000 audit[1334]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458b4 a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1317 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:35.841000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 00:22:35.845000 audit[1334]: AVC avc: denied { associate } for pid=1334 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 13 00:22:35.845000 audit[1334]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145989 a2=1ed a3=0 items=2 ppid=1317 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:35.845000 audit: CWD cwd="/" Sep 13 00:22:35.845000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:22:35.845000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:22:35.845000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 00:22:39.927000 audit: BPF prog-id=12 op=LOAD Sep 13 00:22:39.927000 audit: BPF prog-id=3 op=UNLOAD Sep 13 00:22:39.929000 audit: BPF prog-id=13 op=LOAD Sep 13 00:22:39.931000 audit: BPF prog-id=14 op=LOAD Sep 13 00:22:39.931000 audit: BPF prog-id=4 op=UNLOAD Sep 13 00:22:39.931000 audit: BPF prog-id=5 op=UNLOAD Sep 13 00:22:39.936000 audit: BPF prog-id=15 op=LOAD Sep 13 00:22:39.936000 audit: BPF prog-id=12 op=UNLOAD Sep 13 00:22:39.939000 audit: BPF prog-id=16 op=LOAD Sep 13 00:22:39.941000 audit: BPF prog-id=17 op=LOAD Sep 13 00:22:39.941000 audit: BPF prog-id=13 op=UNLOAD Sep 13 00:22:39.941000 audit: BPF prog-id=14 op=UNLOAD Sep 13 00:22:39.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:39.953000 audit: BPF prog-id=15 op=UNLOAD Sep 13 00:22:39.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:39.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:39.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:39.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.241000 audit: BPF prog-id=18 op=LOAD Sep 13 00:22:40.241000 audit: BPF prog-id=19 op=LOAD Sep 13 00:22:40.242000 audit: BPF prog-id=20 op=LOAD Sep 13 00:22:40.368721 systemd[1]: Started systemd-journald.service. Sep 13 00:22:40.242000 audit: BPF prog-id=16 op=UNLOAD Sep 13 00:22:40.242000 audit: BPF prog-id=17 op=UNLOAD Sep 13 00:22:40.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.349000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 13 00:22:40.349000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffe7828a10 a2=4000 a3=1 items=0 ppid=1 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:40.349000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 13 00:22:40.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:39.925220 systemd[1]: Queued start job for default target multi-user.target. Sep 13 00:22:35.836993 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:22:40.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:39.925242 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Sep 13 00:22:35.838355 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 00:22:40.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:39.944940 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 13 00:22:35.838405 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 00:22:40.363633 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:22:35.838469 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 13 00:22:40.363904 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:22:35.838495 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 13 00:22:40.366401 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 13 00:22:35.838556 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 13 00:22:40.366661 systemd[1]: Finished modprobe@fuse.service. Sep 13 00:22:35.838586 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 13 00:22:40.369119 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:22:35.839031 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 13 00:22:40.369396 systemd[1]: Finished modprobe@loop.service. Sep 13 00:22:35.839110 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 00:22:40.371870 systemd[1]: Finished systemd-modules-load.service. Sep 13 00:22:35.839165 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 00:22:40.374582 systemd[1]: Finished systemd-network-generator.service. Sep 13 00:22:35.841638 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 13 00:22:40.377177 systemd[1]: Finished systemd-remount-fs.service. Sep 13 00:22:35.841720 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 13 00:22:40.379749 systemd[1]: Reached target network-pre.target. Sep 13 00:22:35.841766 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 13 00:22:40.383916 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 13 00:22:35.841806 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 13 00:22:40.391410 systemd[1]: Mounting sys-kernel-config.mount... Sep 13 00:22:35.841853 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 13 00:22:40.393068 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 13 00:22:35.841892 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:35Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 13 00:22:39.065150 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:39Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:22:39.065662 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:39Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:22:39.065906 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:39Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:22:39.066372 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:39Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 00:22:39.066477 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:39Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 13 00:22:39.066619 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2025-09-13T00:22:39Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 13 00:22:40.400429 systemd[1]: Starting systemd-hwdb-update.service... Sep 13 00:22:40.404562 systemd[1]: Starting systemd-journal-flush.service... Sep 13 00:22:40.406474 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:22:40.408791 systemd[1]: Starting systemd-random-seed.service... Sep 13 00:22:40.410969 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:22:40.413163 systemd[1]: Starting systemd-sysctl.service... Sep 13 00:22:40.419656 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 13 00:22:40.421872 systemd[1]: Mounted sys-kernel-config.mount. Sep 13 00:22:40.448209 systemd-journald[1412]: Time spent on flushing to /var/log/journal/ec27a4747eab5766f05a628c5bacc9a1 is 77.377ms for 1133 entries. Sep 13 00:22:40.448209 systemd-journald[1412]: System Journal (/var/log/journal/ec27a4747eab5766f05a628c5bacc9a1) is 8.0M, max 195.6M, 187.6M free. Sep 13 00:22:40.552934 systemd-journald[1412]: Received client request to flush runtime journal. Sep 13 00:22:40.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.451744 systemd[1]: Finished systemd-random-seed.service. Sep 13 00:22:40.453980 systemd[1]: Reached target first-boot-complete.target. Sep 13 00:22:40.483431 systemd[1]: Finished systemd-sysctl.service. Sep 13 00:22:40.529899 systemd[1]: Finished flatcar-tmpfiles.service. Sep 13 00:22:40.534174 systemd[1]: Starting systemd-sysusers.service... Sep 13 00:22:40.554821 systemd[1]: Finished systemd-journal-flush.service. Sep 13 00:22:40.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.623450 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 00:22:40.627722 systemd[1]: Starting systemd-udev-settle.service... Sep 13 00:22:40.645432 udevadm[1452]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 13 00:22:40.656599 systemd[1]: Finished systemd-sysusers.service. Sep 13 00:22:40.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:40.660670 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 00:22:40.781991 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 00:22:40.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:41.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:41.313000 audit: BPF prog-id=21 op=LOAD Sep 13 00:22:41.313000 audit: BPF prog-id=22 op=LOAD Sep 13 00:22:41.313000 audit: BPF prog-id=7 op=UNLOAD Sep 13 00:22:41.313000 audit: BPF prog-id=8 op=UNLOAD Sep 13 00:22:41.311178 systemd[1]: Finished systemd-hwdb-update.service. Sep 13 00:22:41.315446 systemd[1]: Starting systemd-udevd.service... Sep 13 00:22:41.352172 systemd-udevd[1455]: Using default interface naming scheme 'v252'. Sep 13 00:22:41.394800 systemd[1]: Started systemd-udevd.service. Sep 13 00:22:41.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:41.402000 audit: BPF prog-id=23 op=LOAD Sep 13 00:22:41.404834 systemd[1]: Starting systemd-networkd.service... Sep 13 00:22:41.413000 audit: BPF prog-id=24 op=LOAD Sep 13 00:22:41.414000 audit: BPF prog-id=25 op=LOAD Sep 13 00:22:41.414000 audit: BPF prog-id=26 op=LOAD Sep 13 00:22:41.416323 systemd[1]: Starting systemd-userdbd.service... Sep 13 00:22:41.494352 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Sep 13 00:22:41.508633 (udev-worker)[1460]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:22:41.519128 systemd[1]: Started systemd-userdbd.service. Sep 13 00:22:41.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:41.730248 systemd-networkd[1463]: lo: Link UP Sep 13 00:22:41.730797 systemd-networkd[1463]: lo: Gained carrier Sep 13 00:22:41.731840 systemd-networkd[1463]: Enumeration completed Sep 13 00:22:41.732051 systemd[1]: Started systemd-networkd.service. Sep 13 00:22:41.732079 systemd-networkd[1463]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 00:22:41.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:41.738474 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 13 00:22:41.745994 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:22:41.746349 systemd-networkd[1463]: eth0: Link UP Sep 13 00:22:41.746925 systemd-networkd[1463]: eth0: Gained carrier Sep 13 00:22:41.766309 systemd-networkd[1463]: eth0: DHCPv4 address 172.31.25.123/20, gateway 172.31.16.1 acquired from 172.31.16.1 Sep 13 00:22:41.865272 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 00:22:41.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:41.867988 systemd[1]: Finished systemd-udev-settle.service. Sep 13 00:22:41.875440 systemd[1]: Starting lvm2-activation-early.service... Sep 13 00:22:41.915184 lvm[1574]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 00:22:41.949505 systemd[1]: Finished lvm2-activation-early.service. Sep 13 00:22:41.951732 systemd[1]: Reached target cryptsetup.target. Sep 13 00:22:41.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:41.955927 systemd[1]: Starting lvm2-activation.service... Sep 13 00:22:41.964674 lvm[1575]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 00:22:41.999650 systemd[1]: Finished lvm2-activation.service. Sep 13 00:22:42.001717 systemd[1]: Reached target local-fs-pre.target. Sep 13 00:22:42.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.003824 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 13 00:22:42.003884 systemd[1]: Reached target local-fs.target. Sep 13 00:22:42.006040 systemd[1]: Reached target machines.target. Sep 13 00:22:42.010051 systemd[1]: Starting ldconfig.service... Sep 13 00:22:42.013299 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:22:42.013450 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:22:42.015678 systemd[1]: Starting systemd-boot-update.service... Sep 13 00:22:42.020243 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 13 00:22:42.025621 systemd[1]: Starting systemd-machine-id-commit.service... Sep 13 00:22:42.036675 systemd[1]: Starting systemd-sysext.service... Sep 13 00:22:42.040004 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1577 (bootctl) Sep 13 00:22:42.042549 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 13 00:22:42.079189 systemd[1]: Unmounting usr-share-oem.mount... Sep 13 00:22:42.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.089685 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 13 00:22:42.097749 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 13 00:22:42.098184 systemd[1]: Unmounted usr-share-oem.mount. Sep 13 00:22:42.123984 kernel: loop0: detected capacity change from 0 to 203944 Sep 13 00:22:42.201860 systemd-fsck[1587]: fsck.fat 4.2 (2021-01-31) Sep 13 00:22:42.201860 systemd-fsck[1587]: /dev/nvme0n1p1: 236 files, 117310/258078 clusters Sep 13 00:22:42.207628 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 13 00:22:42.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.213327 systemd[1]: Mounting boot.mount... Sep 13 00:22:42.239799 systemd[1]: Mounted boot.mount. Sep 13 00:22:42.252740 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 13 00:22:42.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.255233 systemd[1]: Finished systemd-machine-id-commit.service. Sep 13 00:22:42.274934 systemd[1]: Finished systemd-boot-update.service. Sep 13 00:22:42.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.406990 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 13 00:22:42.484093 kernel: loop1: detected capacity change from 0 to 203944 Sep 13 00:22:42.504076 (sd-sysext)[1602]: Using extensions 'kubernetes'. Sep 13 00:22:42.504852 (sd-sysext)[1602]: Merged extensions into '/usr'. Sep 13 00:22:42.544078 systemd[1]: Mounting usr-share-oem.mount... Sep 13 00:22:42.549096 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:22:42.553414 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:22:42.559675 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:22:42.566463 systemd[1]: Starting modprobe@loop.service... Sep 13 00:22:42.568434 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:22:42.568747 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:22:42.574698 systemd[1]: Mounted usr-share-oem.mount. Sep 13 00:22:42.577291 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:22:42.577593 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:22:42.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.580478 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:22:42.580765 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:22:42.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.583531 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:22:42.583779 systemd[1]: Finished modprobe@loop.service. Sep 13 00:22:42.586442 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:22:42.586662 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:22:42.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:42.588819 systemd[1]: Finished systemd-sysext.service. Sep 13 00:22:42.593008 systemd[1]: Starting ensure-sysext.service... Sep 13 00:22:42.601434 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 13 00:22:42.609087 systemd[1]: Reloading. Sep 13 00:22:42.645478 systemd-tmpfiles[1609]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 13 00:22:42.681281 systemd-tmpfiles[1609]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 13 00:22:42.686434 systemd-tmpfiles[1609]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 13 00:22:42.728386 /usr/lib/systemd/system-generators/torcx-generator[1628]: time="2025-09-13T00:22:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:22:42.728451 /usr/lib/systemd/system-generators/torcx-generator[1628]: time="2025-09-13T00:22:42Z" level=info msg="torcx already run" Sep 13 00:22:42.957650 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:22:42.957687 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:22:43.002912 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:22:43.166000 audit: BPF prog-id=27 op=LOAD Sep 13 00:22:43.166000 audit: BPF prog-id=28 op=LOAD Sep 13 00:22:43.166000 audit: BPF prog-id=21 op=UNLOAD Sep 13 00:22:43.166000 audit: BPF prog-id=22 op=UNLOAD Sep 13 00:22:43.167000 audit: BPF prog-id=29 op=LOAD Sep 13 00:22:43.167000 audit: BPF prog-id=23 op=UNLOAD Sep 13 00:22:43.170000 audit: BPF prog-id=30 op=LOAD Sep 13 00:22:43.171000 audit: BPF prog-id=24 op=UNLOAD Sep 13 00:22:43.171000 audit: BPF prog-id=31 op=LOAD Sep 13 00:22:43.171000 audit: BPF prog-id=32 op=LOAD Sep 13 00:22:43.171000 audit: BPF prog-id=25 op=UNLOAD Sep 13 00:22:43.171000 audit: BPF prog-id=26 op=UNLOAD Sep 13 00:22:43.177000 audit: BPF prog-id=33 op=LOAD Sep 13 00:22:43.177000 audit: BPF prog-id=18 op=UNLOAD Sep 13 00:22:43.177000 audit: BPF prog-id=34 op=LOAD Sep 13 00:22:43.177000 audit: BPF prog-id=35 op=LOAD Sep 13 00:22:43.177000 audit: BPF prog-id=19 op=UNLOAD Sep 13 00:22:43.177000 audit: BPF prog-id=20 op=UNLOAD Sep 13 00:22:43.189040 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 13 00:22:43.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.197786 systemd[1]: Starting audit-rules.service... Sep 13 00:22:43.201829 systemd[1]: Starting clean-ca-certificates.service... Sep 13 00:22:43.207414 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 13 00:22:43.214000 audit: BPF prog-id=36 op=LOAD Sep 13 00:22:43.218198 ldconfig[1576]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 13 00:22:43.218725 systemd[1]: Starting systemd-resolved.service... Sep 13 00:22:43.222000 audit: BPF prog-id=37 op=LOAD Sep 13 00:22:43.225624 systemd[1]: Starting systemd-timesyncd.service... Sep 13 00:22:43.230197 systemd[1]: Starting systemd-update-utmp.service... Sep 13 00:22:43.240298 systemd[1]: Finished ldconfig.service. Sep 13 00:22:43.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.250348 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.252928 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 00:22:43.259608 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:22:43.264713 systemd[1]: Starting modprobe@loop.service... Sep 13 00:22:43.271419 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.271763 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:22:43.274029 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:22:43.274365 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:22:43.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.277453 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:22:43.277755 systemd[1]: Finished modprobe@loop.service. Sep 13 00:22:43.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.280430 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:22:43.283637 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.291079 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 00:22:43.295461 systemd[1]: Starting modprobe@loop.service... Sep 13 00:22:43.299252 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.299594 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:22:43.306440 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.311310 systemd[1]: Starting modprobe@drm.service... Sep 13 00:22:43.315432 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.315781 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:22:43.317533 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 00:22:43.317881 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 00:22:43.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.324342 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 00:22:43.324658 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 00:22:43.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.328158 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 00:22:43.330643 systemd[1]: Finished ensure-sysext.service. Sep 13 00:22:43.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.341054 systemd[1]: Finished clean-ca-certificates.service. Sep 13 00:22:43.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.342000 audit[1692]: SYSTEM_BOOT pid=1692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.343266 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 00:22:43.346418 systemd[1]: Finished systemd-update-utmp.service. Sep 13 00:22:43.352007 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 00:22:43.352308 systemd[1]: Finished modprobe@loop.service. Sep 13 00:22:43.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.357426 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 00:22:43.357715 systemd[1]: Finished modprobe@drm.service. Sep 13 00:22:43.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.359897 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.387647 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 13 00:22:43.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.393683 systemd[1]: Starting systemd-update-done.service... Sep 13 00:22:43.416714 systemd[1]: Finished systemd-update-done.service. Sep 13 00:22:43.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:43.442000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 13 00:22:43.442000 audit[1714]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe67603f0 a2=420 a3=0 items=0 ppid=1686 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:43.442000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 13 00:22:43.444155 augenrules[1714]: No rules Sep 13 00:22:43.447644 systemd[1]: Finished audit-rules.service. Sep 13 00:22:43.463866 systemd-resolved[1690]: Positive Trust Anchors: Sep 13 00:22:43.463893 systemd-resolved[1690]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 00:22:43.463945 systemd-resolved[1690]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 00:22:43.473529 systemd[1]: Started systemd-timesyncd.service. Sep 13 00:22:43.475696 systemd[1]: Reached target time-set.target. Sep 13 00:22:43.522230 systemd-resolved[1690]: Defaulting to hostname 'linux'. Sep 13 00:22:43.525227 systemd[1]: Started systemd-resolved.service. Sep 13 00:22:43.527256 systemd[1]: Reached target network.target. Sep 13 00:22:43.529033 systemd[1]: Reached target nss-lookup.target. Sep 13 00:22:43.530820 systemd[1]: Reached target sysinit.target. Sep 13 00:22:43.532677 systemd[1]: Started motdgen.path. Sep 13 00:22:43.534261 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 13 00:22:43.537066 systemd[1]: Started logrotate.timer. Sep 13 00:22:43.538792 systemd[1]: Started mdadm.timer. Sep 13 00:22:43.540307 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 13 00:22:43.542165 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 13 00:22:43.542221 systemd[1]: Reached target paths.target. Sep 13 00:22:43.543837 systemd[1]: Reached target timers.target. Sep 13 00:22:43.546239 systemd[1]: Listening on dbus.socket. Sep 13 00:22:43.550155 systemd[1]: Starting docker.socket... Sep 13 00:22:43.556112 systemd-networkd[1463]: eth0: Gained IPv6LL Sep 13 00:22:43.559888 systemd[1]: Listening on sshd.socket. Sep 13 00:22:43.562026 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:22:43.563405 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 13 00:22:43.565943 systemd[1]: Listening on docker.socket. Sep 13 00:22:43.567861 systemd[1]: Reached target network-online.target. Sep 13 00:22:43.569820 systemd[1]: Reached target sockets.target. Sep 13 00:22:43.571608 systemd[1]: Reached target basic.target. Sep 13 00:22:43.573355 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.573425 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 00:22:43.573689 systemd-timesyncd[1691]: Contacted time server 155.248.196.28:123 (0.flatcar.pool.ntp.org). Sep 13 00:22:43.573817 systemd-timesyncd[1691]: Initial clock synchronization to Sat 2025-09-13 00:22:43.396619 UTC. Sep 13 00:22:43.576090 systemd[1]: Started amazon-ssm-agent.service. Sep 13 00:22:43.580419 systemd[1]: Starting containerd.service... Sep 13 00:22:43.585464 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Sep 13 00:22:43.591105 systemd[1]: Starting dbus.service... Sep 13 00:22:43.594889 systemd[1]: Starting enable-oem-cloudinit.service... Sep 13 00:22:43.600845 systemd[1]: Starting extend-filesystems.service... Sep 13 00:22:43.602631 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 13 00:22:43.605605 systemd[1]: Starting kubelet.service... Sep 13 00:22:43.609463 systemd[1]: Starting motdgen.service... Sep 13 00:22:43.613513 systemd[1]: Started nvidia.service. Sep 13 00:22:43.622884 systemd[1]: Starting prepare-helm.service... Sep 13 00:22:43.629288 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 13 00:22:43.633523 systemd[1]: Starting sshd-keygen.service... Sep 13 00:22:43.640057 systemd[1]: Starting systemd-logind.service... Sep 13 00:22:43.642006 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 00:22:43.642136 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 13 00:22:43.643643 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 13 00:22:43.647332 systemd[1]: Starting update-engine.service... Sep 13 00:22:43.651285 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 13 00:22:43.656050 jq[1726]: false Sep 13 00:22:43.697641 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 13 00:22:43.698098 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 13 00:22:43.703622 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 13 00:22:43.704020 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 13 00:22:43.725559 jq[1738]: true Sep 13 00:22:43.763403 jq[1755]: true Sep 13 00:22:43.840248 tar[1750]: linux-arm64/helm Sep 13 00:22:43.850475 extend-filesystems[1727]: Found loop1 Sep 13 00:22:43.862760 systemd[1]: motdgen.service: Deactivated successfully. Sep 13 00:22:43.863183 systemd[1]: Finished motdgen.service. Sep 13 00:22:43.878791 extend-filesystems[1727]: Found nvme0n1 Sep 13 00:22:43.880436 extend-filesystems[1727]: Found nvme0n1p1 Sep 13 00:22:43.880436 extend-filesystems[1727]: Found nvme0n1p2 Sep 13 00:22:43.880436 extend-filesystems[1727]: Found nvme0n1p3 Sep 13 00:22:43.885429 extend-filesystems[1727]: Found usr Sep 13 00:22:43.885429 extend-filesystems[1727]: Found nvme0n1p4 Sep 13 00:22:43.885429 extend-filesystems[1727]: Found nvme0n1p6 Sep 13 00:22:43.885429 extend-filesystems[1727]: Found nvme0n1p7 Sep 13 00:22:43.885429 extend-filesystems[1727]: Found nvme0n1p9 Sep 13 00:22:43.885429 extend-filesystems[1727]: Checking size of /dev/nvme0n1p9 Sep 13 00:22:43.912768 dbus-daemon[1725]: [system] SELinux support is enabled Sep 13 00:22:43.915480 systemd[1]: Started dbus.service. Sep 13 00:22:43.920376 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 13 00:22:43.920443 systemd[1]: Reached target system-config.target. Sep 13 00:22:43.922630 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 13 00:22:43.922687 systemd[1]: Reached target user-config.target. Sep 13 00:22:43.956371 dbus-daemon[1725]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1463 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Sep 13 00:22:43.965838 dbus-daemon[1725]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 13 00:22:43.977498 systemd[1]: Starting systemd-hostnamed.service... Sep 13 00:22:44.003128 extend-filesystems[1727]: Resized partition /dev/nvme0n1p9 Sep 13 00:22:44.042180 extend-filesystems[1787]: resize2fs 1.46.5 (30-Dec-2021) Sep 13 00:22:44.073695 bash[1786]: Updated "/home/core/.ssh/authorized_keys" Sep 13 00:22:44.075282 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 13 00:22:44.082983 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Sep 13 00:22:44.141641 update_engine[1736]: I0913 00:22:44.140575 1736 main.cc:92] Flatcar Update Engine starting Sep 13 00:22:44.152041 systemd[1]: Started update-engine.service. Sep 13 00:22:44.155620 update_engine[1736]: I0913 00:22:44.155551 1736 update_check_scheduler.cc:74] Next update check in 6m15s Sep 13 00:22:44.156864 systemd[1]: Started locksmithd.service. Sep 13 00:22:44.174012 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Sep 13 00:22:44.199242 extend-filesystems[1787]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Sep 13 00:22:44.199242 extend-filesystems[1787]: old_desc_blocks = 1, new_desc_blocks = 1 Sep 13 00:22:44.199242 extend-filesystems[1787]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Sep 13 00:22:44.207092 extend-filesystems[1727]: Resized filesystem in /dev/nvme0n1p9 Sep 13 00:22:44.211100 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 13 00:22:44.211475 systemd[1]: Finished extend-filesystems.service. Sep 13 00:22:44.236564 amazon-ssm-agent[1722]: 2025/09/13 00:22:44 Failed to load instance info from vault. RegistrationKey does not exist. Sep 13 00:22:44.245451 amazon-ssm-agent[1722]: Initializing new seelog logger Sep 13 00:22:44.255246 amazon-ssm-agent[1722]: New Seelog Logger Creation Complete Sep 13 00:22:44.256359 amazon-ssm-agent[1722]: 2025/09/13 00:22:44 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Sep 13 00:22:44.256570 amazon-ssm-agent[1722]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Sep 13 00:22:44.259195 amazon-ssm-agent[1722]: 2025/09/13 00:22:44 processing appconfig overrides Sep 13 00:22:44.313269 systemd-logind[1734]: Watching system buttons on /dev/input/event0 (Power Button) Sep 13 00:22:44.313321 systemd-logind[1734]: Watching system buttons on /dev/input/event1 (Sleep Button) Sep 13 00:22:44.327255 systemd-logind[1734]: New seat seat0. Sep 13 00:22:44.328454 systemd[1]: nvidia.service: Deactivated successfully. Sep 13 00:22:44.331069 env[1742]: time="2025-09-13T00:22:44.330944462Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 13 00:22:44.336343 systemd[1]: Started systemd-logind.service. Sep 13 00:22:44.483383 env[1742]: time="2025-09-13T00:22:44.483141361Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 13 00:22:44.486411 env[1742]: time="2025-09-13T00:22:44.486344737Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:22:44.496557 env[1742]: time="2025-09-13T00:22:44.496116004Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:22:44.497123 env[1742]: time="2025-09-13T00:22:44.497085483Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.552350456Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.552474209Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.552510634Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.552534866Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.552840928Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.553606964Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.553980055Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 00:22:44.554072 env[1742]: time="2025-09-13T00:22:44.554021853Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 13 00:22:44.555137 env[1742]: time="2025-09-13T00:22:44.554788183Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 13 00:22:44.555137 env[1742]: time="2025-09-13T00:22:44.554831214Z" level=info msg="metadata content store policy set" policy=shared Sep 13 00:22:44.561142 env[1742]: time="2025-09-13T00:22:44.561084136Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 13 00:22:44.561379 env[1742]: time="2025-09-13T00:22:44.561348165Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 13 00:22:44.561529 env[1742]: time="2025-09-13T00:22:44.561500116Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 13 00:22:44.561697 env[1742]: time="2025-09-13T00:22:44.561666185Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.561904 env[1742]: time="2025-09-13T00:22:44.561874052Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.562040 env[1742]: time="2025-09-13T00:22:44.562012297Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.562156 env[1742]: time="2025-09-13T00:22:44.562128294Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.562758 env[1742]: time="2025-09-13T00:22:44.562714356Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.562922 env[1742]: time="2025-09-13T00:22:44.562893274Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.563084 env[1742]: time="2025-09-13T00:22:44.563055435Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.563202 env[1742]: time="2025-09-13T00:22:44.563173907Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.563316 env[1742]: time="2025-09-13T00:22:44.563288402Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 13 00:22:44.563624 env[1742]: time="2025-09-13T00:22:44.563596495Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 13 00:22:44.563878 env[1742]: time="2025-09-13T00:22:44.563851065Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 13 00:22:44.564645 env[1742]: time="2025-09-13T00:22:44.564614543Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 13 00:22:44.564784 env[1742]: time="2025-09-13T00:22:44.564755417Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.564903 env[1742]: time="2025-09-13T00:22:44.564874958Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 13 00:22:44.565222 env[1742]: time="2025-09-13T00:22:44.565194198Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.565422 env[1742]: time="2025-09-13T00:22:44.565394039Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.565571 env[1742]: time="2025-09-13T00:22:44.565543456Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.565686 env[1742]: time="2025-09-13T00:22:44.565658678Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.565814 env[1742]: time="2025-09-13T00:22:44.565786574Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.565928 env[1742]: time="2025-09-13T00:22:44.565900752Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.566066 env[1742]: time="2025-09-13T00:22:44.566038023Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.566194 env[1742]: time="2025-09-13T00:22:44.566166588Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.566356 env[1742]: time="2025-09-13T00:22:44.566327282Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 13 00:22:44.566704 env[1742]: time="2025-09-13T00:22:44.566675577Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.566828 env[1742]: time="2025-09-13T00:22:44.566799847Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.567026 env[1742]: time="2025-09-13T00:22:44.566996542Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.567162 env[1742]: time="2025-09-13T00:22:44.567133333Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 13 00:22:44.567335 env[1742]: time="2025-09-13T00:22:44.567301807Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 13 00:22:44.567518 env[1742]: time="2025-09-13T00:22:44.567488880Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 13 00:22:44.567687 env[1742]: time="2025-09-13T00:22:44.567656979Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 13 00:22:44.568111 env[1742]: time="2025-09-13T00:22:44.568077113Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 13 00:22:44.574694 env[1742]: time="2025-09-13T00:22:44.574556279Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 13 00:22:44.581901 env[1742]: time="2025-09-13T00:22:44.576913365Z" level=info msg="Connect containerd service" Sep 13 00:22:44.583124 env[1742]: time="2025-09-13T00:22:44.583061121Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 13 00:22:44.584704 env[1742]: time="2025-09-13T00:22:44.584638489Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 00:22:44.588314 env[1742]: time="2025-09-13T00:22:44.588244104Z" level=info msg="Start subscribing containerd event" Sep 13 00:22:44.591108 env[1742]: time="2025-09-13T00:22:44.591041521Z" level=info msg="Start recovering state" Sep 13 00:22:44.591404 env[1742]: time="2025-09-13T00:22:44.591373235Z" level=info msg="Start event monitor" Sep 13 00:22:44.592438 env[1742]: time="2025-09-13T00:22:44.592369680Z" level=info msg="Start snapshots syncer" Sep 13 00:22:44.592606 env[1742]: time="2025-09-13T00:22:44.592578592Z" level=info msg="Start cni network conf syncer for default" Sep 13 00:22:44.592757 env[1742]: time="2025-09-13T00:22:44.592729264Z" level=info msg="Start streaming server" Sep 13 00:22:44.593728 env[1742]: time="2025-09-13T00:22:44.593657355Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 13 00:22:44.596009 dbus-daemon[1725]: [system] Successfully activated service 'org.freedesktop.hostname1' Sep 13 00:22:44.596255 systemd[1]: Started systemd-hostnamed.service. Sep 13 00:22:44.599309 env[1742]: time="2025-09-13T00:22:44.599267760Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 13 00:22:44.599792 dbus-daemon[1725]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1782 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Sep 13 00:22:44.600737 env[1742]: time="2025-09-13T00:22:44.600681465Z" level=info msg="containerd successfully booted in 0.302237s" Sep 13 00:22:44.602382 systemd[1]: Started containerd.service. Sep 13 00:22:44.607565 systemd[1]: Starting polkit.service... Sep 13 00:22:44.648223 polkitd[1834]: Started polkitd version 121 Sep 13 00:22:44.697893 polkitd[1834]: Loading rules from directory /etc/polkit-1/rules.d Sep 13 00:22:44.698052 polkitd[1834]: Loading rules from directory /usr/share/polkit-1/rules.d Sep 13 00:22:44.713036 polkitd[1834]: Finished loading, compiling and executing 2 rules Sep 13 00:22:44.714254 dbus-daemon[1725]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Sep 13 00:22:44.714496 systemd[1]: Started polkit.service. Sep 13 00:22:44.716586 polkitd[1834]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Sep 13 00:22:44.760457 systemd-hostnamed[1782]: Hostname set to (transient) Sep 13 00:22:44.760609 systemd-resolved[1690]: System hostname changed to 'ip-172-31-25-123'. Sep 13 00:22:44.786654 coreos-metadata[1724]: Sep 13 00:22:44.786 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Sep 13 00:22:44.790417 coreos-metadata[1724]: Sep 13 00:22:44.790 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Sep 13 00:22:44.794228 coreos-metadata[1724]: Sep 13 00:22:44.794 INFO Fetch successful Sep 13 00:22:44.794366 coreos-metadata[1724]: Sep 13 00:22:44.794 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Sep 13 00:22:44.795542 coreos-metadata[1724]: Sep 13 00:22:44.795 INFO Fetch successful Sep 13 00:22:44.798258 unknown[1724]: wrote ssh authorized keys file for user: core Sep 13 00:22:44.823685 update-ssh-keys[1866]: Updated "/home/core/.ssh/authorized_keys" Sep 13 00:22:44.824670 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Sep 13 00:22:44.943735 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Create new startup processor Sep 13 00:22:44.945554 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [LongRunningPluginsManager] registered plugins: {} Sep 13 00:22:44.945776 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing bookkeeping folders Sep 13 00:22:44.945907 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO removing the completed state files Sep 13 00:22:44.946079 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing bookkeeping folders for long running plugins Sep 13 00:22:44.946214 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Sep 13 00:22:44.947263 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing healthcheck folders for long running plugins Sep 13 00:22:44.947427 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing locations for inventory plugin Sep 13 00:22:44.947580 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing default location for custom inventory Sep 13 00:22:44.947713 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing default location for file inventory Sep 13 00:22:44.947845 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Initializing default location for role inventory Sep 13 00:22:44.948005 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Init the cloudwatchlogs publisher Sep 13 00:22:44.948137 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:softwareInventory Sep 13 00:22:44.948279 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:updateSsmAgent Sep 13 00:22:44.948421 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:runDockerAction Sep 13 00:22:44.948556 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:refreshAssociation Sep 13 00:22:44.948687 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:downloadContent Sep 13 00:22:44.948818 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:runPowerShellScript Sep 13 00:22:44.948978 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:configureDocker Sep 13 00:22:44.949124 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:configurePackage Sep 13 00:22:44.949262 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform independent plugin aws:runDocument Sep 13 00:22:44.949392 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Successfully loaded platform dependent plugin aws:runShellScript Sep 13 00:22:44.949525 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Sep 13 00:22:44.949837 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO OS: linux, Arch: arm64 Sep 13 00:22:44.953741 amazon-ssm-agent[1722]: datastore file /var/lib/amazon/ssm/i-083a486511cc7ed56/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Sep 13 00:22:44.955204 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] Starting document processing engine... Sep 13 00:22:45.061918 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] [EngineProcessor] Starting Sep 13 00:22:45.163996 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Sep 13 00:22:45.258507 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] Starting message polling Sep 13 00:22:45.353288 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] Starting send replies to MDS Sep 13 00:22:45.448136 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [instanceID=i-083a486511cc7ed56] Starting association polling Sep 13 00:22:45.543239 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Sep 13 00:22:45.547363 tar[1750]: linux-arm64/LICENSE Sep 13 00:22:45.548098 tar[1750]: linux-arm64/README.md Sep 13 00:22:45.558993 systemd[1]: Finished prepare-helm.service. Sep 13 00:22:45.638641 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] [Association] Launching response handler Sep 13 00:22:45.659543 locksmithd[1802]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 13 00:22:45.734072 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Sep 13 00:22:45.829786 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Sep 13 00:22:45.925747 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Sep 13 00:22:46.021790 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessageGatewayService] Starting session document processing engine... Sep 13 00:22:46.118042 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessageGatewayService] [EngineProcessor] Starting Sep 13 00:22:46.214599 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Sep 13 00:22:46.311214 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-083a486511cc7ed56, requestId: 42f2906e-d1c1-42a7-a4a2-065e276f9a99 Sep 13 00:22:46.408078 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [OfflineService] Starting document processing engine... Sep 13 00:22:46.505278 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [OfflineService] [EngineProcessor] Starting Sep 13 00:22:46.602515 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [OfflineService] [EngineProcessor] Initial processing Sep 13 00:22:46.699927 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [OfflineService] Starting message polling Sep 13 00:22:46.735036 sshd_keygen[1762]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 13 00:22:46.774432 systemd[1]: Finished sshd-keygen.service. Sep 13 00:22:46.780241 systemd[1]: Starting issuegen.service... Sep 13 00:22:46.792393 systemd[1]: issuegen.service: Deactivated successfully. Sep 13 00:22:46.792744 systemd[1]: Finished issuegen.service. Sep 13 00:22:46.797638 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [OfflineService] Starting send replies to MDS Sep 13 00:22:46.797668 systemd[1]: Starting systemd-user-sessions.service... Sep 13 00:22:46.814166 systemd[1]: Finished systemd-user-sessions.service. Sep 13 00:22:46.821748 systemd[1]: Started getty@tty1.service. Sep 13 00:22:46.828849 systemd[1]: Started serial-getty@ttyS0.service. Sep 13 00:22:46.831502 systemd[1]: Reached target getty.target. Sep 13 00:22:46.895511 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [LongRunningPluginsManager] starting long running plugin manager Sep 13 00:22:46.993563 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Sep 13 00:22:47.091885 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [HealthCheck] HealthCheck reporting agent health. Sep 13 00:22:47.190251 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [MessageGatewayService] listening reply. Sep 13 00:22:47.288898 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Sep 13 00:22:47.387737 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [StartupProcessor] Executing startup processor tasks Sep 13 00:22:47.486676 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Sep 13 00:22:47.515550 systemd[1]: Started kubelet.service. Sep 13 00:22:47.519019 systemd[1]: Reached target multi-user.target. Sep 13 00:22:47.523722 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 13 00:22:47.539588 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 13 00:22:47.539980 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 13 00:22:47.542422 systemd[1]: Startup finished in 1.188s (kernel) + 8.716s (initrd) + 12.226s (userspace) = 22.130s. Sep 13 00:22:47.585903 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Sep 13 00:22:47.685369 amazon-ssm-agent[1722]: 2025-09-13 00:22:44 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Sep 13 00:22:47.784923 amazon-ssm-agent[1722]: 2025-09-13 00:22:45 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-083a486511cc7ed56?role=subscribe&stream=input Sep 13 00:22:47.884831 amazon-ssm-agent[1722]: 2025-09-13 00:22:45 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-083a486511cc7ed56?role=subscribe&stream=input Sep 13 00:22:47.984860 amazon-ssm-agent[1722]: 2025-09-13 00:22:45 INFO [MessageGatewayService] Starting receiving message from control channel Sep 13 00:22:48.084975 amazon-ssm-agent[1722]: 2025-09-13 00:22:45 INFO [MessageGatewayService] [EngineProcessor] Initial processing Sep 13 00:22:49.384454 kubelet[1935]: E0913 00:22:49.384394 1935 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:22:49.388347 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:22:49.388658 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:22:49.389095 systemd[1]: kubelet.service: Consumed 1.601s CPU time. Sep 13 00:22:52.523226 systemd[1]: Created slice system-sshd.slice. Sep 13 00:22:52.525620 systemd[1]: Started sshd@0-172.31.25.123:22-139.178.89.65:52628.service. Sep 13 00:22:52.825864 sshd[1943]: Accepted publickey for core from 139.178.89.65 port 52628 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:22:52.831045 sshd[1943]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:52.851394 systemd[1]: Created slice user-500.slice. Sep 13 00:22:52.853693 systemd[1]: Starting user-runtime-dir@500.service... Sep 13 00:22:52.860919 systemd-logind[1734]: New session 1 of user core. Sep 13 00:22:52.873175 systemd[1]: Finished user-runtime-dir@500.service. Sep 13 00:22:52.876681 systemd[1]: Starting user@500.service... Sep 13 00:22:52.885131 (systemd)[1946]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:53.100338 systemd[1946]: Queued start job for default target default.target. Sep 13 00:22:53.102700 systemd[1946]: Reached target paths.target. Sep 13 00:22:53.102974 systemd[1946]: Reached target sockets.target. Sep 13 00:22:53.103129 systemd[1946]: Reached target timers.target. Sep 13 00:22:53.103276 systemd[1946]: Reached target basic.target. Sep 13 00:22:53.103489 systemd[1946]: Reached target default.target. Sep 13 00:22:53.103582 systemd[1]: Started user@500.service. Sep 13 00:22:53.104414 systemd[1946]: Startup finished in 207ms. Sep 13 00:22:53.106152 systemd[1]: Started session-1.scope. Sep 13 00:22:53.253132 systemd[1]: Started sshd@1-172.31.25.123:22-139.178.89.65:52644.service. Sep 13 00:22:53.424012 sshd[1955]: Accepted publickey for core from 139.178.89.65 port 52644 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:22:53.426378 sshd[1955]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:53.434516 systemd-logind[1734]: New session 2 of user core. Sep 13 00:22:53.435431 systemd[1]: Started session-2.scope. Sep 13 00:22:53.563022 sshd[1955]: pam_unix(sshd:session): session closed for user core Sep 13 00:22:53.567869 systemd-logind[1734]: Session 2 logged out. Waiting for processes to exit. Sep 13 00:22:53.568458 systemd[1]: sshd@1-172.31.25.123:22-139.178.89.65:52644.service: Deactivated successfully. Sep 13 00:22:53.569702 systemd[1]: session-2.scope: Deactivated successfully. Sep 13 00:22:53.571171 systemd-logind[1734]: Removed session 2. Sep 13 00:22:53.593990 systemd[1]: Started sshd@2-172.31.25.123:22-139.178.89.65:52652.service. Sep 13 00:22:53.764853 sshd[1961]: Accepted publickey for core from 139.178.89.65 port 52652 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:22:53.767916 sshd[1961]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:53.776073 systemd-logind[1734]: New session 3 of user core. Sep 13 00:22:53.776146 systemd[1]: Started session-3.scope. Sep 13 00:22:53.897414 sshd[1961]: pam_unix(sshd:session): session closed for user core Sep 13 00:22:53.902063 systemd[1]: sshd@2-172.31.25.123:22-139.178.89.65:52652.service: Deactivated successfully. Sep 13 00:22:53.903281 systemd[1]: session-3.scope: Deactivated successfully. Sep 13 00:22:53.904379 systemd-logind[1734]: Session 3 logged out. Waiting for processes to exit. Sep 13 00:22:53.906563 systemd-logind[1734]: Removed session 3. Sep 13 00:22:53.924312 systemd[1]: Started sshd@3-172.31.25.123:22-139.178.89.65:52660.service. Sep 13 00:22:54.096067 sshd[1967]: Accepted publickey for core from 139.178.89.65 port 52660 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:22:54.098003 sshd[1967]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:54.107209 systemd-logind[1734]: New session 4 of user core. Sep 13 00:22:54.108122 systemd[1]: Started session-4.scope. Sep 13 00:22:54.242312 sshd[1967]: pam_unix(sshd:session): session closed for user core Sep 13 00:22:54.246692 systemd[1]: sshd@3-172.31.25.123:22-139.178.89.65:52660.service: Deactivated successfully. Sep 13 00:22:54.247923 systemd[1]: session-4.scope: Deactivated successfully. Sep 13 00:22:54.249203 systemd-logind[1734]: Session 4 logged out. Waiting for processes to exit. Sep 13 00:22:54.251108 systemd-logind[1734]: Removed session 4. Sep 13 00:22:54.270154 systemd[1]: Started sshd@4-172.31.25.123:22-139.178.89.65:52662.service. Sep 13 00:22:54.441268 sshd[1973]: Accepted publickey for core from 139.178.89.65 port 52662 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:22:54.444168 sshd[1973]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:54.451520 systemd-logind[1734]: New session 5 of user core. Sep 13 00:22:54.452384 systemd[1]: Started session-5.scope. Sep 13 00:22:54.624893 sudo[1976]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 13 00:22:54.625480 sudo[1976]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:22:54.650218 dbus-daemon[1725]: avc: received setenforce notice (enforcing=1) Sep 13 00:22:54.652902 sudo[1976]: pam_unix(sudo:session): session closed for user root Sep 13 00:22:54.677856 sshd[1973]: pam_unix(sshd:session): session closed for user core Sep 13 00:22:54.682694 systemd[1]: session-5.scope: Deactivated successfully. Sep 13 00:22:54.683811 systemd[1]: sshd@4-172.31.25.123:22-139.178.89.65:52662.service: Deactivated successfully. Sep 13 00:22:54.685510 systemd-logind[1734]: Session 5 logged out. Waiting for processes to exit. Sep 13 00:22:54.687378 systemd-logind[1734]: Removed session 5. Sep 13 00:22:54.707420 systemd[1]: Started sshd@5-172.31.25.123:22-139.178.89.65:52666.service. Sep 13 00:22:54.876350 sshd[1980]: Accepted publickey for core from 139.178.89.65 port 52666 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:22:54.879375 sshd[1980]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:54.887614 systemd[1]: Started session-6.scope. Sep 13 00:22:54.889049 systemd-logind[1734]: New session 6 of user core. Sep 13 00:22:54.993473 sudo[1984]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 13 00:22:54.994648 sudo[1984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:22:55.000048 sudo[1984]: pam_unix(sudo:session): session closed for user root Sep 13 00:22:55.009350 sudo[1983]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 13 00:22:55.010363 sudo[1983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:22:55.029070 systemd[1]: Stopping audit-rules.service... Sep 13 00:22:55.029000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 00:22:55.032182 kernel: kauditd_printk_skb: 114 callbacks suppressed Sep 13 00:22:55.032250 kernel: audit: type=1305 audit(1757722975.029:206): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 00:22:55.032635 auditctl[1987]: No rules Sep 13 00:22:55.033552 systemd[1]: audit-rules.service: Deactivated successfully. Sep 13 00:22:55.033885 systemd[1]: Stopped audit-rules.service. Sep 13 00:22:55.037933 systemd[1]: Starting audit-rules.service... Sep 13 00:22:55.029000 audit[1987]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff4fa5900 a2=420 a3=0 items=0 ppid=1 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.051077 kernel: audit: type=1300 audit(1757722975.029:206): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff4fa5900 a2=420 a3=0 items=0 ppid=1 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.029000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 13 00:22:55.054692 kernel: audit: type=1327 audit(1757722975.029:206): proctitle=2F7362696E2F617564697463746C002D44 Sep 13 00:22:55.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.063501 kernel: audit: type=1131 audit(1757722975.031:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.079339 augenrules[2004]: No rules Sep 13 00:22:55.080893 systemd[1]: Finished audit-rules.service. Sep 13 00:22:55.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.083220 sudo[1983]: pam_unix(sudo:session): session closed for user root Sep 13 00:22:55.081000 audit[1983]: USER_END pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.099414 kernel: audit: type=1130 audit(1757722975.080:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.099473 kernel: audit: type=1106 audit(1757722975.081:209): pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.099517 kernel: audit: type=1104 audit(1757722975.081:210): pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.081000 audit[1983]: CRED_DISP pid=1983 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.108095 sshd[1980]: pam_unix(sshd:session): session closed for user core Sep 13 00:22:55.109000 audit[1980]: USER_END pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.109000 audit[1980]: CRED_DISP pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.123375 systemd[1]: sshd@5-172.31.25.123:22-139.178.89.65:52666.service: Deactivated successfully. Sep 13 00:22:55.124548 systemd[1]: session-6.scope: Deactivated successfully. Sep 13 00:22:55.131854 kernel: audit: type=1106 audit(1757722975.109:211): pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.132068 kernel: audit: type=1104 audit(1757722975.109:212): pid=1980 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.123:22-139.178.89.65:52666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.132861 systemd-logind[1734]: Session 6 logged out. Waiting for processes to exit. Sep 13 00:22:55.143027 kernel: audit: type=1131 audit(1757722975.121:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.123:22-139.178.89.65:52666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.140749 systemd[1]: Started sshd@6-172.31.25.123:22-139.178.89.65:52674.service. Sep 13 00:22:55.146883 systemd-logind[1734]: Removed session 6. Sep 13 00:22:55.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.123:22-139.178.89.65:52674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.309000 audit[2010]: USER_ACCT pid=2010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.312457 sshd[2010]: Accepted publickey for core from 139.178.89.65 port 52674 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:22:55.312000 audit[2010]: CRED_ACQ pid=2010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.313000 audit[2010]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd52f6170 a2=3 a3=1 items=0 ppid=1 pid=2010 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.313000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:22:55.315045 sshd[2010]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:22:55.323533 systemd[1]: Started session-7.scope. Sep 13 00:22:55.324301 systemd-logind[1734]: New session 7 of user core. Sep 13 00:22:55.331000 audit[2010]: USER_START pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.334000 audit[2012]: CRED_ACQ pid=2012 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:22:55.426000 audit[2013]: USER_ACCT pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.428080 sudo[2013]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 13 00:22:55.427000 audit[2013]: CRED_REFR pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.429156 sudo[2013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 00:22:55.431000 audit[2013]: USER_START pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:22:55.509302 systemd[1]: Starting docker.service... Sep 13 00:22:55.627140 env[2023]: time="2025-09-13T00:22:55.626013130Z" level=info msg="Starting up" Sep 13 00:22:55.630357 env[2023]: time="2025-09-13T00:22:55.630311389Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 00:22:55.630552 env[2023]: time="2025-09-13T00:22:55.630522409Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 00:22:55.630736 env[2023]: time="2025-09-13T00:22:55.630704119Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 00:22:55.630845 env[2023]: time="2025-09-13T00:22:55.630817945Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 00:22:55.634829 env[2023]: time="2025-09-13T00:22:55.634762430Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 00:22:55.634829 env[2023]: time="2025-09-13T00:22:55.634805219Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 00:22:55.635091 env[2023]: time="2025-09-13T00:22:55.634839663Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 00:22:55.635091 env[2023]: time="2025-09-13T00:22:55.634872722Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 00:22:55.647334 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport357380552-merged.mount: Deactivated successfully. Sep 13 00:22:55.699935 env[2023]: time="2025-09-13T00:22:55.699888575Z" level=info msg="Loading containers: start." Sep 13 00:22:55.809000 audit[2054]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.809000 audit[2054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc514bf20 a2=0 a3=1 items=0 ppid=2023 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.809000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 13 00:22:55.814000 audit[2056]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.814000 audit[2056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffffcb48290 a2=0 a3=1 items=0 ppid=2023 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.814000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 13 00:22:55.818000 audit[2058]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.818000 audit[2058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffda519b40 a2=0 a3=1 items=0 ppid=2023 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.818000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 00:22:55.822000 audit[2060]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2060 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.822000 audit[2060]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffead9fb00 a2=0 a3=1 items=0 ppid=2023 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.822000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 00:22:55.834000 audit[2062]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.834000 audit[2062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc4ec9cb0 a2=0 a3=1 items=0 ppid=2023 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.834000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 13 00:22:55.867000 audit[2067]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.867000 audit[2067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc7e6bba0 a2=0 a3=1 items=0 ppid=2023 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.867000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 13 00:22:55.884000 audit[2069]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.884000 audit[2069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd0215cf0 a2=0 a3=1 items=0 ppid=2023 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.884000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 13 00:22:55.888000 audit[2071]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.888000 audit[2071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe793c0a0 a2=0 a3=1 items=0 ppid=2023 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 13 00:22:55.893000 audit[2073]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.893000 audit[2073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd4eac020 a2=0 a3=1 items=0 ppid=2023 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.893000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:22:55.911000 audit[2077]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.911000 audit[2077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd75e4260 a2=0 a3=1 items=0 ppid=2023 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.911000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:22:55.919000 audit[2078]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:55.919000 audit[2078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffbd73050 a2=0 a3=1 items=0 ppid=2023 pid=2078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:55.919000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:22:55.937978 kernel: Initializing XFRM netlink socket Sep 13 00:22:55.981804 env[2023]: time="2025-09-13T00:22:55.981730727Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 13 00:22:55.984314 (udev-worker)[2034]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:22:56.032000 audit[2086]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.032000 audit[2086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffca460f30 a2=0 a3=1 items=0 ppid=2023 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.032000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 13 00:22:56.044000 audit[2089]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.044000 audit[2089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffef1a5960 a2=0 a3=1 items=0 ppid=2023 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.044000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 13 00:22:56.052000 audit[2092]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.052000 audit[2092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc99651a0 a2=0 a3=1 items=0 ppid=2023 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.052000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 13 00:22:56.057000 audit[2094]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.057000 audit[2094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc5195240 a2=0 a3=1 items=0 ppid=2023 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.057000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 13 00:22:56.061000 audit[2096]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.061000 audit[2096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc0da4ec0 a2=0 a3=1 items=0 ppid=2023 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.061000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 13 00:22:56.065000 audit[2098]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.065000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd2fba1f0 a2=0 a3=1 items=0 ppid=2023 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.065000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 13 00:22:56.069000 audit[2100]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.069000 audit[2100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffeda63860 a2=0 a3=1 items=0 ppid=2023 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.069000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 13 00:22:56.101000 audit[2103]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.101000 audit[2103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff294f920 a2=0 a3=1 items=0 ppid=2023 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.101000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 13 00:22:56.106000 audit[2105]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.106000 audit[2105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc66af6d0 a2=0 a3=1 items=0 ppid=2023 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 00:22:56.109000 audit[2107]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.109000 audit[2107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe6654fd0 a2=0 a3=1 items=0 ppid=2023 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.109000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 00:22:56.113000 audit[2109]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.113000 audit[2109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffee2551e0 a2=0 a3=1 items=0 ppid=2023 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 13 00:22:56.116295 systemd-networkd[1463]: docker0: Link UP Sep 13 00:22:56.135000 audit[2113]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.135000 audit[2113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffea6c14f0 a2=0 a3=1 items=0 ppid=2023 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.135000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:22:56.141000 audit[2114]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:22:56.141000 audit[2114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe517efd0 a2=0 a3=1 items=0 ppid=2023 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:22:56.141000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 00:22:56.143609 env[2023]: time="2025-09-13T00:22:56.143567874Z" level=info msg="Loading containers: done." Sep 13 00:22:56.176367 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck624319336-merged.mount: Deactivated successfully. Sep 13 00:22:56.198817 env[2023]: time="2025-09-13T00:22:56.198702938Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 13 00:22:56.199243 env[2023]: time="2025-09-13T00:22:56.199172055Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 13 00:22:56.199515 env[2023]: time="2025-09-13T00:22:56.199447375Z" level=info msg="Daemon has completed initialization" Sep 13 00:22:56.233162 systemd[1]: Started docker.service. Sep 13 00:22:56.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:56.249926 env[2023]: time="2025-09-13T00:22:56.249836266Z" level=info msg="API listen on /run/docker.sock" Sep 13 00:22:58.163067 env[1742]: time="2025-09-13T00:22:58.162999213Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.13\"" Sep 13 00:22:58.840927 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3697559097.mount: Deactivated successfully. Sep 13 00:22:59.639983 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 13 00:22:59.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:59.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:59.640311 systemd[1]: Stopped kubelet.service. Sep 13 00:22:59.640431 systemd[1]: kubelet.service: Consumed 1.601s CPU time. Sep 13 00:22:59.642990 systemd[1]: Starting kubelet.service... Sep 13 00:22:59.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:22:59.972623 systemd[1]: Started kubelet.service. Sep 13 00:23:00.058673 kubelet[2151]: E0913 00:23:00.058611 2151 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:23:00.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:23:00.065876 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:23:00.066204 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:23:00.068692 kernel: kauditd_printk_skb: 87 callbacks suppressed Sep 13 00:23:00.068770 kernel: audit: type=1131 audit(1757722980.065:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:23:01.300909 env[1742]: time="2025-09-13T00:23:01.300846665Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:01.305505 env[1742]: time="2025-09-13T00:23:01.305454242Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0b1c07d8fd4a3526d5c44502e682df3627a3b01c1e608e5e24c3519c8fb337b6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:01.308778 env[1742]: time="2025-09-13T00:23:01.308701685Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:01.312442 env[1742]: time="2025-09-13T00:23:01.312376562Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:9abeb8a2d3e53e356d1f2e5d5dc2081cf28f23242651b0552c9e38f4a7ae960e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:01.314344 env[1742]: time="2025-09-13T00:23:01.314297037Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.13\" returns image reference \"sha256:0b1c07d8fd4a3526d5c44502e682df3627a3b01c1e608e5e24c3519c8fb337b6\"" Sep 13 00:23:01.316862 env[1742]: time="2025-09-13T00:23:01.316814548Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.13\"" Sep 13 00:23:03.832735 env[1742]: time="2025-09-13T00:23:03.832651834Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:03.838359 env[1742]: time="2025-09-13T00:23:03.838297553Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c359cb88f3d2147f2cb4c5ada4fbdeadc4b1c009d66c8f33f3856efaf04ee6ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:03.842621 env[1742]: time="2025-09-13T00:23:03.842558930Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:03.846845 env[1742]: time="2025-09-13T00:23:03.846791450Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:facc91288697a288a691520949fe4eec40059ef065c89da8e10481d14e131b09,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:03.848442 env[1742]: time="2025-09-13T00:23:03.848395272Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.13\" returns image reference \"sha256:c359cb88f3d2147f2cb4c5ada4fbdeadc4b1c009d66c8f33f3856efaf04ee6ef\"" Sep 13 00:23:03.849386 env[1742]: time="2025-09-13T00:23:03.849341769Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.13\"" Sep 13 00:23:04.687977 amazon-ssm-agent[1722]: 2025-09-13 00:23:04 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Sep 13 00:23:05.947619 env[1742]: time="2025-09-13T00:23:05.947539462Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:05.952994 env[1742]: time="2025-09-13T00:23:05.952915309Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e3cbe2ba7db787c6aebfcf4484156dd4ebd7ede811ef72e8929593e59a5fa27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:05.957549 env[1742]: time="2025-09-13T00:23:05.957474427Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:05.963435 env[1742]: time="2025-09-13T00:23:05.963361928Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:c5ce150dcce2419fdef9f9875fef43014355ccebf937846ed3a2971953f9b241,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:05.967001 env[1742]: time="2025-09-13T00:23:05.966884424Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.13\" returns image reference \"sha256:5e3cbe2ba7db787c6aebfcf4484156dd4ebd7ede811ef72e8929593e59a5fa27\"" Sep 13 00:23:05.970277 env[1742]: time="2025-09-13T00:23:05.970222811Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.13\"" Sep 13 00:23:07.368051 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1755118524.mount: Deactivated successfully. Sep 13 00:23:08.239474 env[1742]: time="2025-09-13T00:23:08.239415921Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:08.244089 env[1742]: time="2025-09-13T00:23:08.244022724Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c15699f0b7002450249485b10f20211982dfd2bec4d61c86c35acebc659e794e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:08.246076 env[1742]: time="2025-09-13T00:23:08.246019111Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.13,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:08.249094 env[1742]: time="2025-09-13T00:23:08.249035734Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:a39637326e88d128d38da6ff2b2ceb4e856475887bfcb5f7a55734d4f63d9fae,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:08.249789 env[1742]: time="2025-09-13T00:23:08.249483029Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.13\" returns image reference \"sha256:c15699f0b7002450249485b10f20211982dfd2bec4d61c86c35acebc659e794e\"" Sep 13 00:23:08.252837 env[1742]: time="2025-09-13T00:23:08.252779888Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 13 00:23:08.914640 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2234136717.mount: Deactivated successfully. Sep 13 00:23:10.247653 env[1742]: time="2025-09-13T00:23:10.247583104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.250359 env[1742]: time="2025-09-13T00:23:10.250293601Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.253920 env[1742]: time="2025-09-13T00:23:10.253858763Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.257621 env[1742]: time="2025-09-13T00:23:10.257568665Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.259342 env[1742]: time="2025-09-13T00:23:10.259279817Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Sep 13 00:23:10.260212 env[1742]: time="2025-09-13T00:23:10.260170013Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 13 00:23:10.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:10.317477 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 13 00:23:10.317783 systemd[1]: Stopped kubelet.service. Sep 13 00:23:10.320242 systemd[1]: Starting kubelet.service... Sep 13 00:23:10.334003 kernel: audit: type=1130 audit(1757722990.315:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:10.334136 kernel: audit: type=1131 audit(1757722990.315:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:10.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:10.668175 systemd[1]: Started kubelet.service. Sep 13 00:23:10.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:10.679056 kernel: audit: type=1130 audit(1757722990.667:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:10.762353 kubelet[2161]: E0913 00:23:10.762298 2161 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:23:10.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:23:10.765943 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:23:10.766291 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:23:10.775989 kernel: audit: type=1131 audit(1757722990.765:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:23:10.777376 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2655788886.mount: Deactivated successfully. Sep 13 00:23:10.783054 env[1742]: time="2025-09-13T00:23:10.783001539Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.786816 env[1742]: time="2025-09-13T00:23:10.786771651Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.790990 env[1742]: time="2025-09-13T00:23:10.790914408Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.793638 env[1742]: time="2025-09-13T00:23:10.793576074Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:10.795049 env[1742]: time="2025-09-13T00:23:10.794993668Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 13 00:23:10.795884 env[1742]: time="2025-09-13T00:23:10.795841017Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Sep 13 00:23:11.326482 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount440892583.mount: Deactivated successfully. Sep 13 00:23:14.770203 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Sep 13 00:23:14.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:14.781002 kernel: audit: type=1131 audit(1757722994.769:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:14.794000 audit: BPF prog-id=43 op=UNLOAD Sep 13 00:23:14.800423 kernel: audit: type=1334 audit(1757722994.794:257): prog-id=43 op=UNLOAD Sep 13 00:23:14.800514 kernel: audit: type=1334 audit(1757722994.794:258): prog-id=42 op=UNLOAD Sep 13 00:23:14.794000 audit: BPF prog-id=42 op=UNLOAD Sep 13 00:23:14.794000 audit: BPF prog-id=41 op=UNLOAD Sep 13 00:23:14.803342 kernel: audit: type=1334 audit(1757722994.794:259): prog-id=41 op=UNLOAD Sep 13 00:23:15.501167 env[1742]: time="2025-09-13T00:23:15.501095435Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:15.504656 env[1742]: time="2025-09-13T00:23:15.504595082Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:15.508765 env[1742]: time="2025-09-13T00:23:15.508700251Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:15.513133 env[1742]: time="2025-09-13T00:23:15.513084358Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:15.515743 env[1742]: time="2025-09-13T00:23:15.515649798Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Sep 13 00:23:20.951998 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 13 00:23:20.952349 systemd[1]: Stopped kubelet.service. Sep 13 00:23:20.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:20.954917 systemd[1]: Starting kubelet.service... Sep 13 00:23:20.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:20.974726 kernel: audit: type=1130 audit(1757723000.951:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:20.974791 kernel: audit: type=1131 audit(1757723000.951:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:21.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:21.285743 systemd[1]: Started kubelet.service. Sep 13 00:23:21.299004 kernel: audit: type=1130 audit(1757723001.285:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:21.386008 kubelet[2190]: E0913 00:23:21.385922 2190 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 00:23:21.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:23:21.389764 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 00:23:21.390105 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 00:23:21.400003 kernel: audit: type=1131 audit(1757723001.389:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 00:23:25.410097 systemd[1]: Stopped kubelet.service. Sep 13 00:23:25.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:25.419416 systemd[1]: Starting kubelet.service... Sep 13 00:23:25.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:25.430210 kernel: audit: type=1130 audit(1757723005.410:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:25.430363 kernel: audit: type=1131 audit(1757723005.414:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:25.484401 systemd[1]: Reloading. Sep 13 00:23:25.640890 /usr/lib/systemd/system-generators/torcx-generator[2222]: time="2025-09-13T00:23:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:23:25.651030 /usr/lib/systemd/system-generators/torcx-generator[2222]: time="2025-09-13T00:23:25Z" level=info msg="torcx already run" Sep 13 00:23:25.863882 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:23:25.864186 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:23:25.902479 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:23:26.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079470 kernel: audit: type=1400 audit(1757723006.063:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079550 kernel: audit: type=1400 audit(1757723006.063:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079602 kernel: audit: type=1400 audit(1757723006.063:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.086892 kernel: audit: type=1400 audit(1757723006.064:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.094292 kernel: audit: type=1400 audit(1757723006.064:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101637 kernel: audit: type=1400 audit(1757723006.064:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.109026 kernel: audit: type=1400 audit(1757723006.064:272): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.116336 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 00:23:26.116472 kernel: audit: type=1400 audit(1757723006.064:273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.116535 kernel: audit: type=1400 audit(1757723006.071:274): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit: BPF prog-id=46 op=LOAD Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.078000 audit: BPF prog-id=47 op=LOAD Sep 13 00:23:26.078000 audit: BPF prog-id=27 op=UNLOAD Sep 13 00:23:26.078000 audit: BPF prog-id=28 op=UNLOAD Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.086000 audit: BPF prog-id=48 op=LOAD Sep 13 00:23:26.086000 audit: BPF prog-id=29 op=UNLOAD Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.093000 audit: BPF prog-id=49 op=LOAD Sep 13 00:23:26.093000 audit: BPF prog-id=44 op=UNLOAD Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.100000 audit: BPF prog-id=50 op=LOAD Sep 13 00:23:26.100000 audit: BPF prog-id=30 op=UNLOAD Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.108000 audit: BPF prog-id=51 op=LOAD Sep 13 00:23:26.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.132000 audit: BPF prog-id=52 op=LOAD Sep 13 00:23:26.132000 audit: BPF prog-id=31 op=UNLOAD Sep 13 00:23:26.132000 audit: BPF prog-id=32 op=UNLOAD Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.134000 audit: BPF prog-id=53 op=LOAD Sep 13 00:23:26.134000 audit: BPF prog-id=36 op=UNLOAD Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit: BPF prog-id=54 op=LOAD Sep 13 00:23:26.139000 audit: BPF prog-id=38 op=UNLOAD Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit: BPF prog-id=55 op=LOAD Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.139000 audit: BPF prog-id=56 op=LOAD Sep 13 00:23:26.139000 audit: BPF prog-id=39 op=UNLOAD Sep 13 00:23:26.139000 audit: BPF prog-id=40 op=UNLOAD Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.144000 audit: BPF prog-id=57 op=LOAD Sep 13 00:23:26.144000 audit: BPF prog-id=37 op=UNLOAD Sep 13 00:23:26.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit: BPF prog-id=58 op=LOAD Sep 13 00:23:26.145000 audit: BPF prog-id=33 op=UNLOAD Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit: BPF prog-id=59 op=LOAD Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:26.145000 audit: BPF prog-id=60 op=LOAD Sep 13 00:23:26.146000 audit: BPF prog-id=34 op=UNLOAD Sep 13 00:23:26.146000 audit: BPF prog-id=35 op=UNLOAD Sep 13 00:23:26.187325 systemd[1]: Started kubelet.service. Sep 13 00:23:26.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:26.197715 systemd[1]: Stopping kubelet.service... Sep 13 00:23:26.198935 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 00:23:26.199350 systemd[1]: Stopped kubelet.service. Sep 13 00:23:26.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:26.203237 systemd[1]: Starting kubelet.service... Sep 13 00:23:26.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:26.520891 systemd[1]: Started kubelet.service. Sep 13 00:23:26.612047 kubelet[2290]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:23:26.612605 kubelet[2290]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 13 00:23:26.612716 kubelet[2290]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:23:26.613006 kubelet[2290]: I0913 00:23:26.612915 2290 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 00:23:28.231120 kubelet[2290]: I0913 00:23:28.231049 2290 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 13 00:23:28.231120 kubelet[2290]: I0913 00:23:28.231101 2290 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 00:23:28.232496 kubelet[2290]: I0913 00:23:28.232454 2290 server.go:934] "Client rotation is on, will bootstrap in background" Sep 13 00:23:28.315989 kubelet[2290]: E0913 00:23:28.315920 2290 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.25.123:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:28.317399 kubelet[2290]: I0913 00:23:28.317345 2290 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 00:23:28.332842 kubelet[2290]: E0913 00:23:28.332794 2290 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 00:23:28.333173 kubelet[2290]: I0913 00:23:28.333122 2290 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 00:23:28.340476 kubelet[2290]: I0913 00:23:28.340440 2290 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 00:23:28.341386 kubelet[2290]: I0913 00:23:28.341362 2290 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 13 00:23:28.341817 kubelet[2290]: I0913 00:23:28.341772 2290 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 00:23:28.342267 kubelet[2290]: I0913 00:23:28.341912 2290 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-25-123","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 00:23:28.342761 kubelet[2290]: I0913 00:23:28.342738 2290 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 00:23:28.342878 kubelet[2290]: I0913 00:23:28.342859 2290 container_manager_linux.go:300] "Creating device plugin manager" Sep 13 00:23:28.343302 kubelet[2290]: I0913 00:23:28.343280 2290 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:23:28.352393 kubelet[2290]: I0913 00:23:28.352359 2290 kubelet.go:408] "Attempting to sync node with API server" Sep 13 00:23:28.352593 kubelet[2290]: I0913 00:23:28.352545 2290 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 00:23:28.352722 kubelet[2290]: I0913 00:23:28.352701 2290 kubelet.go:314] "Adding apiserver pod source" Sep 13 00:23:28.352844 kubelet[2290]: I0913 00:23:28.352822 2290 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 00:23:28.366834 kubelet[2290]: W0913 00:23:28.366732 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.25.123:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-123&limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:28.367138 kubelet[2290]: E0913 00:23:28.366842 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.25.123:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-123&limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:28.367218 kubelet[2290]: I0913 00:23:28.367166 2290 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 00:23:28.368385 kubelet[2290]: I0913 00:23:28.368337 2290 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 00:23:28.368719 kubelet[2290]: W0913 00:23:28.368683 2290 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 13 00:23:28.371478 kubelet[2290]: I0913 00:23:28.371431 2290 server.go:1274] "Started kubelet" Sep 13 00:23:28.388000 audit[2290]: AVC avc: denied { mac_admin } for pid=2290 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:28.388000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:23:28.388000 audit[2290]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a1d200 a1=4000a2a870 a2=4000a1d1d0 a3=25 items=0 ppid=1 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.388000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:23:28.388000 audit[2290]: AVC avc: denied { mac_admin } for pid=2290 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:28.388000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:23:28.388000 audit[2290]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a00ba0 a1=4000a2a888 a2=4000a1d290 a3=25 items=0 ppid=1 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.388000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:23:28.389985 kubelet[2290]: I0913 00:23:28.389161 2290 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 00:23:28.389985 kubelet[2290]: I0913 00:23:28.389254 2290 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 13 00:23:28.389985 kubelet[2290]: I0913 00:23:28.389379 2290 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 00:23:28.394489 kubelet[2290]: E0913 00:23:28.392202 2290 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.25.123:6443/api/v1/namespaces/default/events\": dial tcp 172.31.25.123:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-25-123.1864afc367820853 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-25-123,UID:ip-172-31-25-123,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-25-123,},FirstTimestamp:2025-09-13 00:23:28.371394643 +0000 UTC m=+1.840814055,LastTimestamp:2025-09-13 00:23:28.371394643 +0000 UTC m=+1.840814055,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-25-123,}" Sep 13 00:23:28.393000 audit[2302]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.393000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdcc58850 a2=0 a3=1 items=0 ppid=2290 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 00:23:28.395000 audit[2303]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.395000 audit[2303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9790c10 a2=0 a3=1 items=0 ppid=2290 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.395000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 00:23:28.397601 kubelet[2290]: W0913 00:23:28.397525 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.25.123:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:28.397796 kubelet[2290]: E0913 00:23:28.397761 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.25.123:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:28.399173 kubelet[2290]: I0913 00:23:28.399107 2290 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 00:23:28.402364 kubelet[2290]: I0913 00:23:28.402297 2290 server.go:449] "Adding debug handlers to kubelet server" Sep 13 00:23:28.402819 kubelet[2290]: I0913 00:23:28.402746 2290 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 00:23:28.403752 kubelet[2290]: I0913 00:23:28.403692 2290 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 13 00:23:28.404027 kubelet[2290]: I0913 00:23:28.403999 2290 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 00:23:28.404723 kubelet[2290]: E0913 00:23:28.404656 2290 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ip-172-31-25-123\" not found" Sep 13 00:23:28.406516 kubelet[2290]: I0913 00:23:28.406474 2290 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 00:23:28.406000 audit[2305]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.406000 audit[2305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc61c7100 a2=0 a3=1 items=0 ppid=2290 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.406000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:23:28.411831 kubelet[2290]: I0913 00:23:28.411767 2290 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 13 00:23:28.412009 kubelet[2290]: I0913 00:23:28.411902 2290 reconciler.go:26] "Reconciler: start to sync state" Sep 13 00:23:28.413674 kubelet[2290]: E0913 00:23:28.413635 2290 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 00:23:28.412000 audit[2307]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.412000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc512db80 a2=0 a3=1 items=0 ppid=2290 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:23:28.418137 kubelet[2290]: E0913 00:23:28.418059 2290 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.123:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-123?timeout=10s\": dial tcp 172.31.25.123:6443: connect: connection refused" interval="200ms" Sep 13 00:23:28.418781 kubelet[2290]: I0913 00:23:28.418750 2290 factory.go:221] Registration of the systemd container factory successfully Sep 13 00:23:28.419171 kubelet[2290]: I0913 00:23:28.419140 2290 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 00:23:28.423463 kubelet[2290]: W0913 00:23:28.422941 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.25.123:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:28.423463 kubelet[2290]: E0913 00:23:28.423082 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.25.123:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:28.424574 kubelet[2290]: I0913 00:23:28.424541 2290 factory.go:221] Registration of the containerd container factory successfully Sep 13 00:23:28.449000 audit[2311]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.449000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc52e22c0 a2=0 a3=1 items=0 ppid=2290 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 13 00:23:28.451454 kubelet[2290]: I0913 00:23:28.451317 2290 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 00:23:28.452000 audit[2312]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:28.452000 audit[2312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe43156e0 a2=0 a3=1 items=0 ppid=2290 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 00:23:28.454241 kubelet[2290]: I0913 00:23:28.454202 2290 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 13 00:23:28.454241 kubelet[2290]: I0913 00:23:28.454237 2290 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 13 00:23:28.454425 kubelet[2290]: I0913 00:23:28.454271 2290 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:23:28.454498 kubelet[2290]: I0913 00:23:28.454031 2290 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 00:23:28.454498 kubelet[2290]: I0913 00:23:28.454494 2290 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 13 00:23:28.454604 kubelet[2290]: I0913 00:23:28.454534 2290 kubelet.go:2321] "Starting kubelet main sync loop" Sep 13 00:23:28.454662 kubelet[2290]: E0913 00:23:28.454608 2290 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 00:23:28.456627 kubelet[2290]: W0913 00:23:28.456535 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.25.123:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:28.457506 kubelet[2290]: E0913 00:23:28.456636 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.25.123:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:28.458032 kubelet[2290]: I0913 00:23:28.457933 2290 policy_none.go:49] "None policy: Start" Sep 13 00:23:28.459305 kubelet[2290]: I0913 00:23:28.459253 2290 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 13 00:23:28.459305 kubelet[2290]: I0913 00:23:28.459302 2290 state_mem.go:35] "Initializing new in-memory state store" Sep 13 00:23:28.459000 audit[2316]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:28.459000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe84e7520 a2=0 a3=1 items=0 ppid=2290 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.459000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 00:23:28.460000 audit[2314]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.460000 audit[2314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6e1ed70 a2=0 a3=1 items=0 ppid=2290 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 00:23:28.465000 audit[2319]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.465000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc00e9cc0 a2=0 a3=1 items=0 ppid=2290 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.466000 audit[2318]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:28.466000 audit[2318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffde6c0080 a2=0 a3=1 items=0 ppid=2290 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.466000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 00:23:28.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 00:23:28.470000 audit[2320]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:28.470000 audit[2320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe4025500 a2=0 a3=1 items=0 ppid=2290 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.470000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 00:23:28.471000 audit[2321]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:28.471000 audit[2321]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd4d9a5c0 a2=0 a3=1 items=0 ppid=2290 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.471000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 00:23:28.472476 systemd[1]: Created slice kubepods.slice. Sep 13 00:23:28.482084 systemd[1]: Created slice kubepods-besteffort.slice. Sep 13 00:23:28.499534 systemd[1]: Created slice kubepods-burstable.slice. Sep 13 00:23:28.503076 kubelet[2290]: I0913 00:23:28.503024 2290 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 00:23:28.502000 audit[2290]: AVC avc: denied { mac_admin } for pid=2290 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:28.502000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:23:28.502000 audit[2290]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000daa120 a1=4000d8cfc0 a2=4000daa0f0 a3=25 items=0 ppid=1 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:28.502000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:23:28.503540 kubelet[2290]: I0913 00:23:28.503226 2290 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 00:23:28.503540 kubelet[2290]: I0913 00:23:28.503484 2290 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 00:23:28.503666 kubelet[2290]: I0913 00:23:28.503533 2290 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 00:23:28.504247 kubelet[2290]: I0913 00:23:28.504184 2290 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 00:23:28.507606 kubelet[2290]: E0913 00:23:28.507553 2290 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-25-123\" not found" Sep 13 00:23:28.571284 systemd[1]: Created slice kubepods-burstable-pod023b45c4474c6c7027d641b89880466f.slice. Sep 13 00:23:28.591465 systemd[1]: Created slice kubepods-burstable-poda6a3c0eef321a7184cd351072a567a5f.slice. Sep 13 00:23:28.602104 systemd[1]: Created slice kubepods-burstable-pode59ce3ad5a9f4d76148f30c4a463b57d.slice. Sep 13 00:23:28.606277 kubelet[2290]: I0913 00:23:28.606240 2290 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-25-123" Sep 13 00:23:28.607451 kubelet[2290]: E0913 00:23:28.607395 2290 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.25.123:6443/api/v1/nodes\": dial tcp 172.31.25.123:6443: connect: connection refused" node="ip-172-31-25-123" Sep 13 00:23:28.619515 kubelet[2290]: E0913 00:23:28.619446 2290 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.123:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-123?timeout=10s\": dial tcp 172.31.25.123:6443: connect: connection refused" interval="400ms" Sep 13 00:23:28.713796 kubelet[2290]: I0913 00:23:28.713746 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/023b45c4474c6c7027d641b89880466f-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-123\" (UID: \"023b45c4474c6c7027d641b89880466f\") " pod="kube-system/kube-apiserver-ip-172-31-25-123" Sep 13 00:23:28.713933 kubelet[2290]: I0913 00:23:28.713806 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/023b45c4474c6c7027d641b89880466f-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-123\" (UID: \"023b45c4474c6c7027d641b89880466f\") " pod="kube-system/kube-apiserver-ip-172-31-25-123" Sep 13 00:23:28.713933 kubelet[2290]: I0913 00:23:28.713853 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:28.713933 kubelet[2290]: I0913 00:23:28.713893 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:28.713933 kubelet[2290]: I0913 00:23:28.713929 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:28.714214 kubelet[2290]: I0913 00:23:28.713986 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/023b45c4474c6c7027d641b89880466f-ca-certs\") pod \"kube-apiserver-ip-172-31-25-123\" (UID: \"023b45c4474c6c7027d641b89880466f\") " pod="kube-system/kube-apiserver-ip-172-31-25-123" Sep 13 00:23:28.714214 kubelet[2290]: I0913 00:23:28.714055 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:28.714214 kubelet[2290]: I0913 00:23:28.714091 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:28.714214 kubelet[2290]: I0913 00:23:28.714146 2290 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e59ce3ad5a9f4d76148f30c4a463b57d-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-123\" (UID: \"e59ce3ad5a9f4d76148f30c4a463b57d\") " pod="kube-system/kube-scheduler-ip-172-31-25-123" Sep 13 00:23:28.810778 kubelet[2290]: I0913 00:23:28.810649 2290 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-25-123" Sep 13 00:23:28.812471 kubelet[2290]: E0913 00:23:28.812427 2290 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.25.123:6443/api/v1/nodes\": dial tcp 172.31.25.123:6443: connect: connection refused" node="ip-172-31-25-123" Sep 13 00:23:28.887729 env[1742]: time="2025-09-13T00:23:28.887649626Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-123,Uid:023b45c4474c6c7027d641b89880466f,Namespace:kube-system,Attempt:0,}" Sep 13 00:23:28.904697 env[1742]: time="2025-09-13T00:23:28.904621386Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-123,Uid:a6a3c0eef321a7184cd351072a567a5f,Namespace:kube-system,Attempt:0,}" Sep 13 00:23:28.909822 env[1742]: time="2025-09-13T00:23:28.909421255Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-123,Uid:e59ce3ad5a9f4d76148f30c4a463b57d,Namespace:kube-system,Attempt:0,}" Sep 13 00:23:29.020787 kubelet[2290]: E0913 00:23:29.020735 2290 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.123:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-123?timeout=10s\": dial tcp 172.31.25.123:6443: connect: connection refused" interval="800ms" Sep 13 00:23:29.215419 kubelet[2290]: I0913 00:23:29.214899 2290 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-25-123" Sep 13 00:23:29.215419 kubelet[2290]: E0913 00:23:29.215364 2290 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.25.123:6443/api/v1/nodes\": dial tcp 172.31.25.123:6443: connect: connection refused" node="ip-172-31-25-123" Sep 13 00:23:29.262149 kubelet[2290]: W0913 00:23:29.262004 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.25.123:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:29.262149 kubelet[2290]: E0913 00:23:29.262077 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.25.123:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:29.320520 kubelet[2290]: W0913 00:23:29.320402 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.25.123:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:29.320520 kubelet[2290]: E0913 00:23:29.320469 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.25.123:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:29.389427 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount476453199.mount: Deactivated successfully. Sep 13 00:23:29.401656 env[1742]: time="2025-09-13T00:23:29.401575861Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.408250 env[1742]: time="2025-09-13T00:23:29.408184550Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.411277 env[1742]: time="2025-09-13T00:23:29.411231567Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.413344 update_engine[1736]: I0913 00:23:29.413017 1736 update_attempter.cc:509] Updating boot flags... Sep 13 00:23:29.415786 env[1742]: time="2025-09-13T00:23:29.415730932Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.419878 env[1742]: time="2025-09-13T00:23:29.419816105Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.425034 env[1742]: time="2025-09-13T00:23:29.424979046Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.430474 env[1742]: time="2025-09-13T00:23:29.430423615Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.435387 env[1742]: time="2025-09-13T00:23:29.435096452Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.448329 env[1742]: time="2025-09-13T00:23:29.448262771Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.452847 env[1742]: time="2025-09-13T00:23:29.452786916Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.457925 env[1742]: time="2025-09-13T00:23:29.457873021Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.492614 env[1742]: time="2025-09-13T00:23:29.488622547Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:29.534905 kubelet[2290]: W0913 00:23:29.534744 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.25.123:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-123&limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:29.534905 kubelet[2290]: E0913 00:23:29.534841 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.25.123:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-123&limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:29.584311 env[1742]: time="2025-09-13T00:23:29.584208639Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:23:29.584617 env[1742]: time="2025-09-13T00:23:29.584526940Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:23:29.584862 env[1742]: time="2025-09-13T00:23:29.584799208Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:23:29.585560 env[1742]: time="2025-09-13T00:23:29.585488824Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/12892c27b810f5cf89cb194714027b13d7f82e14f7429384f92d89817382a5b0 pid=2372 runtime=io.containerd.runc.v2 Sep 13 00:23:29.592697 env[1742]: time="2025-09-13T00:23:29.592467437Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:23:29.600068 env[1742]: time="2025-09-13T00:23:29.594512646Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:23:29.600068 env[1742]: time="2025-09-13T00:23:29.594590310Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:23:29.600068 env[1742]: time="2025-09-13T00:23:29.594940878Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a02de03e7e3ad016cd75d9d37b247ae30cbfd66d5a870fa6e8538ee36c806c35 pid=2388 runtime=io.containerd.runc.v2 Sep 13 00:23:29.600349 env[1742]: time="2025-09-13T00:23:29.600191755Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:23:29.600349 env[1742]: time="2025-09-13T00:23:29.600313315Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:23:29.600460 env[1742]: time="2025-09-13T00:23:29.600392083Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:23:29.600902 env[1742]: time="2025-09-13T00:23:29.600790879Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7cb56062791121d49fa96cc8e882251b94ef9c0f90a35808138d924e3d0b2670 pid=2379 runtime=io.containerd.runc.v2 Sep 13 00:23:29.634502 systemd[1]: Started cri-containerd-a02de03e7e3ad016cd75d9d37b247ae30cbfd66d5a870fa6e8538ee36c806c35.scope. Sep 13 00:23:29.718604 systemd[1]: Started cri-containerd-7cb56062791121d49fa96cc8e882251b94ef9c0f90a35808138d924e3d0b2670.scope. Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.752000 audit: BPF prog-id=61 op=LOAD Sep 13 00:23:29.780000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.780000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2388 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130326465303365376533616430313663643735643964333762323437 Sep 13 00:23:29.780000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.780000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2388 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130326465303365376533616430313663643735643964333762323437 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit: BPF prog-id=62 op=LOAD Sep 13 00:23:29.782000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2388 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130326465303365376533616430313663643735643964333762323437 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit: BPF prog-id=63 op=LOAD Sep 13 00:23:29.782000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2388 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130326465303365376533616430313663643735643964333762323437 Sep 13 00:23:29.782000 audit: BPF prog-id=63 op=UNLOAD Sep 13 00:23:29.782000 audit: BPF prog-id=62 op=UNLOAD Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.782000 audit: BPF prog-id=64 op=LOAD Sep 13 00:23:29.782000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2388 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130326465303365376533616430313663643735643964333762323437 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.795000 audit: BPF prog-id=65 op=LOAD Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2379 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623536303632373931313231643439666139366363386538383232 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2379 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623536303632373931313231643439666139366363386538383232 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.802000 audit: BPF prog-id=66 op=LOAD Sep 13 00:23:29.802000 audit[2433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2379 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623536303632373931313231643439666139366363386538383232 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit: BPF prog-id=67 op=LOAD Sep 13 00:23:29.803000 audit[2433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2379 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623536303632373931313231643439666139366363386538383232 Sep 13 00:23:29.803000 audit: BPF prog-id=67 op=UNLOAD Sep 13 00:23:29.803000 audit: BPF prog-id=66 op=UNLOAD Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { perfmon } for pid=2433 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit[2433]: AVC avc: denied { bpf } for pid=2433 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.803000 audit: BPF prog-id=68 op=LOAD Sep 13 00:23:29.803000 audit[2433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2379 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623536303632373931313231643439666139366363386538383232 Sep 13 00:23:29.822859 kubelet[2290]: E0913 00:23:29.822773 2290 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.123:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-123?timeout=10s\": dial tcp 172.31.25.123:6443: connect: connection refused" interval="1.6s" Sep 13 00:23:29.836066 systemd[1]: Started cri-containerd-12892c27b810f5cf89cb194714027b13d7f82e14f7429384f92d89817382a5b0.scope. Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.923000 audit: BPF prog-id=69 op=LOAD Sep 13 00:23:29.926000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.926000 audit[2435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2372 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383932633237623831306635636638396362313934373134303237 Sep 13 00:23:29.927000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.927000 audit[2435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2372 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383932633237623831306635636638396362313934373134303237 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.928000 audit: BPF prog-id=70 op=LOAD Sep 13 00:23:29.928000 audit[2435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2372 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383932633237623831306635636638396362313934373134303237 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.937079 env[1742]: time="2025-09-13T00:23:29.937009902Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-123,Uid:a6a3c0eef321a7184cd351072a567a5f,Namespace:kube-system,Attempt:0,} returns sandbox id \"7cb56062791121d49fa96cc8e882251b94ef9c0f90a35808138d924e3d0b2670\"" Sep 13 00:23:29.939105 kubelet[2290]: W0913 00:23:29.939015 2290 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.25.123:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.25.123:6443: connect: connection refused Sep 13 00:23:29.939256 kubelet[2290]: E0913 00:23:29.939119 2290 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.25.123:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.934000 audit: BPF prog-id=71 op=LOAD Sep 13 00:23:29.934000 audit[2435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2372 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.934000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383932633237623831306635636638396362313934373134303237 Sep 13 00:23:29.942000 audit: BPF prog-id=71 op=UNLOAD Sep 13 00:23:29.943000 audit: BPF prog-id=70 op=UNLOAD Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:29.943000 audit: BPF prog-id=72 op=LOAD Sep 13 00:23:29.943000 audit[2435]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2372 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:29.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383932633237623831306635636638396362313934373134303237 Sep 13 00:23:29.950219 env[1742]: time="2025-09-13T00:23:29.949008201Z" level=info msg="CreateContainer within sandbox \"7cb56062791121d49fa96cc8e882251b94ef9c0f90a35808138d924e3d0b2670\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 13 00:23:29.980436 env[1742]: time="2025-09-13T00:23:29.980364856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-123,Uid:e59ce3ad5a9f4d76148f30c4a463b57d,Namespace:kube-system,Attempt:0,} returns sandbox id \"a02de03e7e3ad016cd75d9d37b247ae30cbfd66d5a870fa6e8538ee36c806c35\"" Sep 13 00:23:29.990723 env[1742]: time="2025-09-13T00:23:29.990663114Z" level=info msg="CreateContainer within sandbox \"a02de03e7e3ad016cd75d9d37b247ae30cbfd66d5a870fa6e8538ee36c806c35\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 13 00:23:29.995298 env[1742]: time="2025-09-13T00:23:29.995206723Z" level=info msg="CreateContainer within sandbox \"7cb56062791121d49fa96cc8e882251b94ef9c0f90a35808138d924e3d0b2670\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad\"" Sep 13 00:23:29.997331 env[1742]: time="2025-09-13T00:23:29.997275943Z" level=info msg="StartContainer for \"18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad\"" Sep 13 00:23:30.005342 env[1742]: time="2025-09-13T00:23:30.005273501Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-123,Uid:023b45c4474c6c7027d641b89880466f,Namespace:kube-system,Attempt:0,} returns sandbox id \"12892c27b810f5cf89cb194714027b13d7f82e14f7429384f92d89817382a5b0\"" Sep 13 00:23:30.014033 env[1742]: time="2025-09-13T00:23:30.010631910Z" level=info msg="CreateContainer within sandbox \"12892c27b810f5cf89cb194714027b13d7f82e14f7429384f92d89817382a5b0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 13 00:23:30.019832 kubelet[2290]: I0913 00:23:30.019342 2290 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-25-123" Sep 13 00:23:30.019832 kubelet[2290]: E0913 00:23:30.019786 2290 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://172.31.25.123:6443/api/v1/nodes\": dial tcp 172.31.25.123:6443: connect: connection refused" node="ip-172-31-25-123" Sep 13 00:23:30.037605 env[1742]: time="2025-09-13T00:23:30.037533623Z" level=info msg="CreateContainer within sandbox \"a02de03e7e3ad016cd75d9d37b247ae30cbfd66d5a870fa6e8538ee36c806c35\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c\"" Sep 13 00:23:30.038734 env[1742]: time="2025-09-13T00:23:30.038675916Z" level=info msg="StartContainer for \"f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c\"" Sep 13 00:23:30.048719 systemd[1]: Started cri-containerd-18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad.scope. Sep 13 00:23:30.093477 env[1742]: time="2025-09-13T00:23:30.093404651Z" level=info msg="CreateContainer within sandbox \"12892c27b810f5cf89cb194714027b13d7f82e14f7429384f92d89817382a5b0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8433a24a6bfbb73cc2730db7759f15d070994f7c98e9965f2ba077ea4fa27f3c\"" Sep 13 00:23:30.094414 env[1742]: time="2025-09-13T00:23:30.094363895Z" level=info msg="StartContainer for \"8433a24a6bfbb73cc2730db7759f15d070994f7c98e9965f2ba077ea4fa27f3c\"" Sep 13 00:23:30.120081 systemd[1]: Started cri-containerd-f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c.scope. Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.128000 audit: BPF prog-id=73 op=LOAD Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2379 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616364306462633035646630356431313762316533393862353664 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2379 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616364306462633035646630356431313762316533393862353664 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.130000 audit: BPF prog-id=74 op=LOAD Sep 13 00:23:30.130000 audit[2553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2379 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616364306462633035646630356431313762316533393862353664 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit: BPF prog-id=75 op=LOAD Sep 13 00:23:30.131000 audit[2553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2379 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616364306462633035646630356431313762316533393862353664 Sep 13 00:23:30.131000 audit: BPF prog-id=75 op=UNLOAD Sep 13 00:23:30.131000 audit: BPF prog-id=74 op=UNLOAD Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.131000 audit: BPF prog-id=76 op=LOAD Sep 13 00:23:30.131000 audit[2553]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2379 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616364306462633035646630356431313762316533393862353664 Sep 13 00:23:30.169078 systemd[1]: Started cri-containerd-8433a24a6bfbb73cc2730db7759f15d070994f7c98e9965f2ba077ea4fa27f3c.scope. Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.176000 audit: BPF prog-id=77 op=LOAD Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2388 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643466336664346566383635393933636439356336343238396564 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2388 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643466336664346566383635393933636439356336343238396564 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.177000 audit: BPF prog-id=78 op=LOAD Sep 13 00:23:30.177000 audit[2572]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2388 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643466336664346566383635393933636439356336343238396564 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.178000 audit: BPF prog-id=79 op=LOAD Sep 13 00:23:30.178000 audit[2572]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2388 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643466336664346566383635393933636439356336343238396564 Sep 13 00:23:30.178000 audit: BPF prog-id=79 op=UNLOAD Sep 13 00:23:30.179000 audit: BPF prog-id=78 op=UNLOAD Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { perfmon } for pid=2572 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit[2572]: AVC avc: denied { bpf } for pid=2572 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.179000 audit: BPF prog-id=80 op=LOAD Sep 13 00:23:30.179000 audit[2572]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2388 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643466336664346566383635393933636439356336343238396564 Sep 13 00:23:30.236293 env[1742]: time="2025-09-13T00:23:30.233835747Z" level=info msg="StartContainer for \"18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad\" returns successfully" Sep 13 00:23:30.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.260000 audit: BPF prog-id=81 op=LOAD Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2372 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333361323461366266626237336363323733306462373735396631 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2372 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333361323461366266626237336363323733306462373735396631 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.261000 audit: BPF prog-id=82 op=LOAD Sep 13 00:23:30.261000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2372 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333361323461366266626237336363323733306462373735396631 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit: BPF prog-id=83 op=LOAD Sep 13 00:23:30.262000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2372 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333361323461366266626237336363323733306462373735396631 Sep 13 00:23:30.262000 audit: BPF prog-id=83 op=UNLOAD Sep 13 00:23:30.262000 audit: BPF prog-id=82 op=UNLOAD Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { perfmon } for pid=2596 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit[2596]: AVC avc: denied { bpf } for pid=2596 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:30.262000 audit: BPF prog-id=84 op=LOAD Sep 13 00:23:30.262000 audit[2596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2372 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:30.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333361323461366266626237336363323733306462373735396631 Sep 13 00:23:30.282229 env[1742]: time="2025-09-13T00:23:30.282166921Z" level=info msg="StartContainer for \"f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c\" returns successfully" Sep 13 00:23:30.341517 env[1742]: time="2025-09-13T00:23:30.341456521Z" level=info msg="StartContainer for \"8433a24a6bfbb73cc2730db7759f15d070994f7c98e9965f2ba077ea4fa27f3c\" returns successfully" Sep 13 00:23:30.424934 kubelet[2290]: E0913 00:23:30.424867 2290 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.25.123:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.25.123:6443: connect: connection refused" logger="UnhandledError" Sep 13 00:23:31.622711 kubelet[2290]: I0913 00:23:31.622659 2290 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-25-123" Sep 13 00:23:33.244000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:33.247481 kernel: kauditd_printk_skb: 557 callbacks suppressed Sep 13 00:23:33.247626 kernel: audit: type=1400 audit(1757723013.244:563): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:33.244000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000839c80 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:33.271513 kernel: audit: type=1300 audit(1757723013.244:563): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000839c80 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:33.244000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:33.282167 kernel: audit: type=1327 audit(1757723013.244:563): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:33.257000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:33.291747 kernel: audit: type=1400 audit(1757723013.257:564): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:33.257000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003d7bc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:33.304017 kernel: audit: type=1300 audit(1757723013.257:564): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003d7bc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:33.257000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:33.314468 kernel: audit: type=1327 audit(1757723013.257:564): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:34.087000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.087000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40047e1920 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:23:34.113452 kernel: audit: type=1400 audit(1757723014.087:565): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.113555 kernel: audit: type=1300 audit(1757723014.087:565): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40047e1920 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:23:34.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:23:34.130185 kernel: audit: type=1327 audit(1757723014.087:565): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:23:34.098000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.143326 kernel: audit: type=1400 audit(1757723014.098:566): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.098000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40047e1980 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:23:34.098000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:23:34.117000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.117000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=40065a5c50 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:23:34.117000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:23:34.133000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.133000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5f a1=40047c07e0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:23:34.133000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:23:34.389744 kubelet[2290]: I0913 00:23:34.389592 2290 apiserver.go:52] "Watching apiserver" Sep 13 00:23:34.390000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.390000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400407c220 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:23:34.390000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:23:34.392000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:34.392000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4000ff4f30 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:23:34.392000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:23:34.442246 kubelet[2290]: E0913 00:23:34.442188 2290 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-25-123\" not found" node="ip-172-31-25-123" Sep 13 00:23:34.512730 kubelet[2290]: I0913 00:23:34.512682 2290 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 13 00:23:34.524044 kubelet[2290]: I0913 00:23:34.524001 2290 kubelet_node_status.go:75] "Successfully registered node" node="ip-172-31-25-123" Sep 13 00:23:34.739653 amazon-ssm-agent[1722]: 2025-09-13 00:23:34 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Sep 13 00:23:37.045395 systemd[1]: Reloading. Sep 13 00:23:37.174409 /usr/lib/systemd/system-generators/torcx-generator[2679]: time="2025-09-13T00:23:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 00:23:37.174473 /usr/lib/systemd/system-generators/torcx-generator[2679]: time="2025-09-13T00:23:37Z" level=info msg="torcx already run" Sep 13 00:23:37.356912 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 00:23:37.357235 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 00:23:37.398505 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 00:23:37.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit: BPF prog-id=85 op=LOAD Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.591000 audit: BPF prog-id=86 op=LOAD Sep 13 00:23:37.591000 audit: BPF prog-id=46 op=UNLOAD Sep 13 00:23:37.591000 audit: BPF prog-id=47 op=UNLOAD Sep 13 00:23:37.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.593000 audit: BPF prog-id=87 op=LOAD Sep 13 00:23:37.594000 audit: BPF prog-id=69 op=UNLOAD Sep 13 00:23:37.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.596000 audit: BPF prog-id=88 op=LOAD Sep 13 00:23:37.596000 audit: BPF prog-id=48 op=UNLOAD Sep 13 00:23:37.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.598000 audit: BPF prog-id=89 op=LOAD Sep 13 00:23:37.599000 audit: BPF prog-id=73 op=UNLOAD Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.602000 audit: BPF prog-id=90 op=LOAD Sep 13 00:23:37.602000 audit: BPF prog-id=49 op=UNLOAD Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.605000 audit: BPF prog-id=91 op=LOAD Sep 13 00:23:37.605000 audit: BPF prog-id=77 op=UNLOAD Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.607000 audit: BPF prog-id=92 op=LOAD Sep 13 00:23:37.607000 audit: BPF prog-id=50 op=UNLOAD Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit: BPF prog-id=93 op=LOAD Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.608000 audit: BPF prog-id=94 op=LOAD Sep 13 00:23:37.608000 audit: BPF prog-id=51 op=UNLOAD Sep 13 00:23:37.608000 audit: BPF prog-id=52 op=UNLOAD Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.613000 audit: BPF prog-id=95 op=LOAD Sep 13 00:23:37.613000 audit: BPF prog-id=61 op=UNLOAD Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.617000 audit: BPF prog-id=96 op=LOAD Sep 13 00:23:37.617000 audit: BPF prog-id=53 op=UNLOAD Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.622000 audit: BPF prog-id=97 op=LOAD Sep 13 00:23:37.622000 audit: BPF prog-id=54 op=UNLOAD Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.623000 audit: BPF prog-id=98 op=LOAD Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.624000 audit: BPF prog-id=99 op=LOAD Sep 13 00:23:37.625000 audit: BPF prog-id=55 op=UNLOAD Sep 13 00:23:37.625000 audit: BPF prog-id=56 op=UNLOAD Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.628000 audit: BPF prog-id=100 op=LOAD Sep 13 00:23:37.628000 audit: BPF prog-id=81 op=UNLOAD Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.631000 audit: BPF prog-id=101 op=LOAD Sep 13 00:23:37.631000 audit: BPF prog-id=65 op=UNLOAD Sep 13 00:23:37.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.634000 audit: BPF prog-id=102 op=LOAD Sep 13 00:23:37.634000 audit: BPF prog-id=57 op=UNLOAD Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit: BPF prog-id=103 op=LOAD Sep 13 00:23:37.635000 audit: BPF prog-id=58 op=UNLOAD Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit: BPF prog-id=104 op=LOAD Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:37.636000 audit: BPF prog-id=105 op=LOAD Sep 13 00:23:37.636000 audit: BPF prog-id=59 op=UNLOAD Sep 13 00:23:37.636000 audit: BPF prog-id=60 op=UNLOAD Sep 13 00:23:37.663048 systemd[1]: Stopping kubelet.service... Sep 13 00:23:37.692560 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 00:23:37.692931 systemd[1]: Stopped kubelet.service. Sep 13 00:23:37.693052 systemd[1]: kubelet.service: Consumed 2.574s CPU time. Sep 13 00:23:37.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:37.696312 systemd[1]: Starting kubelet.service... Sep 13 00:23:38.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:38.030340 systemd[1]: Started kubelet.service. Sep 13 00:23:38.151364 kubelet[2740]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:23:38.151866 kubelet[2740]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Sep 13 00:23:38.151996 kubelet[2740]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 00:23:38.152245 kubelet[2740]: I0913 00:23:38.152185 2740 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 00:23:38.164250 kubelet[2740]: I0913 00:23:38.164204 2740 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Sep 13 00:23:38.164444 kubelet[2740]: I0913 00:23:38.164418 2740 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 00:23:38.164936 kubelet[2740]: I0913 00:23:38.164910 2740 server.go:934] "Client rotation is on, will bootstrap in background" Sep 13 00:23:38.167760 kubelet[2740]: I0913 00:23:38.167723 2740 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 13 00:23:38.171470 kubelet[2740]: I0913 00:23:38.171430 2740 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 00:23:38.182560 kubelet[2740]: E0913 00:23:38.181800 2740 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 00:23:38.182560 kubelet[2740]: I0913 00:23:38.182548 2740 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 00:23:38.189446 kubelet[2740]: I0913 00:23:38.189402 2740 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 00:23:38.189656 kubelet[2740]: I0913 00:23:38.189629 2740 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Sep 13 00:23:38.189991 kubelet[2740]: I0913 00:23:38.189912 2740 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 00:23:38.190297 kubelet[2740]: I0913 00:23:38.189977 2740 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-25-123","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 00:23:38.190449 kubelet[2740]: I0913 00:23:38.190311 2740 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 00:23:38.190449 kubelet[2740]: I0913 00:23:38.190333 2740 container_manager_linux.go:300] "Creating device plugin manager" Sep 13 00:23:38.190449 kubelet[2740]: I0913 00:23:38.190395 2740 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:23:38.190639 kubelet[2740]: I0913 00:23:38.190569 2740 kubelet.go:408] "Attempting to sync node with API server" Sep 13 00:23:38.190639 kubelet[2740]: I0913 00:23:38.190593 2740 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 00:23:38.190639 kubelet[2740]: I0913 00:23:38.190624 2740 kubelet.go:314] "Adding apiserver pod source" Sep 13 00:23:38.190814 kubelet[2740]: I0913 00:23:38.190660 2740 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 00:23:38.193253 kubelet[2740]: I0913 00:23:38.193197 2740 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 00:23:38.194033 kubelet[2740]: I0913 00:23:38.193972 2740 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 00:23:38.194775 kubelet[2740]: I0913 00:23:38.194731 2740 server.go:1274] "Started kubelet" Sep 13 00:23:38.201793 kubelet[2740]: I0913 00:23:38.201745 2740 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 00:23:38.203511 kubelet[2740]: I0913 00:23:38.203478 2740 server.go:449] "Adding debug handlers to kubelet server" Sep 13 00:23:38.203726 kubelet[2740]: I0913 00:23:38.203637 2740 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 00:23:38.204157 kubelet[2740]: I0913 00:23:38.204113 2740 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 00:23:38.206000 audit[2740]: AVC avc: denied { mac_admin } for pid=2740 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:38.206000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:23:38.206000 audit[2740]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b948a0 a1=400079b2a8 a2=4000b94870 a3=25 items=0 ppid=1 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:38.206000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:23:38.207855 kubelet[2740]: I0913 00:23:38.207806 2740 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 00:23:38.207000 audit[2740]: AVC avc: denied { mac_admin } for pid=2740 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:38.207000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:23:38.207000 audit[2740]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000797f80 a1=400079b2c0 a2=4000b94930 a3=25 items=0 ppid=1 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:38.207000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:23:38.208385 kubelet[2740]: I0913 00:23:38.208353 2740 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Sep 13 00:23:38.208528 kubelet[2740]: I0913 00:23:38.208508 2740 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 00:23:38.227525 kubelet[2740]: I0913 00:23:38.227484 2740 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 00:23:38.231596 kubelet[2740]: I0913 00:23:38.231549 2740 volume_manager.go:289] "Starting Kubelet Volume Manager" Sep 13 00:23:38.232224 kubelet[2740]: E0913 00:23:38.232185 2740 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"ip-172-31-25-123\" not found" Sep 13 00:23:38.235208 kubelet[2740]: I0913 00:23:38.235174 2740 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Sep 13 00:23:38.235597 kubelet[2740]: I0913 00:23:38.235577 2740 reconciler.go:26] "Reconciler: start to sync state" Sep 13 00:23:38.238875 kubelet[2740]: I0913 00:23:38.238831 2740 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 00:23:38.241019 kubelet[2740]: I0913 00:23:38.240980 2740 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 00:23:38.241226 kubelet[2740]: I0913 00:23:38.241204 2740 status_manager.go:217] "Starting to sync pod status with apiserver" Sep 13 00:23:38.241371 kubelet[2740]: I0913 00:23:38.241350 2740 kubelet.go:2321] "Starting kubelet main sync loop" Sep 13 00:23:38.241553 kubelet[2740]: E0913 00:23:38.241522 2740 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 00:23:38.259676 kubelet[2740]: I0913 00:23:38.259642 2740 factory.go:221] Registration of the systemd container factory successfully Sep 13 00:23:38.260037 kubelet[2740]: I0913 00:23:38.260002 2740 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 00:23:38.269105 kubelet[2740]: I0913 00:23:38.269066 2740 factory.go:221] Registration of the containerd container factory successfully Sep 13 00:23:38.273420 kubelet[2740]: E0913 00:23:38.272349 2740 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 00:23:38.346225 kubelet[2740]: E0913 00:23:38.342648 2740 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 13 00:23:38.372000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 00:23:38.375190 kernel: kauditd_printk_skb: 268 callbacks suppressed Sep 13 00:23:38.375274 kernel: audit: type=1400 audit(1757723018.372:819): avc: denied { watch } for pid=2574 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 00:23:38.372000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40004c0dc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:38.407012 kernel: audit: type=1300 audit(1757723018.372:819): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40004c0dc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:38.412904 kubelet[2740]: I0913 00:23:38.412872 2740 cpu_manager.go:214] "Starting CPU manager" policy="none" Sep 13 00:23:38.413144 kubelet[2740]: I0913 00:23:38.413120 2740 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Sep 13 00:23:38.413298 kubelet[2740]: I0913 00:23:38.413278 2740 state_mem.go:36] "Initialized new in-memory state store" Sep 13 00:23:38.413639 kubelet[2740]: I0913 00:23:38.413615 2740 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 13 00:23:38.413770 kubelet[2740]: I0913 00:23:38.413729 2740 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 13 00:23:38.413874 kubelet[2740]: I0913 00:23:38.413855 2740 policy_none.go:49] "None policy: Start" Sep 13 00:23:38.372000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:38.424925 kernel: audit: type=1327 audit(1757723018.372:819): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:38.426924 kubelet[2740]: I0913 00:23:38.426874 2740 memory_manager.go:170] "Starting memorymanager" policy="None" Sep 13 00:23:38.426924 kubelet[2740]: I0913 00:23:38.426931 2740 state_mem.go:35] "Initializing new in-memory state store" Sep 13 00:23:38.428006 kubelet[2740]: I0913 00:23:38.427301 2740 state_mem.go:75] "Updated machine memory state" Sep 13 00:23:38.439203 kubelet[2740]: I0913 00:23:38.439165 2740 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 00:23:38.438000 audit[2740]: AVC avc: denied { mac_admin } for pid=2740 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:38.438000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:23:38.448142 kubelet[2740]: I0913 00:23:38.448108 2740 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 00:23:38.448541 kubelet[2740]: I0913 00:23:38.448517 2740 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 00:23:38.448720 kubelet[2740]: I0913 00:23:38.448668 2740 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 00:23:38.449284 kubelet[2740]: I0913 00:23:38.449258 2740 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 00:23:38.451442 kernel: audit: type=1400 audit(1757723018.438:820): avc: denied { mac_admin } for pid=2740 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:38.451617 kernel: audit: type=1401 audit(1757723018.438:820): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 00:23:38.438000 audit[2740]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b94cc0 a1=400079b7e8 a2=4000b94c90 a3=25 items=0 ppid=1 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:38.464632 kernel: audit: type=1300 audit(1757723018.438:820): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b94cc0 a1=400079b7e8 a2=4000b94c90 a3=25 items=0 ppid=1 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:38.438000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:23:38.479920 kernel: audit: type=1327 audit(1757723018.438:820): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 00:23:38.564359 kubelet[2740]: E0913 00:23:38.564316 2740 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-25-123\" already exists" pod="kube-system/kube-scheduler-ip-172-31-25-123" Sep 13 00:23:38.612868 kubelet[2740]: I0913 00:23:38.612736 2740 kubelet_node_status.go:72] "Attempting to register node" node="ip-172-31-25-123" Sep 13 00:23:38.632540 kubelet[2740]: I0913 00:23:38.632478 2740 kubelet_node_status.go:111] "Node was previously registered" node="ip-172-31-25-123" Sep 13 00:23:38.632708 kubelet[2740]: I0913 00:23:38.632601 2740 kubelet_node_status.go:75] "Successfully registered node" node="ip-172-31-25-123" Sep 13 00:23:38.639980 kubelet[2740]: I0913 00:23:38.639890 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/023b45c4474c6c7027d641b89880466f-ca-certs\") pod \"kube-apiserver-ip-172-31-25-123\" (UID: \"023b45c4474c6c7027d641b89880466f\") " pod="kube-system/kube-apiserver-ip-172-31-25-123" Sep 13 00:23:38.640287 kubelet[2740]: I0913 00:23:38.640231 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:38.640568 kubelet[2740]: I0913 00:23:38.640517 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:38.640770 kubelet[2740]: I0913 00:23:38.640731 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:38.641047 kubelet[2740]: I0913 00:23:38.640992 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:38.641292 kubelet[2740]: I0913 00:23:38.641223 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/023b45c4474c6c7027d641b89880466f-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-123\" (UID: \"023b45c4474c6c7027d641b89880466f\") " pod="kube-system/kube-apiserver-ip-172-31-25-123" Sep 13 00:23:38.641503 kubelet[2740]: I0913 00:23:38.641462 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/023b45c4474c6c7027d641b89880466f-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-123\" (UID: \"023b45c4474c6c7027d641b89880466f\") " pod="kube-system/kube-apiserver-ip-172-31-25-123" Sep 13 00:23:38.641742 kubelet[2740]: I0913 00:23:38.641716 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a6a3c0eef321a7184cd351072a567a5f-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-123\" (UID: \"a6a3c0eef321a7184cd351072a567a5f\") " pod="kube-system/kube-controller-manager-ip-172-31-25-123" Sep 13 00:23:38.641994 kubelet[2740]: I0913 00:23:38.641896 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e59ce3ad5a9f4d76148f30c4a463b57d-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-123\" (UID: \"e59ce3ad5a9f4d76148f30c4a463b57d\") " pod="kube-system/kube-scheduler-ip-172-31-25-123" Sep 13 00:23:39.192039 kubelet[2740]: I0913 00:23:39.191999 2740 apiserver.go:52] "Watching apiserver" Sep 13 00:23:39.235634 kubelet[2740]: I0913 00:23:39.235585 2740 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Sep 13 00:23:39.294789 kubelet[2740]: I0913 00:23:39.294699 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-25-123" podStartSLOduration=1.294656208 podStartE2EDuration="1.294656208s" podCreationTimestamp="2025-09-13 00:23:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:23:39.284108506 +0000 UTC m=+1.241407315" watchObservedRunningTime="2025-09-13 00:23:39.294656208 +0000 UTC m=+1.251955005" Sep 13 00:23:39.355697 kubelet[2740]: I0913 00:23:39.355623 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-25-123" podStartSLOduration=1.355597556 podStartE2EDuration="1.355597556s" podCreationTimestamp="2025-09-13 00:23:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:23:39.306118789 +0000 UTC m=+1.263417598" watchObservedRunningTime="2025-09-13 00:23:39.355597556 +0000 UTC m=+1.312896353" Sep 13 00:23:39.356203 kubelet[2740]: I0913 00:23:39.356145 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-25-123" podStartSLOduration=2.35612894 podStartE2EDuration="2.35612894s" podCreationTimestamp="2025-09-13 00:23:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:23:39.35317544 +0000 UTC m=+1.310474345" watchObservedRunningTime="2025-09-13 00:23:39.35612894 +0000 UTC m=+1.313427809" Sep 13 00:23:39.358341 kubelet[2740]: E0913 00:23:39.358274 2740 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-25-123\" already exists" pod="kube-system/kube-apiserver-ip-172-31-25-123" Sep 13 00:23:42.213000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:42.213000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:42.233700 kernel: audit: type=1400 audit(1757723022.213:821): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:42.233829 kernel: audit: type=1400 audit(1757723022.213:822): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:42.233896 kernel: audit: type=1300 audit(1757723022.213:822): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177ec40 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:42.213000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177ec40 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:42.213000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:42.213000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:42.213000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177ec80 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:42.213000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:42.213000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:23:42.213000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177ecc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:42.213000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:42.213000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40016598c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:23:42.213000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:23:43.003441 kubelet[2740]: I0913 00:23:43.003245 2740 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 13 00:23:43.004206 env[1742]: time="2025-09-13T00:23:43.003823009Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 13 00:23:43.005209 kubelet[2740]: I0913 00:23:43.004865 2740 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 13 00:23:43.807674 systemd[1]: Created slice kubepods-besteffort-pod79001e8f_3f38_4862_8aee_7ec35bc82ccb.slice. Sep 13 00:23:43.879469 kubelet[2740]: I0913 00:23:43.879421 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/79001e8f-3f38-4862-8aee-7ec35bc82ccb-kube-proxy\") pod \"kube-proxy-fgfm4\" (UID: \"79001e8f-3f38-4862-8aee-7ec35bc82ccb\") " pod="kube-system/kube-proxy-fgfm4" Sep 13 00:23:43.879725 kubelet[2740]: I0913 00:23:43.879697 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/79001e8f-3f38-4862-8aee-7ec35bc82ccb-lib-modules\") pod \"kube-proxy-fgfm4\" (UID: \"79001e8f-3f38-4862-8aee-7ec35bc82ccb\") " pod="kube-system/kube-proxy-fgfm4" Sep 13 00:23:43.879922 kubelet[2740]: I0913 00:23:43.879892 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8jwkn\" (UniqueName: \"kubernetes.io/projected/79001e8f-3f38-4862-8aee-7ec35bc82ccb-kube-api-access-8jwkn\") pod \"kube-proxy-fgfm4\" (UID: \"79001e8f-3f38-4862-8aee-7ec35bc82ccb\") " pod="kube-system/kube-proxy-fgfm4" Sep 13 00:23:43.880161 kubelet[2740]: I0913 00:23:43.880132 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/79001e8f-3f38-4862-8aee-7ec35bc82ccb-xtables-lock\") pod \"kube-proxy-fgfm4\" (UID: \"79001e8f-3f38-4862-8aee-7ec35bc82ccb\") " pod="kube-system/kube-proxy-fgfm4" Sep 13 00:23:43.996207 kubelet[2740]: I0913 00:23:43.996166 2740 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 13 00:23:44.097697 systemd[1]: Created slice kubepods-besteffort-pod81c750dc_cb87_44fa_8346_4c3b5e36f6d4.slice. Sep 13 00:23:44.120919 env[1742]: time="2025-09-13T00:23:44.120428575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fgfm4,Uid:79001e8f-3f38-4862-8aee-7ec35bc82ccb,Namespace:kube-system,Attempt:0,}" Sep 13 00:23:44.161545 env[1742]: time="2025-09-13T00:23:44.161159448Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:23:44.161545 env[1742]: time="2025-09-13T00:23:44.161230428Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:23:44.161545 env[1742]: time="2025-09-13T00:23:44.161256216Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:23:44.161840 env[1742]: time="2025-09-13T00:23:44.161613384Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dcdc9ac8e1136a3eaaae5f1c123b62fdac4caf108bca36ec525a661d0bcb1484 pid=2791 runtime=io.containerd.runc.v2 Sep 13 00:23:44.183157 kubelet[2740]: I0913 00:23:44.182819 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qdvqv\" (UniqueName: \"kubernetes.io/projected/81c750dc-cb87-44fa-8346-4c3b5e36f6d4-kube-api-access-qdvqv\") pod \"tigera-operator-58fc44c59b-24njx\" (UID: \"81c750dc-cb87-44fa-8346-4c3b5e36f6d4\") " pod="tigera-operator/tigera-operator-58fc44c59b-24njx" Sep 13 00:23:44.183157 kubelet[2740]: I0913 00:23:44.182896 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/81c750dc-cb87-44fa-8346-4c3b5e36f6d4-var-lib-calico\") pod \"tigera-operator-58fc44c59b-24njx\" (UID: \"81c750dc-cb87-44fa-8346-4c3b5e36f6d4\") " pod="tigera-operator/tigera-operator-58fc44c59b-24njx" Sep 13 00:23:44.192373 systemd[1]: Started cri-containerd-dcdc9ac8e1136a3eaaae5f1c123b62fdac4caf108bca36ec525a661d0bcb1484.scope. Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242653 kernel: kauditd_printk_skb: 9 callbacks suppressed Sep 13 00:23:44.242787 kernel: audit: type=1400 audit(1757723024.238:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.260472 kernel: audit: type=1400 audit(1757723024.238:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.261388 kernel: audit: type=1400 audit(1757723024.238:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.276494 kernel: audit: type=1400 audit(1757723024.238:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.285204 kernel: audit: type=1400 audit(1757723024.238:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.288788 kernel: audit: type=1400 audit(1757723024.238:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.304594 kernel: audit: type=1400 audit(1757723024.238:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.319033 kernel: audit: type=1400 audit(1757723024.238:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.327241 kernel: audit: type=1400 audit(1757723024.238:833): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.335478 kernel: audit: type=1400 audit(1757723024.239:834): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit: BPF prog-id=106 op=LOAD Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2791 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463646339616338653131333661336561616165356631633132336236 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2791 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463646339616338653131333661336561616165356631633132336236 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.239000 audit: BPF prog-id=107 op=LOAD Sep 13 00:23:44.239000 audit[2802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2791 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463646339616338653131333661336561616165356631633132336236 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.242000 audit: BPF prog-id=108 op=LOAD Sep 13 00:23:44.242000 audit[2802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2791 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463646339616338653131333661336561616165356631633132336236 Sep 13 00:23:44.249000 audit: BPF prog-id=108 op=UNLOAD Sep 13 00:23:44.249000 audit: BPF prog-id=107 op=UNLOAD Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { perfmon } for pid=2802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit[2802]: AVC avc: denied { bpf } for pid=2802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.249000 audit: BPF prog-id=109 op=LOAD Sep 13 00:23:44.249000 audit[2802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2791 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463646339616338653131333661336561616165356631633132336236 Sep 13 00:23:44.342381 env[1742]: time="2025-09-13T00:23:44.338166932Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fgfm4,Uid:79001e8f-3f38-4862-8aee-7ec35bc82ccb,Namespace:kube-system,Attempt:0,} returns sandbox id \"dcdc9ac8e1136a3eaaae5f1c123b62fdac4caf108bca36ec525a661d0bcb1484\"" Sep 13 00:23:44.352011 env[1742]: time="2025-09-13T00:23:44.345057705Z" level=info msg="CreateContainer within sandbox \"dcdc9ac8e1136a3eaaae5f1c123b62fdac4caf108bca36ec525a661d0bcb1484\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 13 00:23:44.384474 env[1742]: time="2025-09-13T00:23:44.384411685Z" level=info msg="CreateContainer within sandbox \"dcdc9ac8e1136a3eaaae5f1c123b62fdac4caf108bca36ec525a661d0bcb1484\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"d59a7146dfc59b9907acc9c7588aff5571f4ba57fd48557e9403b558515436de\"" Sep 13 00:23:44.388036 env[1742]: time="2025-09-13T00:23:44.386481253Z" level=info msg="StartContainer for \"d59a7146dfc59b9907acc9c7588aff5571f4ba57fd48557e9403b558515436de\"" Sep 13 00:23:44.406522 env[1742]: time="2025-09-13T00:23:44.406451536Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-24njx,Uid:81c750dc-cb87-44fa-8346-4c3b5e36f6d4,Namespace:tigera-operator,Attempt:0,}" Sep 13 00:23:44.420834 systemd[1]: Started cri-containerd-d59a7146dfc59b9907acc9c7588aff5571f4ba57fd48557e9403b558515436de.scope. Sep 13 00:23:44.470096 env[1742]: time="2025-09-13T00:23:44.469551971Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:23:44.470096 env[1742]: time="2025-09-13T00:23:44.469675571Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:23:44.470096 env[1742]: time="2025-09-13T00:23:44.469702331Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:23:44.470499 env[1742]: time="2025-09-13T00:23:44.469945643Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b0b3322b9e987e71599154e55070fceb86e314913358fee1abe302e1558ede84 pid=2853 runtime=io.containerd.runc.v2 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2791 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435396137313436646663353962393930376163633963373538386166 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.487000 audit: BPF prog-id=110 op=LOAD Sep 13 00:23:44.487000 audit[2832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2791 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435396137313436646663353962393930376163633963373538386166 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.489000 audit: BPF prog-id=111 op=LOAD Sep 13 00:23:44.489000 audit[2832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2791 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435396137313436646663353962393930376163633963373538386166 Sep 13 00:23:44.490000 audit: BPF prog-id=111 op=UNLOAD Sep 13 00:23:44.490000 audit: BPF prog-id=110 op=UNLOAD Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { perfmon } for pid=2832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit[2832]: AVC avc: denied { bpf } for pid=2832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.490000 audit: BPF prog-id=112 op=LOAD Sep 13 00:23:44.490000 audit[2832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2791 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435396137313436646663353962393930376163633963373538386166 Sep 13 00:23:44.524815 systemd[1]: Started cri-containerd-b0b3322b9e987e71599154e55070fceb86e314913358fee1abe302e1558ede84.scope. Sep 13 00:23:44.553350 env[1742]: time="2025-09-13T00:23:44.553285460Z" level=info msg="StartContainer for \"d59a7146dfc59b9907acc9c7588aff5571f4ba57fd48557e9403b558515436de\" returns successfully" Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.577000 audit: BPF prog-id=113 op=LOAD Sep 13 00:23:44.579000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.579000 audit[2865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2853 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623333323262396539383765373135393931353465353530373066 Sep 13 00:23:44.579000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.579000 audit[2865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2853 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623333323262396539383765373135393931353465353530373066 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.580000 audit: BPF prog-id=114 op=LOAD Sep 13 00:23:44.580000 audit[2865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2853 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623333323262396539383765373135393931353465353530373066 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.581000 audit: BPF prog-id=115 op=LOAD Sep 13 00:23:44.581000 audit[2865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2853 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623333323262396539383765373135393931353465353530373066 Sep 13 00:23:44.583000 audit: BPF prog-id=115 op=UNLOAD Sep 13 00:23:44.583000 audit: BPF prog-id=114 op=UNLOAD Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { perfmon } for pid=2865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit[2865]: AVC avc: denied { bpf } for pid=2865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:44.584000 audit: BPF prog-id=116 op=LOAD Sep 13 00:23:44.584000 audit[2865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2853 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230623333323262396539383765373135393931353465353530373066 Sep 13 00:23:44.641091 env[1742]: time="2025-09-13T00:23:44.640899666Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-58fc44c59b-24njx,Uid:81c750dc-cb87-44fa-8346-4c3b5e36f6d4,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"b0b3322b9e987e71599154e55070fceb86e314913358fee1abe302e1558ede84\"" Sep 13 00:23:44.645368 env[1742]: time="2025-09-13T00:23:44.645315750Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 13 00:23:44.834000 audit[2934]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.834000 audit[2934]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe564be10 a2=0 a3=1 items=0 ppid=2845 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.834000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 00:23:44.836000 audit[2935]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.836000 audit[2935]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeca96560 a2=0 a3=1 items=0 ppid=2845 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.836000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 00:23:44.837000 audit[2936]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2936 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:44.837000 audit[2936]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd902d490 a2=0 a3=1 items=0 ppid=2845 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 00:23:44.838000 audit[2937]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2937 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.838000 audit[2937]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffef38b760 a2=0 a3=1 items=0 ppid=2845 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 00:23:44.840000 audit[2938]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2938 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:44.840000 audit[2938]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe08ed020 a2=0 a3=1 items=0 ppid=2845 pid=2938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 00:23:44.843000 audit[2939]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2939 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:44.843000 audit[2939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd337cfd0 a2=0 a3=1 items=0 ppid=2845 pid=2939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.843000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 00:23:44.945000 audit[2940]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2940 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.945000 audit[2940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffe96ffc0 a2=0 a3=1 items=0 ppid=2845 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.945000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 00:23:44.951000 audit[2942]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.951000 audit[2942]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff36da720 a2=0 a3=1 items=0 ppid=2845 pid=2942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.951000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 13 00:23:44.959000 audit[2945]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.959000 audit[2945]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe5774300 a2=0 a3=1 items=0 ppid=2845 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.959000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 13 00:23:44.961000 audit[2946]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.961000 audit[2946]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe50b3340 a2=0 a3=1 items=0 ppid=2845 pid=2946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.961000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 00:23:44.967000 audit[2948]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.967000 audit[2948]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff5f09e50 a2=0 a3=1 items=0 ppid=2845 pid=2948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.967000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 00:23:44.969000 audit[2949]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2949 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.969000 audit[2949]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5fd6a90 a2=0 a3=1 items=0 ppid=2845 pid=2949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 00:23:44.975000 audit[2951]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2951 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.975000 audit[2951]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdc33b520 a2=0 a3=1 items=0 ppid=2845 pid=2951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.975000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 00:23:44.983000 audit[2954]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.983000 audit[2954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffddb2f240 a2=0 a3=1 items=0 ppid=2845 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.983000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 13 00:23:44.985000 audit[2955]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.985000 audit[2955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9445530 a2=0 a3=1 items=0 ppid=2845 pid=2955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 00:23:44.991000 audit[2957]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.991000 audit[2957]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcf93b1d0 a2=0 a3=1 items=0 ppid=2845 pid=2957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 00:23:44.994000 audit[2958]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2958 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:44.994000 audit[2958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc07ac0c0 a2=0 a3=1 items=0 ppid=2845 pid=2958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:44.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 00:23:45.001000 audit[2960]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.001000 audit[2960]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff576c3b0 a2=0 a3=1 items=0 ppid=2845 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.001000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:23:45.021000 audit[2963]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.021000 audit[2963]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe218e880 a2=0 a3=1 items=0 ppid=2845 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.021000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:23:45.028000 audit[2966]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2966 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.028000 audit[2966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd9acb380 a2=0 a3=1 items=0 ppid=2845 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.028000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 00:23:45.030000 audit[2967]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.030000 audit[2967]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffe5b7300 a2=0 a3=1 items=0 ppid=2845 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.030000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 00:23:45.036000 audit[2969]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.036000 audit[2969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd3d5a350 a2=0 a3=1 items=0 ppid=2845 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.036000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:23:45.049000 audit[2972]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.049000 audit[2972]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe911b850 a2=0 a3=1 items=0 ppid=2845 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.049000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:23:45.052000 audit[2973]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2973 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.052000 audit[2973]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe917f3e0 a2=0 a3=1 items=0 ppid=2845 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 00:23:45.057000 audit[2975]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 00:23:45.057000 audit[2975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffedad0360 a2=0 a3=1 items=0 ppid=2845 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.057000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 00:23:45.106000 audit[2981]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:23:45.106000 audit[2981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffecd1d060 a2=0 a3=1 items=0 ppid=2845 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.106000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:23:45.119000 audit[2981]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:23:45.119000 audit[2981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffecd1d060 a2=0 a3=1 items=0 ppid=2845 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.119000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:23:45.122000 audit[2986]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2986 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.122000 audit[2986]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc175b730 a2=0 a3=1 items=0 ppid=2845 pid=2986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.122000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 00:23:45.129000 audit[2988]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2988 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.129000 audit[2988]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc477dbd0 a2=0 a3=1 items=0 ppid=2845 pid=2988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.129000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 13 00:23:45.136000 audit[2991]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2991 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.136000 audit[2991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffb4c3c40 a2=0 a3=1 items=0 ppid=2845 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.136000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 13 00:23:45.138000 audit[2992]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2992 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.138000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde4ad390 a2=0 a3=1 items=0 ppid=2845 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.138000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 00:23:45.143000 audit[2994]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2994 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.143000 audit[2994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffffc5f350 a2=0 a3=1 items=0 ppid=2845 pid=2994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.143000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 00:23:45.146000 audit[2995]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2995 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.146000 audit[2995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4bd00f0 a2=0 a3=1 items=0 ppid=2845 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.146000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 00:23:45.152000 audit[2997]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2997 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.152000 audit[2997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc8df13d0 a2=0 a3=1 items=0 ppid=2845 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.152000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 13 00:23:45.160000 audit[3000]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.160000 audit[3000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff39aeaf0 a2=0 a3=1 items=0 ppid=2845 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.160000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 00:23:45.163000 audit[3001]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3001 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.163000 audit[3001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc617d490 a2=0 a3=1 items=0 ppid=2845 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.163000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 00:23:45.172000 audit[3003]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3003 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.172000 audit[3003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff46e19f0 a2=0 a3=1 items=0 ppid=2845 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.172000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 00:23:45.174000 audit[3004]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3004 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.174000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd86db880 a2=0 a3=1 items=0 ppid=2845 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.174000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 00:23:45.179000 audit[3006]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3006 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.179000 audit[3006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe3b419b0 a2=0 a3=1 items=0 ppid=2845 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 00:23:45.188000 audit[3009]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3009 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.188000 audit[3009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff11dfa40 a2=0 a3=1 items=0 ppid=2845 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 00:23:45.195000 audit[3012]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3012 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.195000 audit[3012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff26f98e0 a2=0 a3=1 items=0 ppid=2845 pid=3012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 13 00:23:45.199000 audit[3013]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3013 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.199000 audit[3013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffccb12340 a2=0 a3=1 items=0 ppid=2845 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.199000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 00:23:45.203000 audit[3015]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3015 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.203000 audit[3015]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffee950e10 a2=0 a3=1 items=0 ppid=2845 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.203000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:23:45.216000 audit[3018]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.216000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffff5bee20 a2=0 a3=1 items=0 ppid=2845 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 00:23:45.219000 audit[3019]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3019 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.219000 audit[3019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff8b1acb0 a2=0 a3=1 items=0 ppid=2845 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.219000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 00:23:45.223000 audit[3021]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3021 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.223000 audit[3021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd2deff80 a2=0 a3=1 items=0 ppid=2845 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.223000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 00:23:45.226000 audit[3022]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.226000 audit[3022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc251e000 a2=0 a3=1 items=0 ppid=2845 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.226000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 00:23:45.231000 audit[3024]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3024 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.231000 audit[3024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff2aa8eb0 a2=0 a3=1 items=0 ppid=2845 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.231000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:23:45.238000 audit[3027]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3027 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 00:23:45.238000 audit[3027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffee087420 a2=0 a3=1 items=0 ppid=2845 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.238000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 00:23:45.244000 audit[3029]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3029 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 00:23:45.244000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffe8e4c660 a2=0 a3=1 items=0 ppid=2845 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.244000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:23:45.246000 audit[3029]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3029 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 00:23:45.246000 audit[3029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe8e4c660 a2=0 a3=1 items=0 ppid=2845 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:45.246000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:23:45.395831 kubelet[2740]: I0913 00:23:45.395723 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-fgfm4" podStartSLOduration=2.395673853 podStartE2EDuration="2.395673853s" podCreationTimestamp="2025-09-13 00:23:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:23:45.377511612 +0000 UTC m=+7.334810421" watchObservedRunningTime="2025-09-13 00:23:45.395673853 +0000 UTC m=+7.352972662" Sep 13 00:23:46.038692 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1519607196.mount: Deactivated successfully. Sep 13 00:23:47.158308 env[1742]: time="2025-09-13T00:23:47.158227933Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:47.162681 env[1742]: time="2025-09-13T00:23:47.162580693Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:47.166426 env[1742]: time="2025-09-13T00:23:47.166360501Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:47.170024 env[1742]: time="2025-09-13T00:23:47.169937846Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:23:47.171297 env[1742]: time="2025-09-13T00:23:47.171229586Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 13 00:23:47.179149 env[1742]: time="2025-09-13T00:23:47.179091447Z" level=info msg="CreateContainer within sandbox \"b0b3322b9e987e71599154e55070fceb86e314913358fee1abe302e1558ede84\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 13 00:23:47.204451 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount813539274.mount: Deactivated successfully. Sep 13 00:23:47.217449 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount266725005.mount: Deactivated successfully. Sep 13 00:23:47.224025 env[1742]: time="2025-09-13T00:23:47.223893631Z" level=info msg="CreateContainer within sandbox \"b0b3322b9e987e71599154e55070fceb86e314913358fee1abe302e1558ede84\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193\"" Sep 13 00:23:47.226925 env[1742]: time="2025-09-13T00:23:47.226468064Z" level=info msg="StartContainer for \"4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193\"" Sep 13 00:23:47.266361 systemd[1]: Started cri-containerd-4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193.scope. Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.309000 audit: BPF prog-id=117 op=LOAD Sep 13 00:23:47.309000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.309000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2853 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466363563363639366239623831353661373633663064383238353333 Sep 13 00:23:47.309000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.309000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2853 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466363563363639366239623831353661373633663064383238353333 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit: BPF prog-id=118 op=LOAD Sep 13 00:23:47.310000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2853 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:47.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466363563363639366239623831353661373633663064383238353333 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit: BPF prog-id=119 op=LOAD Sep 13 00:23:47.310000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2853 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:47.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466363563363639366239623831353661373633663064383238353333 Sep 13 00:23:47.310000 audit: BPF prog-id=119 op=UNLOAD Sep 13 00:23:47.310000 audit: BPF prog-id=118 op=UNLOAD Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { perfmon } for pid=3037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit[3037]: AVC avc: denied { bpf } for pid=3037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:23:47.310000 audit: BPF prog-id=120 op=LOAD Sep 13 00:23:47.310000 audit[3037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2853 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:23:47.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466363563363639366239623831353661373633663064383238353333 Sep 13 00:23:47.339779 env[1742]: time="2025-09-13T00:23:47.339709591Z" level=info msg="StartContainer for \"4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193\" returns successfully" Sep 13 00:23:48.648691 kubelet[2740]: I0913 00:23:48.648567 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-58fc44c59b-24njx" podStartSLOduration=2.119081295 podStartE2EDuration="4.648543447s" podCreationTimestamp="2025-09-13 00:23:44 +0000 UTC" firstStartedPulling="2025-09-13 00:23:44.643926402 +0000 UTC m=+6.601225187" lastFinishedPulling="2025-09-13 00:23:47.173388554 +0000 UTC m=+9.130687339" observedRunningTime="2025-09-13 00:23:47.390154356 +0000 UTC m=+9.347453141" watchObservedRunningTime="2025-09-13 00:23:48.648543447 +0000 UTC m=+10.605842244" Sep 13 00:23:55.988732 sudo[2013]: pam_unix(sudo:session): session closed for user root Sep 13 00:23:55.987000 audit[2013]: USER_END pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:23:55.991440 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 13 00:23:55.991572 kernel: audit: type=1106 audit(1757723035.987:936): pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:23:55.987000 audit[2013]: CRED_DISP pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:23:56.008462 kernel: audit: type=1104 audit(1757723035.987:937): pid=2013 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 00:23:56.016310 sshd[2010]: pam_unix(sshd:session): session closed for user core Sep 13 00:23:56.016000 audit[2010]: USER_END pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:23:56.021417 systemd[1]: session-7.scope: Deactivated successfully. Sep 13 00:23:56.021703 systemd[1]: session-7.scope: Consumed 13.229s CPU time. Sep 13 00:23:56.023182 systemd[1]: sshd@6-172.31.25.123:22-139.178.89.65:52674.service: Deactivated successfully. Sep 13 00:23:56.016000 audit[2010]: CRED_DISP pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:23:56.030933 systemd-logind[1734]: Session 7 logged out. Waiting for processes to exit. Sep 13 00:23:56.040174 kernel: audit: type=1106 audit(1757723036.016:938): pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:23:56.040251 kernel: audit: type=1104 audit(1757723036.016:939): pid=2010 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:23:56.041154 systemd-logind[1734]: Removed session 7. Sep 13 00:23:56.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.123:22-139.178.89.65:52674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:23:56.051310 kernel: audit: type=1131 audit(1757723036.021:940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.123:22-139.178.89.65:52674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:00.456000 audit[3113]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:00.456000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdea838c0 a2=0 a3=1 items=0 ppid=2845 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:00.475036 kernel: audit: type=1325 audit(1757723040.456:941): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:00.475159 kernel: audit: type=1300 audit(1757723040.456:941): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdea838c0 a2=0 a3=1 items=0 ppid=2845 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:00.456000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:00.481074 kernel: audit: type=1327 audit(1757723040.456:941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:00.481225 kernel: audit: type=1325 audit(1757723040.475:942): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:00.475000 audit[3113]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:00.475000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdea838c0 a2=0 a3=1 items=0 ppid=2845 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:00.475000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:00.501075 kernel: audit: type=1300 audit(1757723040.475:942): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdea838c0 a2=0 a3=1 items=0 ppid=2845 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:00.524000 audit[3115]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:00.524000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff2ded140 a2=0 a3=1 items=0 ppid=2845 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:00.524000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:00.528000 audit[3115]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:00.528000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff2ded140 a2=0 a3=1 items=0 ppid=2845 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:00.528000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.258000 audit[3119]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.261454 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:24:10.261610 kernel: audit: type=1325 audit(1757723050.258:945): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.258000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc0102a70 a2=0 a3=1 items=0 ppid=2845 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:10.280836 kernel: audit: type=1300 audit(1757723050.258:945): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc0102a70 a2=0 a3=1 items=0 ppid=2845 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:10.258000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.293619 kernel: audit: type=1327 audit(1757723050.258:945): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.293775 kernel: audit: type=1325 audit(1757723050.269:946): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.269000 audit[3119]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.269000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc0102a70 a2=0 a3=1 items=0 ppid=2845 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:10.312900 kernel: audit: type=1300 audit(1757723050.269:946): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc0102a70 a2=0 a3=1 items=0 ppid=2845 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:10.269000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.319798 kernel: audit: type=1327 audit(1757723050.269:946): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.361000 audit[3121]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.369006 kernel: audit: type=1325 audit(1757723050.361:947): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.361000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff7570c60 a2=0 a3=1 items=0 ppid=2845 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:10.361000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.389674 kernel: audit: type=1300 audit(1757723050.361:947): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff7570c60 a2=0 a3=1 items=0 ppid=2845 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:10.389816 kernel: audit: type=1327 audit(1757723050.361:947): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.393000 audit[3121]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.393000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff7570c60 a2=0 a3=1 items=0 ppid=2845 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:10.401204 kernel: audit: type=1325 audit(1757723050.393:948): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:10.393000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:10.534543 systemd[1]: Created slice kubepods-besteffort-pod0f061e14_5d18_4514_a4ff_1c855b9e96f9.slice. Sep 13 00:24:10.556309 kubelet[2740]: I0913 00:24:10.556235 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/0f061e14-5d18-4514-a4ff-1c855b9e96f9-typha-certs\") pod \"calico-typha-54fb8c7c5d-j5p2j\" (UID: \"0f061e14-5d18-4514-a4ff-1c855b9e96f9\") " pod="calico-system/calico-typha-54fb8c7c5d-j5p2j" Sep 13 00:24:10.557291 kubelet[2740]: I0913 00:24:10.556339 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bdvvm\" (UniqueName: \"kubernetes.io/projected/0f061e14-5d18-4514-a4ff-1c855b9e96f9-kube-api-access-bdvvm\") pod \"calico-typha-54fb8c7c5d-j5p2j\" (UID: \"0f061e14-5d18-4514-a4ff-1c855b9e96f9\") " pod="calico-system/calico-typha-54fb8c7c5d-j5p2j" Sep 13 00:24:10.557291 kubelet[2740]: I0913 00:24:10.556415 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0f061e14-5d18-4514-a4ff-1c855b9e96f9-tigera-ca-bundle\") pod \"calico-typha-54fb8c7c5d-j5p2j\" (UID: \"0f061e14-5d18-4514-a4ff-1c855b9e96f9\") " pod="calico-system/calico-typha-54fb8c7c5d-j5p2j" Sep 13 00:24:10.835163 systemd[1]: Created slice kubepods-besteffort-podb82a37e7_9e67_4a34_ae50_a057306221e1.slice. Sep 13 00:24:10.843844 env[1742]: time="2025-09-13T00:24:10.843015878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-54fb8c7c5d-j5p2j,Uid:0f061e14-5d18-4514-a4ff-1c855b9e96f9,Namespace:calico-system,Attempt:0,}" Sep 13 00:24:10.858433 kubelet[2740]: I0913 00:24:10.858382 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-cni-net-dir\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.858723 kubelet[2740]: I0913 00:24:10.858691 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-flexvol-driver-host\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.858891 kubelet[2740]: I0913 00:24:10.858864 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b82a37e7-9e67-4a34-ae50-a057306221e1-tigera-ca-bundle\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.859122 kubelet[2740]: I0913 00:24:10.859094 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-cni-bin-dir\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.859279 kubelet[2740]: I0913 00:24:10.859252 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-js49c\" (UniqueName: \"kubernetes.io/projected/b82a37e7-9e67-4a34-ae50-a057306221e1-kube-api-access-js49c\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.859508 kubelet[2740]: I0913 00:24:10.859453 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/b82a37e7-9e67-4a34-ae50-a057306221e1-node-certs\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.859761 kubelet[2740]: I0913 00:24:10.859664 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-var-run-calico\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.860046 kubelet[2740]: I0913 00:24:10.860017 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-lib-modules\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.860223 kubelet[2740]: I0913 00:24:10.860196 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-var-lib-calico\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.860422 kubelet[2740]: I0913 00:24:10.860392 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-xtables-lock\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.860581 kubelet[2740]: I0913 00:24:10.860555 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-cni-log-dir\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.860738 kubelet[2740]: I0913 00:24:10.860713 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/b82a37e7-9e67-4a34-ae50-a057306221e1-policysync\") pod \"calico-node-8ht24\" (UID: \"b82a37e7-9e67-4a34-ae50-a057306221e1\") " pod="calico-system/calico-node-8ht24" Sep 13 00:24:10.892481 env[1742]: time="2025-09-13T00:24:10.892335653Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:10.892481 env[1742]: time="2025-09-13T00:24:10.892420037Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:10.892793 env[1742]: time="2025-09-13T00:24:10.892446977Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:10.893164 env[1742]: time="2025-09-13T00:24:10.893072117Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0da2dfcc9a4692f14dd33d5fa35ef4efdad67ae1d182f9bdaffd4cf78a8ad20 pid=3132 runtime=io.containerd.runc.v2 Sep 13 00:24:10.939750 systemd[1]: Started cri-containerd-a0da2dfcc9a4692f14dd33d5fa35ef4efdad67ae1d182f9bdaffd4cf78a8ad20.scope. Sep 13 00:24:10.968368 kubelet[2740]: E0913 00:24:10.968324 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:10.968599 kubelet[2740]: W0913 00:24:10.968567 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:10.968737 kubelet[2740]: E0913 00:24:10.968712 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:10.976035 kubelet[2740]: E0913 00:24:10.975996 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:10.976232 kubelet[2740]: W0913 00:24:10.976204 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:10.976358 kubelet[2740]: E0913 00:24:10.976333 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.021177 kubelet[2740]: E0913 00:24:11.021139 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.021463 kubelet[2740]: W0913 00:24:11.021431 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.021666 kubelet[2740]: E0913 00:24:11.021638 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.046813 kubelet[2740]: E0913 00:24:11.046744 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:11.053500 kubelet[2740]: E0913 00:24:11.053426 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.053500 kubelet[2740]: W0913 00:24:11.053470 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.053500 kubelet[2740]: E0913 00:24:11.053504 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.054273 kubelet[2740]: E0913 00:24:11.054226 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.054273 kubelet[2740]: W0913 00:24:11.054263 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.054512 kubelet[2740]: E0913 00:24:11.054294 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.054722 kubelet[2740]: E0913 00:24:11.054685 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.054722 kubelet[2740]: W0913 00:24:11.054715 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.054874 kubelet[2740]: E0913 00:24:11.054744 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.055191 kubelet[2740]: E0913 00:24:11.055127 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.055191 kubelet[2740]: W0913 00:24:11.055171 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.055364 kubelet[2740]: E0913 00:24:11.055196 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.055631 kubelet[2740]: E0913 00:24:11.055578 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.055631 kubelet[2740]: W0913 00:24:11.055610 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.055779 kubelet[2740]: E0913 00:24:11.055635 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.056096 kubelet[2740]: E0913 00:24:11.056057 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.056096 kubelet[2740]: W0913 00:24:11.056090 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.056326 kubelet[2740]: E0913 00:24:11.056114 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.058231 kubelet[2740]: E0913 00:24:11.058176 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.058231 kubelet[2740]: W0913 00:24:11.058218 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.058481 kubelet[2740]: E0913 00:24:11.058253 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.058751 kubelet[2740]: E0913 00:24:11.058709 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.058751 kubelet[2740]: W0913 00:24:11.058742 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.058918 kubelet[2740]: E0913 00:24:11.058767 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.059358 kubelet[2740]: E0913 00:24:11.059298 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.059358 kubelet[2740]: W0913 00:24:11.059348 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.059525 kubelet[2740]: E0913 00:24:11.059377 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.059831 kubelet[2740]: E0913 00:24:11.059788 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.059831 kubelet[2740]: W0913 00:24:11.059821 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.060133 kubelet[2740]: E0913 00:24:11.059847 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.060290 kubelet[2740]: E0913 00:24:11.060236 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.060290 kubelet[2740]: W0913 00:24:11.060281 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.060439 kubelet[2740]: E0913 00:24:11.060306 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.060718 kubelet[2740]: E0913 00:24:11.060680 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.060718 kubelet[2740]: W0913 00:24:11.060711 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.060900 kubelet[2740]: E0913 00:24:11.060734 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.065521 kubelet[2740]: E0913 00:24:11.065454 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.065521 kubelet[2740]: W0913 00:24:11.065493 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.065521 kubelet[2740]: E0913 00:24:11.065525 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.066032 kubelet[2740]: E0913 00:24:11.065962 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.066032 kubelet[2740]: W0913 00:24:11.066025 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.066220 kubelet[2740]: E0913 00:24:11.066058 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.066530 kubelet[2740]: E0913 00:24:11.066474 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.066530 kubelet[2740]: W0913 00:24:11.066515 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.066677 kubelet[2740]: E0913 00:24:11.066541 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.066918 kubelet[2740]: E0913 00:24:11.066878 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.066918 kubelet[2740]: W0913 00:24:11.066909 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.067119 kubelet[2740]: E0913 00:24:11.066932 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.067375 kubelet[2740]: E0913 00:24:11.067324 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.067375 kubelet[2740]: W0913 00:24:11.067367 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.067527 kubelet[2740]: E0913 00:24:11.067395 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.068186 kubelet[2740]: E0913 00:24:11.068138 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.068186 kubelet[2740]: W0913 00:24:11.068175 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.068402 kubelet[2740]: E0913 00:24:11.068206 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.068589 kubelet[2740]: E0913 00:24:11.068554 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.068589 kubelet[2740]: W0913 00:24:11.068582 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.068757 kubelet[2740]: E0913 00:24:11.068605 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.070205 kubelet[2740]: E0913 00:24:11.070150 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.070205 kubelet[2740]: W0913 00:24:11.070190 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.070497 kubelet[2740]: E0913 00:24:11.070224 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.070804 kubelet[2740]: E0913 00:24:11.070764 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.070804 kubelet[2740]: W0913 00:24:11.070796 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.071004 kubelet[2740]: E0913 00:24:11.070823 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.071004 kubelet[2740]: I0913 00:24:11.070868 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/c89c8e1b-1e30-44db-b7f5-0c71a1572267-kubelet-dir\") pod \"csi-node-driver-r7dh9\" (UID: \"c89c8e1b-1e30-44db-b7f5-0c71a1572267\") " pod="calico-system/csi-node-driver-r7dh9" Sep 13 00:24:11.071378 kubelet[2740]: E0913 00:24:11.071329 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.071378 kubelet[2740]: W0913 00:24:11.071362 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.071538 kubelet[2740]: E0913 00:24:11.071397 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.071538 kubelet[2740]: I0913 00:24:11.071432 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/c89c8e1b-1e30-44db-b7f5-0c71a1572267-registration-dir\") pod \"csi-node-driver-r7dh9\" (UID: \"c89c8e1b-1e30-44db-b7f5-0c71a1572267\") " pod="calico-system/csi-node-driver-r7dh9" Sep 13 00:24:11.071850 kubelet[2740]: E0913 00:24:11.071807 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.071850 kubelet[2740]: W0913 00:24:11.071839 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.072062 kubelet[2740]: E0913 00:24:11.071878 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.072062 kubelet[2740]: I0913 00:24:11.071913 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/c89c8e1b-1e30-44db-b7f5-0c71a1572267-varrun\") pod \"csi-node-driver-r7dh9\" (UID: \"c89c8e1b-1e30-44db-b7f5-0c71a1572267\") " pod="calico-system/csi-node-driver-r7dh9" Sep 13 00:24:11.074147 kubelet[2740]: E0913 00:24:11.074087 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.074147 kubelet[2740]: W0913 00:24:11.074132 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.074545 kubelet[2740]: E0913 00:24:11.074424 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.074545 kubelet[2740]: I0913 00:24:11.074489 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/c89c8e1b-1e30-44db-b7f5-0c71a1572267-socket-dir\") pod \"csi-node-driver-r7dh9\" (UID: \"c89c8e1b-1e30-44db-b7f5-0c71a1572267\") " pod="calico-system/csi-node-driver-r7dh9" Sep 13 00:24:11.074545 kubelet[2740]: E0913 00:24:11.074512 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.074545 kubelet[2740]: W0913 00:24:11.074529 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.074833 kubelet[2740]: E0913 00:24:11.074691 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.076191 kubelet[2740]: E0913 00:24:11.076139 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.076191 kubelet[2740]: W0913 00:24:11.076178 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.076465 kubelet[2740]: E0913 00:24:11.076385 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.076675 kubelet[2740]: E0913 00:24:11.076636 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.076675 kubelet[2740]: W0913 00:24:11.076664 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.076872 kubelet[2740]: E0913 00:24:11.076820 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.077105 kubelet[2740]: E0913 00:24:11.077068 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.077105 kubelet[2740]: W0913 00:24:11.077097 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.077387 kubelet[2740]: E0913 00:24:11.077291 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.077387 kubelet[2740]: I0913 00:24:11.077346 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4c4k4\" (UniqueName: \"kubernetes.io/projected/c89c8e1b-1e30-44db-b7f5-0c71a1572267-kube-api-access-4c4k4\") pod \"csi-node-driver-r7dh9\" (UID: \"c89c8e1b-1e30-44db-b7f5-0c71a1572267\") " pod="calico-system/csi-node-driver-r7dh9" Sep 13 00:24:11.077549 kubelet[2740]: E0913 00:24:11.077418 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.077549 kubelet[2740]: W0913 00:24:11.077435 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.077672 kubelet[2740]: E0913 00:24:11.077566 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.077788 kubelet[2740]: E0913 00:24:11.077753 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.077788 kubelet[2740]: W0913 00:24:11.077779 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.077994 kubelet[2740]: E0913 00:24:11.077802 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.078290 kubelet[2740]: E0913 00:24:11.078250 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.078290 kubelet[2740]: W0913 00:24:11.078281 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.078454 kubelet[2740]: E0913 00:24:11.078316 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.078719 kubelet[2740]: E0913 00:24:11.078670 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.078719 kubelet[2740]: W0913 00:24:11.078699 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.078719 kubelet[2740]: E0913 00:24:11.078723 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.079178 kubelet[2740]: E0913 00:24:11.079136 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.079178 kubelet[2740]: W0913 00:24:11.079166 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.079364 kubelet[2740]: E0913 00:24:11.079191 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.079742 kubelet[2740]: E0913 00:24:11.079584 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.079742 kubelet[2740]: W0913 00:24:11.079614 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.079742 kubelet[2740]: E0913 00:24:11.079637 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.080204 kubelet[2740]: E0913 00:24:11.080002 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.080204 kubelet[2740]: W0913 00:24:11.080032 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.080204 kubelet[2740]: E0913 00:24:11.080058 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.090000 audit: BPF prog-id=121 op=LOAD Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3132 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646132646663633961343639326631346464333364356661333565 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3132 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646132646663633961343639326631346464333364356661333565 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit: BPF prog-id=122 op=LOAD Sep 13 00:24:11.091000 audit[3142]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3132 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646132646663633961343639326631346464333364356661333565 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.091000 audit: BPF prog-id=123 op=LOAD Sep 13 00:24:11.091000 audit[3142]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3132 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646132646663633961343639326631346464333364356661333565 Sep 13 00:24:11.091000 audit: BPF prog-id=123 op=UNLOAD Sep 13 00:24:11.091000 audit: BPF prog-id=122 op=UNLOAD Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { perfmon } for pid=3142 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit[3142]: AVC avc: denied { bpf } for pid=3142 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.092000 audit: BPF prog-id=124 op=LOAD Sep 13 00:24:11.092000 audit[3142]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3132 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646132646663633961343639326631346464333364356661333565 Sep 13 00:24:11.142698 env[1742]: time="2025-09-13T00:24:11.142104029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8ht24,Uid:b82a37e7-9e67-4a34-ae50-a057306221e1,Namespace:calico-system,Attempt:0,}" Sep 13 00:24:11.176164 env[1742]: time="2025-09-13T00:24:11.176029999Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:11.176636 env[1742]: time="2025-09-13T00:24:11.176574811Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:11.176847 env[1742]: time="2025-09-13T00:24:11.176783299Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:11.177753 env[1742]: time="2025-09-13T00:24:11.177271423Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65 pid=3205 runtime=io.containerd.runc.v2 Sep 13 00:24:11.181302 kubelet[2740]: E0913 00:24:11.180846 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.181302 kubelet[2740]: W0913 00:24:11.180884 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.181302 kubelet[2740]: E0913 00:24:11.180916 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.181988 kubelet[2740]: E0913 00:24:11.181685 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.181988 kubelet[2740]: W0913 00:24:11.181712 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.181988 kubelet[2740]: E0913 00:24:11.181753 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.182643 kubelet[2740]: E0913 00:24:11.182378 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.182643 kubelet[2740]: W0913 00:24:11.182408 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.182643 kubelet[2740]: E0913 00:24:11.182447 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.183418 kubelet[2740]: E0913 00:24:11.183025 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.183418 kubelet[2740]: W0913 00:24:11.183050 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.183418 kubelet[2740]: E0913 00:24:11.183130 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.184401 kubelet[2740]: E0913 00:24:11.184183 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.184401 kubelet[2740]: W0913 00:24:11.184212 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.184401 kubelet[2740]: E0913 00:24:11.184294 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.185056 kubelet[2740]: E0913 00:24:11.184782 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.185056 kubelet[2740]: W0913 00:24:11.184807 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.185056 kubelet[2740]: E0913 00:24:11.184865 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.185451 kubelet[2740]: E0913 00:24:11.185424 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.185596 kubelet[2740]: W0913 00:24:11.185567 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.185821 kubelet[2740]: E0913 00:24:11.185768 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.187747 kubelet[2740]: E0913 00:24:11.187706 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.188069 kubelet[2740]: W0913 00:24:11.187923 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.188302 kubelet[2740]: E0913 00:24:11.188255 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.192157 kubelet[2740]: E0913 00:24:11.192116 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.192493 kubelet[2740]: W0913 00:24:11.192459 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.192662 kubelet[2740]: E0913 00:24:11.192618 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.194260 kubelet[2740]: E0913 00:24:11.194198 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.194260 kubelet[2740]: W0913 00:24:11.194246 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.194510 kubelet[2740]: E0913 00:24:11.194453 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.197185 kubelet[2740]: E0913 00:24:11.197122 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.197185 kubelet[2740]: W0913 00:24:11.197169 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.197428 kubelet[2740]: E0913 00:24:11.197391 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.197928 kubelet[2740]: E0913 00:24:11.197883 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.197928 kubelet[2740]: W0913 00:24:11.197918 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.198210 kubelet[2740]: E0913 00:24:11.198119 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.198394 kubelet[2740]: E0913 00:24:11.198356 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.198394 kubelet[2740]: W0913 00:24:11.198386 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.198563 kubelet[2740]: E0913 00:24:11.198525 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.202503 kubelet[2740]: E0913 00:24:11.202454 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.202503 kubelet[2740]: W0913 00:24:11.202489 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.202782 kubelet[2740]: E0913 00:24:11.202678 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.203095 kubelet[2740]: E0913 00:24:11.203054 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.203095 kubelet[2740]: W0913 00:24:11.203086 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.203275 kubelet[2740]: E0913 00:24:11.203237 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.207353 kubelet[2740]: E0913 00:24:11.207299 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.207353 kubelet[2740]: W0913 00:24:11.207342 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.207586 kubelet[2740]: E0913 00:24:11.207531 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.209576 kubelet[2740]: E0913 00:24:11.209446 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.209576 kubelet[2740]: W0913 00:24:11.209568 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.209802 kubelet[2740]: E0913 00:24:11.209757 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.211990 kubelet[2740]: E0913 00:24:11.211112 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.211990 kubelet[2740]: W0913 00:24:11.211159 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.211990 kubelet[2740]: E0913 00:24:11.211356 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.211990 kubelet[2740]: E0913 00:24:11.211595 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.211990 kubelet[2740]: W0913 00:24:11.211612 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.211990 kubelet[2740]: E0913 00:24:11.211793 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.212453 kubelet[2740]: E0913 00:24:11.212081 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.212453 kubelet[2740]: W0913 00:24:11.212103 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.212453 kubelet[2740]: E0913 00:24:11.212300 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.217284 kubelet[2740]: E0913 00:24:11.216414 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.217284 kubelet[2740]: W0913 00:24:11.216455 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.217284 kubelet[2740]: E0913 00:24:11.216712 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.217284 kubelet[2740]: E0913 00:24:11.217117 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.217284 kubelet[2740]: W0913 00:24:11.217140 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.217864 kubelet[2740]: E0913 00:24:11.217327 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.220326 kubelet[2740]: E0913 00:24:11.219609 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.220326 kubelet[2740]: W0913 00:24:11.220209 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.220561 kubelet[2740]: E0913 00:24:11.220456 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.221134 kubelet[2740]: E0913 00:24:11.221088 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.221134 kubelet[2740]: W0913 00:24:11.221125 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.221339 kubelet[2740]: E0913 00:24:11.221165 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.227756 kubelet[2740]: E0913 00:24:11.224748 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.227756 kubelet[2740]: W0913 00:24:11.224785 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.227756 kubelet[2740]: E0913 00:24:11.224826 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.227307 systemd[1]: Started cri-containerd-ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65.scope. Sep 13 00:24:11.260816 kubelet[2740]: E0913 00:24:11.260763 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:11.260816 kubelet[2740]: W0913 00:24:11.260803 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:11.261107 kubelet[2740]: E0913 00:24:11.260860 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:11.315310 env[1742]: time="2025-09-13T00:24:11.315249940Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-54fb8c7c5d-j5p2j,Uid:0f061e14-5d18-4514-a4ff-1c855b9e96f9,Namespace:calico-system,Attempt:0,} returns sandbox id \"a0da2dfcc9a4692f14dd33d5fa35ef4efdad67ae1d182f9bdaffd4cf78a8ad20\"" Sep 13 00:24:11.318646 env[1742]: time="2025-09-13T00:24:11.318587548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.347000 audit: BPF prog-id=125 op=LOAD Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3205 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165376166656631363833613261313036653237353464343433633038 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3205 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165376166656631363833613261313036653237353464343433633038 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.351000 audit: BPF prog-id=126 op=LOAD Sep 13 00:24:11.351000 audit[3226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3205 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.351000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165376166656631363833613261313036653237353464343433633038 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit: BPF prog-id=127 op=LOAD Sep 13 00:24:11.352000 audit[3226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3205 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165376166656631363833613261313036653237353464343433633038 Sep 13 00:24:11.352000 audit: BPF prog-id=127 op=UNLOAD Sep 13 00:24:11.352000 audit: BPF prog-id=126 op=UNLOAD Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { perfmon } for pid=3226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit[3226]: AVC avc: denied { bpf } for pid=3226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:11.352000 audit: BPF prog-id=128 op=LOAD Sep 13 00:24:11.352000 audit[3226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3205 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165376166656631363833613261313036653237353464343433633038 Sep 13 00:24:11.432262 env[1742]: time="2025-09-13T00:24:11.432197267Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8ht24,Uid:b82a37e7-9e67-4a34-ae50-a057306221e1,Namespace:calico-system,Attempt:0,} returns sandbox id \"ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65\"" Sep 13 00:24:11.452000 audit[3274]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=3274 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:11.452000 audit[3274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd8e5d1b0 a2=0 a3=1 items=0 ppid=2845 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.452000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:11.457000 audit[3274]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3274 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:11.457000 audit[3274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd8e5d1b0 a2=0 a3=1 items=0 ppid=2845 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:11.457000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:11.676153 systemd[1]: run-containerd-runc-k8s.io-a0da2dfcc9a4692f14dd33d5fa35ef4efdad67ae1d182f9bdaffd4cf78a8ad20-runc.UJ0EoB.mount: Deactivated successfully. Sep 13 00:24:12.647925 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3622382131.mount: Deactivated successfully. Sep 13 00:24:13.242797 kubelet[2740]: E0913 00:24:13.241976 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:14.148762 env[1742]: time="2025-09-13T00:24:14.148705978Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:14.154911 env[1742]: time="2025-09-13T00:24:14.154840786Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:14.158379 env[1742]: time="2025-09-13T00:24:14.158328922Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:14.164223 env[1742]: time="2025-09-13T00:24:14.164167907Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:14.164978 env[1742]: time="2025-09-13T00:24:14.164907611Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 13 00:24:14.168380 env[1742]: time="2025-09-13T00:24:14.168326051Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 13 00:24:14.202474 env[1742]: time="2025-09-13T00:24:14.202392133Z" level=info msg="CreateContainer within sandbox \"a0da2dfcc9a4692f14dd33d5fa35ef4efdad67ae1d182f9bdaffd4cf78a8ad20\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 13 00:24:14.231277 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount916582580.mount: Deactivated successfully. Sep 13 00:24:14.243451 env[1742]: time="2025-09-13T00:24:14.243348784Z" level=info msg="CreateContainer within sandbox \"a0da2dfcc9a4692f14dd33d5fa35ef4efdad67ae1d182f9bdaffd4cf78a8ad20\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"94d69ab3861b8e584e2e00233c99462f2f2b8043816b8dbf7fec4ef971aa0a99\"" Sep 13 00:24:14.246456 env[1742]: time="2025-09-13T00:24:14.246382204Z" level=info msg="StartContainer for \"94d69ab3861b8e584e2e00233c99462f2f2b8043816b8dbf7fec4ef971aa0a99\"" Sep 13 00:24:14.290688 systemd[1]: Started cri-containerd-94d69ab3861b8e584e2e00233c99462f2f2b8043816b8dbf7fec4ef971aa0a99.scope. Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.335000 audit: BPF prog-id=129 op=LOAD Sep 13 00:24:14.336000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.336000 audit[3284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=3132 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:14.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934643639616233383631623865353834653265303032333363393934 Sep 13 00:24:14.336000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.336000 audit[3284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3132 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:14.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934643639616233383631623865353834653265303032333363393934 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.337000 audit: BPF prog-id=130 op=LOAD Sep 13 00:24:14.337000 audit[3284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3132 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:14.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934643639616233383631623865353834653265303032333363393934 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.339000 audit: BPF prog-id=131 op=LOAD Sep 13 00:24:14.339000 audit[3284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3132 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:14.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934643639616233383631623865353834653265303032333363393934 Sep 13 00:24:14.340000 audit: BPF prog-id=131 op=UNLOAD Sep 13 00:24:14.340000 audit: BPF prog-id=130 op=UNLOAD Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:14.340000 audit: BPF prog-id=132 op=LOAD Sep 13 00:24:14.340000 audit[3284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3132 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:14.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934643639616233383631623865353834653265303032333363393934 Sep 13 00:24:14.396374 env[1742]: time="2025-09-13T00:24:14.396307981Z" level=info msg="StartContainer for \"94d69ab3861b8e584e2e00233c99462f2f2b8043816b8dbf7fec4ef971aa0a99\" returns successfully" Sep 13 00:24:14.502340 kubelet[2740]: E0913 00:24:14.502271 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.502340 kubelet[2740]: W0913 00:24:14.502330 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.502988 kubelet[2740]: E0913 00:24:14.502362 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.502988 kubelet[2740]: E0913 00:24:14.502806 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.502988 kubelet[2740]: W0913 00:24:14.502827 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.502988 kubelet[2740]: E0913 00:24:14.502849 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.504094 kubelet[2740]: E0913 00:24:14.503255 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.504094 kubelet[2740]: W0913 00:24:14.503298 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.504094 kubelet[2740]: E0913 00:24:14.503324 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.504094 kubelet[2740]: E0913 00:24:14.503681 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.504094 kubelet[2740]: W0913 00:24:14.503699 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.504094 kubelet[2740]: E0913 00:24:14.503719 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.504494 kubelet[2740]: E0913 00:24:14.504109 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.504494 kubelet[2740]: W0913 00:24:14.504127 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.504494 kubelet[2740]: E0913 00:24:14.504148 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.504494 kubelet[2740]: E0913 00:24:14.504470 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.504494 kubelet[2740]: W0913 00:24:14.504487 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.504781 kubelet[2740]: E0913 00:24:14.504506 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.504867 kubelet[2740]: E0913 00:24:14.504824 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.504867 kubelet[2740]: W0913 00:24:14.504840 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.504867 kubelet[2740]: E0913 00:24:14.504859 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.506005 kubelet[2740]: E0913 00:24:14.505210 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.506005 kubelet[2740]: W0913 00:24:14.505240 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.506005 kubelet[2740]: E0913 00:24:14.505264 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.506005 kubelet[2740]: E0913 00:24:14.505724 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.506005 kubelet[2740]: W0913 00:24:14.505760 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.506005 kubelet[2740]: E0913 00:24:14.505790 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.506550 kubelet[2740]: E0913 00:24:14.506214 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.506550 kubelet[2740]: W0913 00:24:14.506249 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.506550 kubelet[2740]: E0913 00:24:14.506273 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.506721 kubelet[2740]: E0913 00:24:14.506602 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.506721 kubelet[2740]: W0913 00:24:14.506620 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.506721 kubelet[2740]: E0913 00:24:14.506640 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.507069 kubelet[2740]: E0913 00:24:14.507032 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.507069 kubelet[2740]: W0913 00:24:14.507062 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.507200 kubelet[2740]: E0913 00:24:14.507086 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.507997 kubelet[2740]: E0913 00:24:14.507439 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.507997 kubelet[2740]: W0913 00:24:14.507486 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.507997 kubelet[2740]: E0913 00:24:14.507511 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.507997 kubelet[2740]: E0913 00:24:14.507863 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.507997 kubelet[2740]: W0913 00:24:14.507880 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.507997 kubelet[2740]: E0913 00:24:14.507924 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.508431 kubelet[2740]: E0913 00:24:14.508357 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.508431 kubelet[2740]: W0913 00:24:14.508393 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.508431 kubelet[2740]: E0913 00:24:14.508417 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.512139 kubelet[2740]: E0913 00:24:14.512088 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.512139 kubelet[2740]: W0913 00:24:14.512127 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.512667 kubelet[2740]: E0913 00:24:14.512161 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.512667 kubelet[2740]: E0913 00:24:14.512635 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.512667 kubelet[2740]: W0913 00:24:14.512655 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.513201 kubelet[2740]: E0913 00:24:14.512685 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.513201 kubelet[2740]: E0913 00:24:14.513174 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.513201 kubelet[2740]: W0913 00:24:14.513193 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.513622 kubelet[2740]: E0913 00:24:14.513247 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.514438 kubelet[2740]: E0913 00:24:14.513782 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.514438 kubelet[2740]: W0913 00:24:14.513825 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.514438 kubelet[2740]: E0913 00:24:14.513867 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.514438 kubelet[2740]: E0913 00:24:14.514209 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.514438 kubelet[2740]: W0913 00:24:14.514231 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.514438 kubelet[2740]: E0913 00:24:14.514264 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.517006 kubelet[2740]: E0913 00:24:14.514945 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.517006 kubelet[2740]: W0913 00:24:14.515113 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.517006 kubelet[2740]: E0913 00:24:14.515360 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.518137 kubelet[2740]: E0913 00:24:14.518091 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.518137 kubelet[2740]: W0913 00:24:14.518125 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.518416 kubelet[2740]: E0913 00:24:14.518387 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.518546 kubelet[2740]: E0913 00:24:14.518511 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.518546 kubelet[2740]: W0913 00:24:14.518538 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.518743 kubelet[2740]: E0913 00:24:14.518713 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.522089 kubelet[2740]: E0913 00:24:14.522046 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.522089 kubelet[2740]: W0913 00:24:14.522076 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.522338 kubelet[2740]: E0913 00:24:14.522307 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.522722 kubelet[2740]: E0913 00:24:14.522390 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.522846 kubelet[2740]: W0913 00:24:14.522822 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.524061 kubelet[2740]: E0913 00:24:14.524025 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.524391 kubelet[2740]: E0913 00:24:14.524367 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.524528 kubelet[2740]: W0913 00:24:14.524503 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.524824 kubelet[2740]: E0913 00:24:14.524797 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.525067 kubelet[2740]: E0913 00:24:14.525045 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.525209 kubelet[2740]: W0913 00:24:14.525181 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.525531 kubelet[2740]: E0913 00:24:14.525503 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.525787 kubelet[2740]: E0913 00:24:14.525765 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.525970 kubelet[2740]: W0913 00:24:14.525923 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.526328 kubelet[2740]: E0913 00:24:14.526299 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.526584 kubelet[2740]: E0913 00:24:14.526563 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.526709 kubelet[2740]: W0913 00:24:14.526684 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.526832 kubelet[2740]: E0913 00:24:14.526809 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.527581 kubelet[2740]: E0913 00:24:14.527548 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.527769 kubelet[2740]: W0913 00:24:14.527740 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.527991 kubelet[2740]: E0913 00:24:14.527934 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.528915 kubelet[2740]: E0913 00:24:14.528868 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.529198 kubelet[2740]: W0913 00:24:14.529154 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.529408 kubelet[2740]: E0913 00:24:14.529380 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.530533 kubelet[2740]: E0913 00:24:14.530497 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.530714 kubelet[2740]: W0913 00:24:14.530688 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.530869 kubelet[2740]: E0913 00:24:14.530845 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:14.531433 kubelet[2740]: E0913 00:24:14.531405 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:14.531641 kubelet[2740]: W0913 00:24:14.531614 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:14.531771 kubelet[2740]: E0913 00:24:14.531746 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.242047 kubelet[2740]: E0913 00:24:15.241975 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:15.469501 kubelet[2740]: I0913 00:24:15.469353 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-54fb8c7c5d-j5p2j" podStartSLOduration=2.620006526 podStartE2EDuration="5.469330681s" podCreationTimestamp="2025-09-13 00:24:10 +0000 UTC" firstStartedPulling="2025-09-13 00:24:11.318052816 +0000 UTC m=+33.275351601" lastFinishedPulling="2025-09-13 00:24:14.167376959 +0000 UTC m=+36.124675756" observedRunningTime="2025-09-13 00:24:14.474205349 +0000 UTC m=+36.431504158" watchObservedRunningTime="2025-09-13 00:24:15.469330681 +0000 UTC m=+37.426629466" Sep 13 00:24:15.516168 kubelet[2740]: E0913 00:24:15.515658 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.516168 kubelet[2740]: W0913 00:24:15.515702 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.516168 kubelet[2740]: E0913 00:24:15.515738 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.517131 kubelet[2740]: E0913 00:24:15.517087 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.517131 kubelet[2740]: W0913 00:24:15.517125 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.517337 kubelet[2740]: E0913 00:24:15.517159 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.517703 kubelet[2740]: E0913 00:24:15.517667 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.517703 kubelet[2740]: W0913 00:24:15.517698 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.517900 kubelet[2740]: E0913 00:24:15.517726 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.518263 kubelet[2740]: E0913 00:24:15.518228 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.518263 kubelet[2740]: W0913 00:24:15.518259 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.518412 kubelet[2740]: E0913 00:24:15.518286 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.520910 kubelet[2740]: E0913 00:24:15.520861 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.520910 kubelet[2740]: W0913 00:24:15.520900 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.521175 kubelet[2740]: E0913 00:24:15.520934 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.523058 kubelet[2740]: E0913 00:24:15.523004 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.523058 kubelet[2740]: W0913 00:24:15.523045 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.523304 kubelet[2740]: E0913 00:24:15.523079 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.523705 kubelet[2740]: E0913 00:24:15.523648 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.523705 kubelet[2740]: W0913 00:24:15.523690 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.523902 kubelet[2740]: E0913 00:24:15.523745 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.524294 kubelet[2740]: E0913 00:24:15.524259 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.524294 kubelet[2740]: W0913 00:24:15.524288 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.524454 kubelet[2740]: E0913 00:24:15.524314 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.524807 kubelet[2740]: E0913 00:24:15.524772 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.524807 kubelet[2740]: W0913 00:24:15.524803 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.524996 kubelet[2740]: E0913 00:24:15.524827 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.525319 kubelet[2740]: E0913 00:24:15.525285 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.525319 kubelet[2740]: W0913 00:24:15.525314 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.525465 kubelet[2740]: E0913 00:24:15.525338 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.526129 kubelet[2740]: E0913 00:24:15.526087 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.526129 kubelet[2740]: W0913 00:24:15.526123 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.526339 kubelet[2740]: E0913 00:24:15.526157 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.526708 kubelet[2740]: E0913 00:24:15.526672 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.526708 kubelet[2740]: W0913 00:24:15.526703 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.526851 kubelet[2740]: E0913 00:24:15.526729 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.527689 kubelet[2740]: E0913 00:24:15.527648 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.527689 kubelet[2740]: W0913 00:24:15.527683 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.527906 kubelet[2740]: E0913 00:24:15.527712 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.528751 kubelet[2740]: E0913 00:24:15.528712 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.528751 kubelet[2740]: W0913 00:24:15.528746 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.528939 kubelet[2740]: E0913 00:24:15.528775 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.529651 kubelet[2740]: E0913 00:24:15.529611 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.529651 kubelet[2740]: W0913 00:24:15.529644 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.529818 kubelet[2740]: E0913 00:24:15.529672 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.530611 kubelet[2740]: E0913 00:24:15.530573 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.530611 kubelet[2740]: W0913 00:24:15.530605 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.530763 kubelet[2740]: E0913 00:24:15.530634 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.531533 kubelet[2740]: E0913 00:24:15.531493 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.531533 kubelet[2740]: W0913 00:24:15.531527 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.531734 kubelet[2740]: E0913 00:24:15.531576 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.533774 kubelet[2740]: E0913 00:24:15.533713 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.533774 kubelet[2740]: W0913 00:24:15.533761 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.534095 kubelet[2740]: E0913 00:24:15.533829 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.534486 kubelet[2740]: E0913 00:24:15.534450 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.534486 kubelet[2740]: W0913 00:24:15.534482 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.534803 kubelet[2740]: E0913 00:24:15.534649 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.534999 kubelet[2740]: E0913 00:24:15.534933 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.534999 kubelet[2740]: W0913 00:24:15.534978 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.535469 kubelet[2740]: E0913 00:24:15.535162 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.535780 kubelet[2740]: E0913 00:24:15.535743 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.535859 kubelet[2740]: W0913 00:24:15.535776 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.536119 kubelet[2740]: E0913 00:24:15.535945 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.536431 kubelet[2740]: E0913 00:24:15.536394 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.536431 kubelet[2740]: W0913 00:24:15.536424 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.536974 kubelet[2740]: E0913 00:24:15.536766 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.537266 kubelet[2740]: E0913 00:24:15.537231 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.537342 kubelet[2740]: W0913 00:24:15.537262 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.537566 kubelet[2740]: E0913 00:24:15.537439 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.538095 kubelet[2740]: E0913 00:24:15.538054 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.538095 kubelet[2740]: W0913 00:24:15.538087 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.538482 kubelet[2740]: E0913 00:24:15.538315 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.539429 kubelet[2740]: E0913 00:24:15.539386 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.539429 kubelet[2740]: W0913 00:24:15.539422 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.539783 kubelet[2740]: E0913 00:24:15.539623 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.540036 kubelet[2740]: E0913 00:24:15.539937 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.540036 kubelet[2740]: W0913 00:24:15.540000 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.540473 kubelet[2740]: E0913 00:24:15.540288 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.542646 kubelet[2740]: E0913 00:24:15.542592 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.542646 kubelet[2740]: W0913 00:24:15.542631 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.542871 kubelet[2740]: E0913 00:24:15.542679 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.543371 kubelet[2740]: E0913 00:24:15.543333 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.543371 kubelet[2740]: W0913 00:24:15.543366 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.543566 kubelet[2740]: E0913 00:24:15.543542 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.543903 kubelet[2740]: E0913 00:24:15.543869 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.543903 kubelet[2740]: W0913 00:24:15.543898 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.544328 kubelet[2740]: E0913 00:24:15.544295 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.544328 kubelet[2740]: W0913 00:24:15.544324 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.544462 kubelet[2740]: E0913 00:24:15.544350 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.544769 kubelet[2740]: E0913 00:24:15.544735 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.544769 kubelet[2740]: W0913 00:24:15.544763 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.544900 kubelet[2740]: E0913 00:24:15.544788 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.545573 kubelet[2740]: E0913 00:24:15.545523 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.545573 kubelet[2740]: W0913 00:24:15.545563 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.545767 kubelet[2740]: E0913 00:24:15.545595 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.545767 kubelet[2740]: E0913 00:24:15.545641 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.555479 kernel: kauditd_printk_skb: 179 callbacks suppressed Sep 13 00:24:15.555626 kernel: audit: type=1325 audit(1757723055.546:1005): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:15.546000 audit[3373]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:15.555761 kubelet[2740]: E0913 00:24:15.547831 2740 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 00:24:15.555761 kubelet[2740]: W0913 00:24:15.547858 2740 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 00:24:15.555761 kubelet[2740]: E0913 00:24:15.547890 2740 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 00:24:15.567811 kernel: audit: type=1300 audit(1757723055.546:1005): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd2a51000 a2=0 a3=1 items=0 ppid=2845 pid=3373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.546000 audit[3373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd2a51000 a2=0 a3=1 items=0 ppid=2845 pid=3373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.546000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:15.573850 kernel: audit: type=1327 audit(1757723055.546:1005): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:15.567000 audit[3373]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:15.580000 kernel: audit: type=1325 audit(1757723055.567:1006): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:15.567000 audit[3373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd2a51000 a2=0 a3=1 items=0 ppid=2845 pid=3373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.591924 kernel: audit: type=1300 audit(1757723055.567:1006): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd2a51000 a2=0 a3=1 items=0 ppid=2845 pid=3373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.567000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:15.597656 kernel: audit: type=1327 audit(1757723055.567:1006): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:15.716082 env[1742]: time="2025-09-13T00:24:15.716011372Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:15.721767 env[1742]: time="2025-09-13T00:24:15.721708348Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:15.725422 env[1742]: time="2025-09-13T00:24:15.725365025Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:15.728805 env[1742]: time="2025-09-13T00:24:15.728750777Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:15.729352 env[1742]: time="2025-09-13T00:24:15.729304385Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 13 00:24:15.735831 env[1742]: time="2025-09-13T00:24:15.735777905Z" level=info msg="CreateContainer within sandbox \"ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 13 00:24:15.765889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount79046057.mount: Deactivated successfully. Sep 13 00:24:15.776280 env[1742]: time="2025-09-13T00:24:15.776106812Z" level=info msg="CreateContainer within sandbox \"ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c\"" Sep 13 00:24:15.778660 env[1742]: time="2025-09-13T00:24:15.778580744Z" level=info msg="StartContainer for \"8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c\"" Sep 13 00:24:15.834340 systemd[1]: Started cri-containerd-8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c.scope. Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3205 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.907330 kernel: audit: type=1400 audit(1757723055.886:1007): avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.907438 kernel: audit: type=1300 audit(1757723055.886:1007): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3205 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.907517 kernel: audit: type=1327 audit(1757723055.886:1007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323233383538313162616436643061363833626334396632663437 Sep 13 00:24:15.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323233383538313162616436643061363833626334396632663437 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.925793 kernel: audit: type=1400 audit(1757723055.886:1008): avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.886000 audit: BPF prog-id=133 op=LOAD Sep 13 00:24:15.886000 audit[3394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3205 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323233383538313162616436643061363833626334396632663437 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.894000 audit: BPF prog-id=134 op=LOAD Sep 13 00:24:15.894000 audit[3394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3205 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323233383538313162616436643061363833626334396632663437 Sep 13 00:24:15.906000 audit: BPF prog-id=134 op=UNLOAD Sep 13 00:24:15.906000 audit: BPF prog-id=133 op=UNLOAD Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:15.906000 audit: BPF prog-id=135 op=LOAD Sep 13 00:24:15.906000 audit[3394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3205 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:15.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323233383538313162616436643061363833626334396632663437 Sep 13 00:24:15.957279 env[1742]: time="2025-09-13T00:24:15.957196122Z" level=info msg="StartContainer for \"8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c\" returns successfully" Sep 13 00:24:15.986201 systemd[1]: cri-containerd-8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c.scope: Deactivated successfully. Sep 13 00:24:15.989000 audit: BPF prog-id=135 op=UNLOAD Sep 13 00:24:16.182479 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c-rootfs.mount: Deactivated successfully. Sep 13 00:24:16.384611 env[1742]: time="2025-09-13T00:24:16.384548968Z" level=info msg="shim disconnected" id=8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c Sep 13 00:24:16.385015 env[1742]: time="2025-09-13T00:24:16.384981244Z" level=warning msg="cleaning up after shim disconnected" id=8922385811bad6d0a683bc49f2f47af386610fd55c54b48a3f6874ed495a856c namespace=k8s.io Sep 13 00:24:16.385171 env[1742]: time="2025-09-13T00:24:16.385141504Z" level=info msg="cleaning up dead shim" Sep 13 00:24:16.398317 env[1742]: time="2025-09-13T00:24:16.398258585Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:24:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3432 runtime=io.containerd.runc.v2\n" Sep 13 00:24:16.458421 env[1742]: time="2025-09-13T00:24:16.457596548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 13 00:24:17.242120 kubelet[2740]: E0913 00:24:17.242042 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:19.241979 kubelet[2740]: E0913 00:24:19.241900 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:21.153994 env[1742]: time="2025-09-13T00:24:21.153913392Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:21.158396 env[1742]: time="2025-09-13T00:24:21.158344211Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:21.161721 env[1742]: time="2025-09-13T00:24:21.161658784Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:21.165226 env[1742]: time="2025-09-13T00:24:21.165175453Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:21.166372 env[1742]: time="2025-09-13T00:24:21.166326739Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 13 00:24:21.172230 env[1742]: time="2025-09-13T00:24:21.172154740Z" level=info msg="CreateContainer within sandbox \"ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 13 00:24:21.200506 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3589452596.mount: Deactivated successfully. Sep 13 00:24:21.210383 env[1742]: time="2025-09-13T00:24:21.210299918Z" level=info msg="CreateContainer within sandbox \"ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382\"" Sep 13 00:24:21.212861 env[1742]: time="2025-09-13T00:24:21.211361419Z" level=info msg="StartContainer for \"8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382\"" Sep 13 00:24:21.242173 kubelet[2740]: E0913 00:24:21.242065 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:21.260864 systemd[1]: Started cri-containerd-8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382.scope. Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.321665 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 13 00:24:21.321773 kernel: audit: type=1400 audit(1757723061.318:1014): avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3205 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:21.341251 kernel: audit: type=1300 audit(1757723061.318:1014): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3205 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:21.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863336430336639616663343730646565323632383836363934613663 Sep 13 00:24:21.352199 kernel: audit: type=1327 audit(1757723061.318:1014): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863336430336639616663343730646565323632383836363934613663 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.360007 kernel: audit: type=1400 audit(1757723061.318:1015): avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.377656 kernel: audit: type=1400 audit(1757723061.318:1015): avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.378032 kernel: audit: type=1400 audit(1757723061.318:1015): avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.386353 kernel: audit: type=1400 audit(1757723061.318:1015): avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.397845 kernel: audit: type=1400 audit(1757723061.318:1015): avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.405812 kernel: audit: type=1400 audit(1757723061.318:1015): avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.413833 kernel: audit: type=1400 audit(1757723061.318:1015): avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.318000 audit: BPF prog-id=136 op=LOAD Sep 13 00:24:21.318000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3205 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:21.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863336430336639616663343730646565323632383836363934613663 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.320000 audit: BPF prog-id=137 op=LOAD Sep 13 00:24:21.320000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3205 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:21.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863336430336639616663343730646565323632383836363934613663 Sep 13 00:24:21.328000 audit: BPF prog-id=137 op=UNLOAD Sep 13 00:24:21.328000 audit: BPF prog-id=136 op=UNLOAD Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:21.328000 audit: BPF prog-id=138 op=LOAD Sep 13 00:24:21.328000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3205 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:21.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863336430336639616663343730646565323632383836363934613663 Sep 13 00:24:21.423715 env[1742]: time="2025-09-13T00:24:21.423496467Z" level=info msg="StartContainer for \"8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382\" returns successfully" Sep 13 00:24:22.579085 env[1742]: time="2025-09-13T00:24:22.578939525Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 00:24:22.583168 systemd[1]: cri-containerd-8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382.scope: Deactivated successfully. Sep 13 00:24:22.583617 systemd[1]: cri-containerd-8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382.scope: Consumed 1.132s CPU time. Sep 13 00:24:22.589000 audit: BPF prog-id=138 op=UNLOAD Sep 13 00:24:22.609827 kubelet[2740]: I0913 00:24:22.608313 2740 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Sep 13 00:24:22.639336 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382-rootfs.mount: Deactivated successfully. Sep 13 00:24:22.686551 systemd[1]: Created slice kubepods-burstable-pod23546618_dee9_4a8d_9b55_8b6d00f86357.slice. Sep 13 00:24:22.707756 kubelet[2740]: I0913 00:24:22.707699 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b7zpm\" (UniqueName: \"kubernetes.io/projected/23546618-dee9-4a8d-9b55-8b6d00f86357-kube-api-access-b7zpm\") pod \"coredns-7c65d6cfc9-lz88b\" (UID: \"23546618-dee9-4a8d-9b55-8b6d00f86357\") " pod="kube-system/coredns-7c65d6cfc9-lz88b" Sep 13 00:24:22.708023 kubelet[2740]: I0913 00:24:22.707776 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/23546618-dee9-4a8d-9b55-8b6d00f86357-config-volume\") pod \"coredns-7c65d6cfc9-lz88b\" (UID: \"23546618-dee9-4a8d-9b55-8b6d00f86357\") " pod="kube-system/coredns-7c65d6cfc9-lz88b" Sep 13 00:24:22.716098 systemd[1]: Created slice kubepods-besteffort-pode2a814ca_9dba_4638_9ba1_92017b2ca1d6.slice. Sep 13 00:24:22.733415 systemd[1]: Created slice kubepods-besteffort-pod979d2bfc_9a3f_40d7_b66e_e4d30fa4257e.slice. Sep 13 00:24:22.759280 systemd[1]: Created slice kubepods-besteffort-pod6680d8ea_1f08_4608_a26d_959dcacfb8a7.slice. Sep 13 00:24:22.775851 systemd[1]: Created slice kubepods-burstable-pod016d98cc_9cfc_481a_818d_62b978bada49.slice. Sep 13 00:24:22.805232 kubelet[2740]: W0913 00:24:22.805183 2740 reflector.go:561] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-25-123" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-25-123' and this object Sep 13 00:24:22.808226 kubelet[2740]: E0913 00:24:22.805551 2740 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"calico-apiserver-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"calico-apiserver-certs\" is forbidden: User \"system:node:ip-172-31-25-123\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ip-172-31-25-123' and this object" logger="UnhandledError" Sep 13 00:24:22.811244 kubelet[2740]: W0913 00:24:22.811138 2740 reflector.go:561] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-123" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-25-123' and this object Sep 13 00:24:22.811466 kubelet[2740]: E0913 00:24:22.811203 2740 reflector.go:158] "Unhandled Error" err="object-\"calico-apiserver\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-25-123\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ip-172-31-25-123' and this object" logger="UnhandledError" Sep 13 00:24:22.817010 kubelet[2740]: I0913 00:24:22.816941 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e2a814ca-9dba-4638-9ba1-92017b2ca1d6-calico-apiserver-certs\") pod \"calico-apiserver-547d6b8874-xlz4j\" (UID: \"e2a814ca-9dba-4638-9ba1-92017b2ca1d6\") " pod="calico-apiserver/calico-apiserver-547d6b8874-xlz4j" Sep 13 00:24:22.818194 systemd[1]: Created slice kubepods-besteffort-podb023d126_e890_47ca_8ea2_647be5377408.slice. Sep 13 00:24:22.819256 kubelet[2740]: I0913 00:24:22.819214 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9bn8z\" (UniqueName: \"kubernetes.io/projected/979d2bfc-9a3f-40d7-b66e-e4d30fa4257e-kube-api-access-9bn8z\") pod \"calico-kube-controllers-68555b4f5d-4fh4t\" (UID: \"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e\") " pod="calico-system/calico-kube-controllers-68555b4f5d-4fh4t" Sep 13 00:24:22.819474 kubelet[2740]: I0913 00:24:22.819446 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/979d2bfc-9a3f-40d7-b66e-e4d30fa4257e-tigera-ca-bundle\") pod \"calico-kube-controllers-68555b4f5d-4fh4t\" (UID: \"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e\") " pod="calico-system/calico-kube-controllers-68555b4f5d-4fh4t" Sep 13 00:24:22.819660 kubelet[2740]: I0913 00:24:22.819603 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8hlj7\" (UniqueName: \"kubernetes.io/projected/6680d8ea-1f08-4608-a26d-959dcacfb8a7-kube-api-access-8hlj7\") pod \"calico-apiserver-547d6b8874-zxxxp\" (UID: \"6680d8ea-1f08-4608-a26d-959dcacfb8a7\") " pod="calico-apiserver/calico-apiserver-547d6b8874-zxxxp" Sep 13 00:24:22.820245 kubelet[2740]: I0913 00:24:22.820211 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/016d98cc-9cfc-481a-818d-62b978bada49-config-volume\") pod \"coredns-7c65d6cfc9-ths8j\" (UID: \"016d98cc-9cfc-481a-818d-62b978bada49\") " pod="kube-system/coredns-7c65d6cfc9-ths8j" Sep 13 00:24:22.820584 kubelet[2740]: I0913 00:24:22.820552 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qf2zm\" (UniqueName: \"kubernetes.io/projected/016d98cc-9cfc-481a-818d-62b978bada49-kube-api-access-qf2zm\") pod \"coredns-7c65d6cfc9-ths8j\" (UID: \"016d98cc-9cfc-481a-818d-62b978bada49\") " pod="kube-system/coredns-7c65d6cfc9-ths8j" Sep 13 00:24:22.820746 kubelet[2740]: I0913 00:24:22.820718 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wd2jj\" (UniqueName: \"kubernetes.io/projected/e2a814ca-9dba-4638-9ba1-92017b2ca1d6-kube-api-access-wd2jj\") pod \"calico-apiserver-547d6b8874-xlz4j\" (UID: \"e2a814ca-9dba-4638-9ba1-92017b2ca1d6\") " pod="calico-apiserver/calico-apiserver-547d6b8874-xlz4j" Sep 13 00:24:22.820933 kubelet[2740]: I0913 00:24:22.820906 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6680d8ea-1f08-4608-a26d-959dcacfb8a7-calico-apiserver-certs\") pod \"calico-apiserver-547d6b8874-zxxxp\" (UID: \"6680d8ea-1f08-4608-a26d-959dcacfb8a7\") " pod="calico-apiserver/calico-apiserver-547d6b8874-zxxxp" Sep 13 00:24:22.838296 systemd[1]: Created slice kubepods-besteffort-pod00cbf28a_8d0b_40f9_8c22_74f53f1a205f.slice. Sep 13 00:24:22.924053 kubelet[2740]: I0913 00:24:22.923985 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b023d126-e890-47ca-8ea2-647be5377408-whisker-ca-bundle\") pod \"whisker-6f95d74bfd-khjtp\" (UID: \"b023d126-e890-47ca-8ea2-647be5377408\") " pod="calico-system/whisker-6f95d74bfd-khjtp" Sep 13 00:24:22.924324 kubelet[2740]: I0913 00:24:22.924297 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k2gfh\" (UniqueName: \"kubernetes.io/projected/b023d126-e890-47ca-8ea2-647be5377408-kube-api-access-k2gfh\") pod \"whisker-6f95d74bfd-khjtp\" (UID: \"b023d126-e890-47ca-8ea2-647be5377408\") " pod="calico-system/whisker-6f95d74bfd-khjtp" Sep 13 00:24:22.924535 kubelet[2740]: I0913 00:24:22.924490 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/00cbf28a-8d0b-40f9-8c22-74f53f1a205f-goldmane-ca-bundle\") pod \"goldmane-7988f88666-w5ml5\" (UID: \"00cbf28a-8d0b-40f9-8c22-74f53f1a205f\") " pod="calico-system/goldmane-7988f88666-w5ml5" Sep 13 00:24:22.924755 kubelet[2740]: I0913 00:24:22.924705 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/00cbf28a-8d0b-40f9-8c22-74f53f1a205f-goldmane-key-pair\") pod \"goldmane-7988f88666-w5ml5\" (UID: \"00cbf28a-8d0b-40f9-8c22-74f53f1a205f\") " pod="calico-system/goldmane-7988f88666-w5ml5" Sep 13 00:24:22.925019 kubelet[2740]: I0913 00:24:22.924977 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z456f\" (UniqueName: \"kubernetes.io/projected/00cbf28a-8d0b-40f9-8c22-74f53f1a205f-kube-api-access-z456f\") pod \"goldmane-7988f88666-w5ml5\" (UID: \"00cbf28a-8d0b-40f9-8c22-74f53f1a205f\") " pod="calico-system/goldmane-7988f88666-w5ml5" Sep 13 00:24:22.925389 kubelet[2740]: I0913 00:24:22.925360 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b023d126-e890-47ca-8ea2-647be5377408-whisker-backend-key-pair\") pod \"whisker-6f95d74bfd-khjtp\" (UID: \"b023d126-e890-47ca-8ea2-647be5377408\") " pod="calico-system/whisker-6f95d74bfd-khjtp" Sep 13 00:24:22.925758 kubelet[2740]: I0913 00:24:22.925683 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/00cbf28a-8d0b-40f9-8c22-74f53f1a205f-config\") pod \"goldmane-7988f88666-w5ml5\" (UID: \"00cbf28a-8d0b-40f9-8c22-74f53f1a205f\") " pod="calico-system/goldmane-7988f88666-w5ml5" Sep 13 00:24:23.000859 env[1742]: time="2025-09-13T00:24:23.000347282Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lz88b,Uid:23546618-dee9-4a8d-9b55-8b6d00f86357,Namespace:kube-system,Attempt:0,}" Sep 13 00:24:23.053141 env[1742]: time="2025-09-13T00:24:23.052693682Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68555b4f5d-4fh4t,Uid:979d2bfc-9a3f-40d7-b66e-e4d30fa4257e,Namespace:calico-system,Attempt:0,}" Sep 13 00:24:23.083635 env[1742]: time="2025-09-13T00:24:23.083571792Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ths8j,Uid:016d98cc-9cfc-481a-818d-62b978bada49,Namespace:kube-system,Attempt:0,}" Sep 13 00:24:23.138289 env[1742]: time="2025-09-13T00:24:23.137238920Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6f95d74bfd-khjtp,Uid:b023d126-e890-47ca-8ea2-647be5377408,Namespace:calico-system,Attempt:0,}" Sep 13 00:24:23.143727 env[1742]: time="2025-09-13T00:24:23.143569244Z" level=info msg="shim disconnected" id=8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382 Sep 13 00:24:23.143727 env[1742]: time="2025-09-13T00:24:23.143641701Z" level=warning msg="cleaning up after shim disconnected" id=8c3d03f9afc470dee262886694a6c26d53e37d9401aa946a90d4987278f6d382 namespace=k8s.io Sep 13 00:24:23.143727 env[1742]: time="2025-09-13T00:24:23.143664261Z" level=info msg="cleaning up dead shim" Sep 13 00:24:23.154463 env[1742]: time="2025-09-13T00:24:23.154400416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-w5ml5,Uid:00cbf28a-8d0b-40f9-8c22-74f53f1a205f,Namespace:calico-system,Attempt:0,}" Sep 13 00:24:23.165010 env[1742]: time="2025-09-13T00:24:23.164903862Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:24:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3505 runtime=io.containerd.runc.v2\n" Sep 13 00:24:23.253288 systemd[1]: Created slice kubepods-besteffort-podc89c8e1b_1e30_44db_b7f5_0c71a1572267.slice. Sep 13 00:24:23.278841 env[1742]: time="2025-09-13T00:24:23.278769540Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-r7dh9,Uid:c89c8e1b-1e30-44db-b7f5-0c71a1572267,Namespace:calico-system,Attempt:0,}" Sep 13 00:24:23.496667 env[1742]: time="2025-09-13T00:24:23.496595802Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 13 00:24:23.608851 env[1742]: time="2025-09-13T00:24:23.608757959Z" level=error msg="Failed to destroy network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.610471 env[1742]: time="2025-09-13T00:24:23.610405079Z" level=error msg="encountered an error cleaning up failed sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.610762 env[1742]: time="2025-09-13T00:24:23.610710292Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6f95d74bfd-khjtp,Uid:b023d126-e890-47ca-8ea2-647be5377408,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.611682 kubelet[2740]: E0913 00:24:23.611177 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.611682 kubelet[2740]: E0913 00:24:23.611268 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6f95d74bfd-khjtp" Sep 13 00:24:23.611682 kubelet[2740]: E0913 00:24:23.611301 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6f95d74bfd-khjtp" Sep 13 00:24:23.613182 kubelet[2740]: E0913 00:24:23.611361 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6f95d74bfd-khjtp_calico-system(b023d126-e890-47ca-8ea2-647be5377408)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6f95d74bfd-khjtp_calico-system(b023d126-e890-47ca-8ea2-647be5377408)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6f95d74bfd-khjtp" podUID="b023d126-e890-47ca-8ea2-647be5377408" Sep 13 00:24:23.617469 env[1742]: time="2025-09-13T00:24:23.617392137Z" level=error msg="Failed to destroy network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.618430 env[1742]: time="2025-09-13T00:24:23.618370092Z" level=error msg="encountered an error cleaning up failed sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.618680 env[1742]: time="2025-09-13T00:24:23.618615652Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68555b4f5d-4fh4t,Uid:979d2bfc-9a3f-40d7-b66e-e4d30fa4257e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.619298 kubelet[2740]: E0913 00:24:23.619129 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.619298 kubelet[2740]: E0913 00:24:23.619207 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-68555b4f5d-4fh4t" Sep 13 00:24:23.619940 kubelet[2740]: E0913 00:24:23.619240 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-68555b4f5d-4fh4t" Sep 13 00:24:23.619940 kubelet[2740]: E0913 00:24:23.619571 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-68555b4f5d-4fh4t_calico-system(979d2bfc-9a3f-40d7-b66e-e4d30fa4257e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-68555b4f5d-4fh4t_calico-system(979d2bfc-9a3f-40d7-b66e-e4d30fa4257e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-68555b4f5d-4fh4t" podUID="979d2bfc-9a3f-40d7-b66e-e4d30fa4257e" Sep 13 00:24:23.622614 env[1742]: time="2025-09-13T00:24:23.622544547Z" level=error msg="Failed to destroy network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.623566 env[1742]: time="2025-09-13T00:24:23.623502270Z" level=error msg="encountered an error cleaning up failed sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.624255 env[1742]: time="2025-09-13T00:24:23.624178588Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lz88b,Uid:23546618-dee9-4a8d-9b55-8b6d00f86357,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.624908 kubelet[2740]: E0913 00:24:23.624642 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.624908 kubelet[2740]: E0913 00:24:23.624716 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-lz88b" Sep 13 00:24:23.624908 kubelet[2740]: E0913 00:24:23.624752 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-lz88b" Sep 13 00:24:23.625227 kubelet[2740]: E0913 00:24:23.624814 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-lz88b_kube-system(23546618-dee9-4a8d-9b55-8b6d00f86357)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-lz88b_kube-system(23546618-dee9-4a8d-9b55-8b6d00f86357)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-lz88b" podUID="23546618-dee9-4a8d-9b55-8b6d00f86357" Sep 13 00:24:23.675002 env[1742]: time="2025-09-13T00:24:23.674895015Z" level=error msg="Failed to destroy network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.679162 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0-shm.mount: Deactivated successfully. Sep 13 00:24:23.685376 env[1742]: time="2025-09-13T00:24:23.681045348Z" level=error msg="encountered an error cleaning up failed sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.685376 env[1742]: time="2025-09-13T00:24:23.681152437Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ths8j,Uid:016d98cc-9cfc-481a-818d-62b978bada49,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.685632 kubelet[2740]: E0913 00:24:23.684705 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.685632 kubelet[2740]: E0913 00:24:23.684780 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-ths8j" Sep 13 00:24:23.685632 kubelet[2740]: E0913 00:24:23.684816 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-ths8j" Sep 13 00:24:23.685861 kubelet[2740]: E0913 00:24:23.684982 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-ths8j_kube-system(016d98cc-9cfc-481a-818d-62b978bada49)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-ths8j_kube-system(016d98cc-9cfc-481a-818d-62b978bada49)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-ths8j" podUID="016d98cc-9cfc-481a-818d-62b978bada49" Sep 13 00:24:23.691258 env[1742]: time="2025-09-13T00:24:23.691180257Z" level=error msg="Failed to destroy network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.695476 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4-shm.mount: Deactivated successfully. Sep 13 00:24:23.697750 env[1742]: time="2025-09-13T00:24:23.697678175Z" level=error msg="encountered an error cleaning up failed sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.698136 env[1742]: time="2025-09-13T00:24:23.698074649Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-w5ml5,Uid:00cbf28a-8d0b-40f9-8c22-74f53f1a205f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.699543 kubelet[2740]: E0913 00:24:23.698699 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.699543 kubelet[2740]: E0913 00:24:23.698798 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-w5ml5" Sep 13 00:24:23.699543 kubelet[2740]: E0913 00:24:23.698833 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-7988f88666-w5ml5" Sep 13 00:24:23.699936 kubelet[2740]: E0913 00:24:23.698941 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-7988f88666-w5ml5_calico-system(00cbf28a-8d0b-40f9-8c22-74f53f1a205f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-7988f88666-w5ml5_calico-system(00cbf28a-8d0b-40f9-8c22-74f53f1a205f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-w5ml5" podUID="00cbf28a-8d0b-40f9-8c22-74f53f1a205f" Sep 13 00:24:23.729077 env[1742]: time="2025-09-13T00:24:23.728973268Z" level=error msg="Failed to destroy network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.733205 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5-shm.mount: Deactivated successfully. Sep 13 00:24:23.735713 env[1742]: time="2025-09-13T00:24:23.735641229Z" level=error msg="encountered an error cleaning up failed sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.736092 env[1742]: time="2025-09-13T00:24:23.735937370Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-r7dh9,Uid:c89c8e1b-1e30-44db-b7f5-0c71a1572267,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.737376 kubelet[2740]: E0913 00:24:23.736497 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:23.737376 kubelet[2740]: E0913 00:24:23.736647 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-r7dh9" Sep 13 00:24:23.737376 kubelet[2740]: E0913 00:24:23.736704 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-r7dh9" Sep 13 00:24:23.737858 kubelet[2740]: E0913 00:24:23.736812 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-r7dh9_calico-system(c89c8e1b-1e30-44db-b7f5-0c71a1572267)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-r7dh9_calico-system(c89c8e1b-1e30-44db-b7f5-0c71a1572267)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:23.947094 kubelet[2740]: E0913 00:24:23.946937 2740 projected.go:288] Couldn't get configMap calico-apiserver/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Sep 13 00:24:23.947321 kubelet[2740]: E0913 00:24:23.947294 2740 projected.go:194] Error preparing data for projected volume kube-api-access-8hlj7 for pod calico-apiserver/calico-apiserver-547d6b8874-zxxxp: failed to sync configmap cache: timed out waiting for the condition Sep 13 00:24:23.947528 kubelet[2740]: E0913 00:24:23.947504 2740 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/6680d8ea-1f08-4608-a26d-959dcacfb8a7-kube-api-access-8hlj7 podName:6680d8ea-1f08-4608-a26d-959dcacfb8a7 nodeName:}" failed. No retries permitted until 2025-09-13 00:24:24.447470089 +0000 UTC m=+46.404768874 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-8hlj7" (UniqueName: "kubernetes.io/projected/6680d8ea-1f08-4608-a26d-959dcacfb8a7-kube-api-access-8hlj7") pod "calico-apiserver-547d6b8874-zxxxp" (UID: "6680d8ea-1f08-4608-a26d-959dcacfb8a7") : failed to sync configmap cache: timed out waiting for the condition Sep 13 00:24:23.967103 kubelet[2740]: E0913 00:24:23.967030 2740 projected.go:288] Couldn't get configMap calico-apiserver/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Sep 13 00:24:23.967103 kubelet[2740]: E0913 00:24:23.967091 2740 projected.go:194] Error preparing data for projected volume kube-api-access-wd2jj for pod calico-apiserver/calico-apiserver-547d6b8874-xlz4j: failed to sync configmap cache: timed out waiting for the condition Sep 13 00:24:23.967339 kubelet[2740]: E0913 00:24:23.967183 2740 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/e2a814ca-9dba-4638-9ba1-92017b2ca1d6-kube-api-access-wd2jj podName:e2a814ca-9dba-4638-9ba1-92017b2ca1d6 nodeName:}" failed. No retries permitted until 2025-09-13 00:24:24.467155606 +0000 UTC m=+46.424454391 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-wd2jj" (UniqueName: "kubernetes.io/projected/e2a814ca-9dba-4638-9ba1-92017b2ca1d6-kube-api-access-wd2jj") pod "calico-apiserver-547d6b8874-xlz4j" (UID: "e2a814ca-9dba-4638-9ba1-92017b2ca1d6") : failed to sync configmap cache: timed out waiting for the condition Sep 13 00:24:24.484121 kubelet[2740]: I0913 00:24:24.483808 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:24:24.486513 env[1742]: time="2025-09-13T00:24:24.486319329Z" level=info msg="StopPodSandbox for \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\"" Sep 13 00:24:24.487768 kubelet[2740]: I0913 00:24:24.487726 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:24.489329 env[1742]: time="2025-09-13T00:24:24.489278392Z" level=info msg="StopPodSandbox for \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\"" Sep 13 00:24:24.492290 kubelet[2740]: I0913 00:24:24.491457 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:24.493060 env[1742]: time="2025-09-13T00:24:24.492987887Z" level=info msg="StopPodSandbox for \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\"" Sep 13 00:24:24.496622 kubelet[2740]: I0913 00:24:24.495188 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:24:24.496832 env[1742]: time="2025-09-13T00:24:24.496066244Z" level=info msg="StopPodSandbox for \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\"" Sep 13 00:24:24.501037 kubelet[2740]: I0913 00:24:24.500351 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:24:24.502143 env[1742]: time="2025-09-13T00:24:24.502074960Z" level=info msg="StopPodSandbox for \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\"" Sep 13 00:24:24.508062 kubelet[2740]: I0913 00:24:24.507998 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:24:24.509365 env[1742]: time="2025-09-13T00:24:24.509294303Z" level=info msg="StopPodSandbox for \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\"" Sep 13 00:24:24.572265 env[1742]: time="2025-09-13T00:24:24.572205528Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-zxxxp,Uid:6680d8ea-1f08-4608-a26d-959dcacfb8a7,Namespace:calico-apiserver,Attempt:0,}" Sep 13 00:24:24.668760 env[1742]: time="2025-09-13T00:24:24.668659527Z" level=error msg="StopPodSandbox for \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\" failed" error="failed to destroy network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.669382 kubelet[2740]: E0913 00:24:24.669023 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:24.669382 kubelet[2740]: E0913 00:24:24.669099 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8"} Sep 13 00:24:24.669382 kubelet[2740]: E0913 00:24:24.669180 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b023d126-e890-47ca-8ea2-647be5377408\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:24.669382 kubelet[2740]: E0913 00:24:24.669228 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b023d126-e890-47ca-8ea2-647be5377408\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6f95d74bfd-khjtp" podUID="b023d126-e890-47ca-8ea2-647be5377408" Sep 13 00:24:24.714473 env[1742]: time="2025-09-13T00:24:24.714352635Z" level=error msg="StopPodSandbox for \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\" failed" error="failed to destroy network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.715200 kubelet[2740]: E0913 00:24:24.714942 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:24:24.715200 kubelet[2740]: E0913 00:24:24.715039 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5"} Sep 13 00:24:24.715200 kubelet[2740]: E0913 00:24:24.715093 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c89c8e1b-1e30-44db-b7f5-0c71a1572267\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:24.715200 kubelet[2740]: E0913 00:24:24.715136 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c89c8e1b-1e30-44db-b7f5-0c71a1572267\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-r7dh9" podUID="c89c8e1b-1e30-44db-b7f5-0c71a1572267" Sep 13 00:24:24.721166 env[1742]: time="2025-09-13T00:24:24.721061741Z" level=error msg="StopPodSandbox for \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\" failed" error="failed to destroy network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.721792 kubelet[2740]: E0913 00:24:24.721541 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:24:24.721792 kubelet[2740]: E0913 00:24:24.721614 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4"} Sep 13 00:24:24.721792 kubelet[2740]: E0913 00:24:24.721670 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"00cbf28a-8d0b-40f9-8c22-74f53f1a205f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:24.721792 kubelet[2740]: E0913 00:24:24.721732 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"00cbf28a-8d0b-40f9-8c22-74f53f1a205f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-7988f88666-w5ml5" podUID="00cbf28a-8d0b-40f9-8c22-74f53f1a205f" Sep 13 00:24:24.740869 env[1742]: time="2025-09-13T00:24:24.740701206Z" level=error msg="StopPodSandbox for \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\" failed" error="failed to destroy network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.743492 kubelet[2740]: E0913 00:24:24.743413 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:24:24.743492 kubelet[2740]: E0913 00:24:24.743498 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0"} Sep 13 00:24:24.743765 kubelet[2740]: E0913 00:24:24.743623 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"016d98cc-9cfc-481a-818d-62b978bada49\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:24.743765 kubelet[2740]: E0913 00:24:24.743709 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"016d98cc-9cfc-481a-818d-62b978bada49\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-ths8j" podUID="016d98cc-9cfc-481a-818d-62b978bada49" Sep 13 00:24:24.773243 env[1742]: time="2025-09-13T00:24:24.773166604Z" level=error msg="StopPodSandbox for \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\" failed" error="failed to destroy network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.774079 kubelet[2740]: E0913 00:24:24.773791 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:24.774079 kubelet[2740]: E0913 00:24:24.773885 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8"} Sep 13 00:24:24.774079 kubelet[2740]: E0913 00:24:24.773940 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"23546618-dee9-4a8d-9b55-8b6d00f86357\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:24.774079 kubelet[2740]: E0913 00:24:24.774027 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"23546618-dee9-4a8d-9b55-8b6d00f86357\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-lz88b" podUID="23546618-dee9-4a8d-9b55-8b6d00f86357" Sep 13 00:24:24.782755 env[1742]: time="2025-09-13T00:24:24.782659823Z" level=error msg="StopPodSandbox for \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\" failed" error="failed to destroy network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.783491 kubelet[2740]: E0913 00:24:24.783270 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:24:24.783491 kubelet[2740]: E0913 00:24:24.783349 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8"} Sep 13 00:24:24.783491 kubelet[2740]: E0913 00:24:24.783403 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:24.783491 kubelet[2740]: E0913 00:24:24.783443 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-68555b4f5d-4fh4t" podUID="979d2bfc-9a3f-40d7-b66e-e4d30fa4257e" Sep 13 00:24:24.828616 env[1742]: time="2025-09-13T00:24:24.828536990Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-xlz4j,Uid:e2a814ca-9dba-4638-9ba1-92017b2ca1d6,Namespace:calico-apiserver,Attempt:0,}" Sep 13 00:24:24.913321 env[1742]: time="2025-09-13T00:24:24.913176287Z" level=error msg="Failed to destroy network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.918702 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4-shm.mount: Deactivated successfully. Sep 13 00:24:24.925235 env[1742]: time="2025-09-13T00:24:24.922595406Z" level=error msg="encountered an error cleaning up failed sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.925235 env[1742]: time="2025-09-13T00:24:24.922786664Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-zxxxp,Uid:6680d8ea-1f08-4608-a26d-959dcacfb8a7,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.925653 kubelet[2740]: E0913 00:24:24.923309 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:24.925653 kubelet[2740]: E0913 00:24:24.923380 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-547d6b8874-zxxxp" Sep 13 00:24:24.925653 kubelet[2740]: E0913 00:24:24.923470 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-547d6b8874-zxxxp" Sep 13 00:24:24.925902 kubelet[2740]: E0913 00:24:24.923531 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-547d6b8874-zxxxp_calico-apiserver(6680d8ea-1f08-4608-a26d-959dcacfb8a7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-547d6b8874-zxxxp_calico-apiserver(6680d8ea-1f08-4608-a26d-959dcacfb8a7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-547d6b8874-zxxxp" podUID="6680d8ea-1f08-4608-a26d-959dcacfb8a7" Sep 13 00:24:25.026300 env[1742]: time="2025-09-13T00:24:25.020057051Z" level=error msg="Failed to destroy network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:25.024942 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b-shm.mount: Deactivated successfully. Sep 13 00:24:25.026918 env[1742]: time="2025-09-13T00:24:25.026848801Z" level=error msg="encountered an error cleaning up failed sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:25.027353 env[1742]: time="2025-09-13T00:24:25.027297763Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-xlz4j,Uid:e2a814ca-9dba-4638-9ba1-92017b2ca1d6,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:25.030923 kubelet[2740]: E0913 00:24:25.027995 2740 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:25.030923 kubelet[2740]: E0913 00:24:25.028099 2740 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-547d6b8874-xlz4j" Sep 13 00:24:25.030923 kubelet[2740]: E0913 00:24:25.028135 2740 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-547d6b8874-xlz4j" Sep 13 00:24:25.031291 kubelet[2740]: E0913 00:24:25.030366 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-547d6b8874-xlz4j_calico-apiserver(e2a814ca-9dba-4638-9ba1-92017b2ca1d6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-547d6b8874-xlz4j_calico-apiserver(e2a814ca-9dba-4638-9ba1-92017b2ca1d6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-547d6b8874-xlz4j" podUID="e2a814ca-9dba-4638-9ba1-92017b2ca1d6" Sep 13 00:24:25.514620 kubelet[2740]: I0913 00:24:25.514572 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:24:25.517244 env[1742]: time="2025-09-13T00:24:25.517185944Z" level=info msg="StopPodSandbox for \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\"" Sep 13 00:24:25.522295 kubelet[2740]: I0913 00:24:25.522220 2740 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:24:25.526895 env[1742]: time="2025-09-13T00:24:25.526772125Z" level=info msg="StopPodSandbox for \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\"" Sep 13 00:24:25.607748 env[1742]: time="2025-09-13T00:24:25.607622022Z" level=error msg="StopPodSandbox for \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\" failed" error="failed to destroy network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:25.608522 kubelet[2740]: E0913 00:24:25.608399 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:24:25.608658 kubelet[2740]: E0913 00:24:25.608521 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4"} Sep 13 00:24:25.608658 kubelet[2740]: E0913 00:24:25.608607 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6680d8ea-1f08-4608-a26d-959dcacfb8a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:25.608823 kubelet[2740]: E0913 00:24:25.608653 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6680d8ea-1f08-4608-a26d-959dcacfb8a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-547d6b8874-zxxxp" podUID="6680d8ea-1f08-4608-a26d-959dcacfb8a7" Sep 13 00:24:25.623793 env[1742]: time="2025-09-13T00:24:25.623717060Z" level=error msg="StopPodSandbox for \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\" failed" error="failed to destroy network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 00:24:25.624636 kubelet[2740]: E0913 00:24:25.624556 2740 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:24:25.624888 kubelet[2740]: E0913 00:24:25.624675 2740 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b"} Sep 13 00:24:25.624888 kubelet[2740]: E0913 00:24:25.624761 2740 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e2a814ca-9dba-4638-9ba1-92017b2ca1d6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 00:24:25.624888 kubelet[2740]: E0913 00:24:25.624805 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e2a814ca-9dba-4638-9ba1-92017b2ca1d6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-547d6b8874-xlz4j" podUID="e2a814ca-9dba-4638-9ba1-92017b2ca1d6" Sep 13 00:24:33.026786 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1917077277.mount: Deactivated successfully. Sep 13 00:24:33.099716 env[1742]: time="2025-09-13T00:24:33.099638776Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:33.105519 env[1742]: time="2025-09-13T00:24:33.105463007Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:33.109403 env[1742]: time="2025-09-13T00:24:33.109353320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:33.113049 env[1742]: time="2025-09-13T00:24:33.113000198Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:33.114779 env[1742]: time="2025-09-13T00:24:33.114678802Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 13 00:24:33.165712 env[1742]: time="2025-09-13T00:24:33.165610328Z" level=info msg="CreateContainer within sandbox \"ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 13 00:24:33.197894 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2246035573.mount: Deactivated successfully. Sep 13 00:24:33.206814 env[1742]: time="2025-09-13T00:24:33.206727050Z" level=info msg="CreateContainer within sandbox \"ae7afef1683a2a106e2754d443c08434e9ce4bcb1cc9c14d2f4bf88ae4849c65\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713\"" Sep 13 00:24:33.208278 env[1742]: time="2025-09-13T00:24:33.208210555Z" level=info msg="StartContainer for \"16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713\"" Sep 13 00:24:33.244982 systemd[1]: Started cri-containerd-16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713.scope. Sep 13 00:24:33.257000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:33.260275 kernel: kauditd_printk_skb: 34 callbacks suppressed Sep 13 00:24:33.260422 kernel: audit: type=1400 audit(1757723073.257:1021): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:33.257000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40019159b0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:33.283530 kernel: audit: type=1300 audit(1757723073.257:1021): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40019159b0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:33.257000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:33.298765 kernel: audit: type=1327 audit(1757723073.257:1021): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:33.257000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:33.308711 kernel: audit: type=1400 audit(1757723073.257:1022): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:33.257000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40015b2080 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:33.322298 kernel: audit: type=1300 audit(1757723073.257:1022): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40015b2080 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:33.257000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:33.336277 kernel: audit: type=1327 audit(1757723073.257:1022): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3205 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:33.370599 kernel: audit: type=1400 audit(1757723073.348:1023): avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.370819 kernel: audit: type=1300 audit(1757723073.348:1023): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3205 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:33.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136653861393738626538323531376533356163353038623766383632 Sep 13 00:24:33.383146 kernel: audit: type=1327 audit(1757723073.348:1023): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136653861393738626538323531376533356163353038623766383632 Sep 13 00:24:33.384804 kernel: audit: type=1400 audit(1757723073.348:1024): avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit: BPF prog-id=139 op=LOAD Sep 13 00:24:33.348000 audit[3870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3205 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:33.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136653861393738626538323531376533356163353038623766383632 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit: BPF prog-id=140 op=LOAD Sep 13 00:24:33.348000 audit[3870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3205 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:33.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136653861393738626538323531376533356163353038623766383632 Sep 13 00:24:33.348000 audit: BPF prog-id=140 op=UNLOAD Sep 13 00:24:33.348000 audit: BPF prog-id=139 op=UNLOAD Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:33.348000 audit: BPF prog-id=141 op=LOAD Sep 13 00:24:33.348000 audit[3870]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3205 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:33.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136653861393738626538323531376533356163353038623766383632 Sep 13 00:24:33.428903 env[1742]: time="2025-09-13T00:24:33.428837788Z" level=info msg="StartContainer for \"16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713\" returns successfully" Sep 13 00:24:33.857625 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 13 00:24:33.857848 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 13 00:24:34.096255 kubelet[2740]: I0913 00:24:34.096123 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-8ht24" podStartSLOduration=2.41469088 podStartE2EDuration="24.096071377s" podCreationTimestamp="2025-09-13 00:24:10 +0000 UTC" firstStartedPulling="2025-09-13 00:24:11.435283319 +0000 UTC m=+33.392582104" lastFinishedPulling="2025-09-13 00:24:33.116663828 +0000 UTC m=+55.073962601" observedRunningTime="2025-09-13 00:24:33.60682085 +0000 UTC m=+55.564119635" watchObservedRunningTime="2025-09-13 00:24:34.096071377 +0000 UTC m=+56.053370270" Sep 13 00:24:34.098343 env[1742]: time="2025-09-13T00:24:34.098287790Z" level=info msg="StopPodSandbox for \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\"" Sep 13 00:24:34.101000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:34.101000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=400d6e8e40 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:24:34.101000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:24:34.101000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:34.101000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=400d6e8ea0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:24:34.101000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:24:34.122000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:34.122000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400d7c1860 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:24:34.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:24:34.135000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:34.135000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400e1827e0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:24:34.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:24:34.391000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:34.391000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6d a1=400f6615c0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:24:34.391000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:24:34.393000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:34.393000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=400e8d1ad0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:24:34.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.284 [INFO][3938] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.285 [INFO][3938] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" iface="eth0" netns="/var/run/netns/cni-016e7fc8-e823-9e54-9dc2-21a201887b2b" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.285 [INFO][3938] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" iface="eth0" netns="/var/run/netns/cni-016e7fc8-e823-9e54-9dc2-21a201887b2b" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.287 [INFO][3938] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" iface="eth0" netns="/var/run/netns/cni-016e7fc8-e823-9e54-9dc2-21a201887b2b" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.287 [INFO][3938] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.287 [INFO][3938] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.395 [INFO][3953] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.396 [INFO][3953] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.396 [INFO][3953] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.422 [WARNING][3953] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.422 [INFO][3953] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.425 [INFO][3953] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:34.435852 env[1742]: 2025-09-13 00:24:34.431 [INFO][3938] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:34.441758 systemd[1]: run-netns-cni\x2d016e7fc8\x2de823\x2d9e54\x2d9dc2\x2d21a201887b2b.mount: Deactivated successfully. Sep 13 00:24:34.442807 env[1742]: time="2025-09-13T00:24:34.442749362Z" level=info msg="TearDown network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\" successfully" Sep 13 00:24:34.443211 env[1742]: time="2025-09-13T00:24:34.442928128Z" level=info msg="StopPodSandbox for \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\" returns successfully" Sep 13 00:24:34.543395 kubelet[2740]: I0913 00:24:34.543340 2740 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-k2gfh\" (UniqueName: \"kubernetes.io/projected/b023d126-e890-47ca-8ea2-647be5377408-kube-api-access-k2gfh\") pod \"b023d126-e890-47ca-8ea2-647be5377408\" (UID: \"b023d126-e890-47ca-8ea2-647be5377408\") " Sep 13 00:24:34.543608 kubelet[2740]: I0913 00:24:34.543410 2740 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b023d126-e890-47ca-8ea2-647be5377408-whisker-backend-key-pair\") pod \"b023d126-e890-47ca-8ea2-647be5377408\" (UID: \"b023d126-e890-47ca-8ea2-647be5377408\") " Sep 13 00:24:34.543608 kubelet[2740]: I0913 00:24:34.543475 2740 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b023d126-e890-47ca-8ea2-647be5377408-whisker-ca-bundle\") pod \"b023d126-e890-47ca-8ea2-647be5377408\" (UID: \"b023d126-e890-47ca-8ea2-647be5377408\") " Sep 13 00:24:34.544319 kubelet[2740]: I0913 00:24:34.544267 2740 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b023d126-e890-47ca-8ea2-647be5377408-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "b023d126-e890-47ca-8ea2-647be5377408" (UID: "b023d126-e890-47ca-8ea2-647be5377408"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Sep 13 00:24:34.555893 kubelet[2740]: I0913 00:24:34.555832 2740 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b023d126-e890-47ca-8ea2-647be5377408-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "b023d126-e890-47ca-8ea2-647be5377408" (UID: "b023d126-e890-47ca-8ea2-647be5377408"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Sep 13 00:24:34.560663 systemd[1]: var-lib-kubelet-pods-b023d126\x2de890\x2d47ca\x2d8ea2\x2d647be5377408-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dk2gfh.mount: Deactivated successfully. Sep 13 00:24:34.560875 systemd[1]: var-lib-kubelet-pods-b023d126\x2de890\x2d47ca\x2d8ea2\x2d647be5377408-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 13 00:24:34.561501 kubelet[2740]: I0913 00:24:34.561453 2740 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b023d126-e890-47ca-8ea2-647be5377408-kube-api-access-k2gfh" (OuterVolumeSpecName: "kube-api-access-k2gfh") pod "b023d126-e890-47ca-8ea2-647be5377408" (UID: "b023d126-e890-47ca-8ea2-647be5377408"). InnerVolumeSpecName "kube-api-access-k2gfh". PluginName "kubernetes.io/projected", VolumeGidValue "" Sep 13 00:24:34.599623 systemd[1]: Removed slice kubepods-besteffort-podb023d126_e890_47ca_8ea2_647be5377408.slice. Sep 13 00:24:34.648775 kubelet[2740]: I0913 00:24:34.648618 2740 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b023d126-e890-47ca-8ea2-647be5377408-whisker-ca-bundle\") on node \"ip-172-31-25-123\" DevicePath \"\"" Sep 13 00:24:34.648775 kubelet[2740]: I0913 00:24:34.648708 2740 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-k2gfh\" (UniqueName: \"kubernetes.io/projected/b023d126-e890-47ca-8ea2-647be5377408-kube-api-access-k2gfh\") on node \"ip-172-31-25-123\" DevicePath \"\"" Sep 13 00:24:34.648775 kubelet[2740]: I0913 00:24:34.648750 2740 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b023d126-e890-47ca-8ea2-647be5377408-whisker-backend-key-pair\") on node \"ip-172-31-25-123\" DevicePath \"\"" Sep 13 00:24:34.758714 systemd[1]: Created slice kubepods-besteffort-podd745e9da_6e1c_43d6_8333_ec07d344faec.slice. Sep 13 00:24:34.853015 kubelet[2740]: I0913 00:24:34.852925 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d745e9da-6e1c-43d6-8333-ec07d344faec-whisker-backend-key-pair\") pod \"whisker-6c8cfb57d9-4528b\" (UID: \"d745e9da-6e1c-43d6-8333-ec07d344faec\") " pod="calico-system/whisker-6c8cfb57d9-4528b" Sep 13 00:24:34.853236 kubelet[2740]: I0913 00:24:34.853024 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d745e9da-6e1c-43d6-8333-ec07d344faec-whisker-ca-bundle\") pod \"whisker-6c8cfb57d9-4528b\" (UID: \"d745e9da-6e1c-43d6-8333-ec07d344faec\") " pod="calico-system/whisker-6c8cfb57d9-4528b" Sep 13 00:24:34.853236 kubelet[2740]: I0913 00:24:34.853067 2740 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-klcgk\" (UniqueName: \"kubernetes.io/projected/d745e9da-6e1c-43d6-8333-ec07d344faec-kube-api-access-klcgk\") pod \"whisker-6c8cfb57d9-4528b\" (UID: \"d745e9da-6e1c-43d6-8333-ec07d344faec\") " pod="calico-system/whisker-6c8cfb57d9-4528b" Sep 13 00:24:35.035745 systemd[1]: run-containerd-runc-k8s.io-16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713-runc.1WLIQu.mount: Deactivated successfully. Sep 13 00:24:35.065942 env[1742]: time="2025-09-13T00:24:35.065656398Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6c8cfb57d9-4528b,Uid:d745e9da-6e1c-43d6-8333-ec07d344faec,Namespace:calico-system,Attempt:0,}" Sep 13 00:24:35.285091 (udev-worker)[3922]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:24:35.289510 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:24:35.289566 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicd2fb1b9933: link becomes ready Sep 13 00:24:35.287306 systemd-networkd[1463]: calicd2fb1b9933: Link UP Sep 13 00:24:35.291936 systemd-networkd[1463]: calicd2fb1b9933: Gained carrier Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.137 [INFO][3996] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.161 [INFO][3996] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0 whisker-6c8cfb57d9- calico-system d745e9da-6e1c-43d6-8333-ec07d344faec 952 0 2025-09-13 00:24:34 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6c8cfb57d9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-25-123 whisker-6c8cfb57d9-4528b eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calicd2fb1b9933 [] [] }} ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.161 [INFO][3996] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.208 [INFO][4008] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" HandleID="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Workload="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.209 [INFO][4008] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" HandleID="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Workload="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d38f0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-123", "pod":"whisker-6c8cfb57d9-4528b", "timestamp":"2025-09-13 00:24:35.208930992 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.209 [INFO][4008] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.210 [INFO][4008] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.210 [INFO][4008] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.224 [INFO][4008] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.232 [INFO][4008] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.239 [INFO][4008] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.242 [INFO][4008] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.246 [INFO][4008] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.246 [INFO][4008] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.248 [INFO][4008] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.255 [INFO][4008] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.265 [INFO][4008] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.193/26] block=192.168.28.192/26 handle="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.266 [INFO][4008] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.193/26] handle="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" host="ip-172-31-25-123" Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.266 [INFO][4008] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:35.324750 env[1742]: 2025-09-13 00:24:35.266 [INFO][4008] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.193/26] IPv6=[] ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" HandleID="k8s-pod-network.ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Workload="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" Sep 13 00:24:35.326100 env[1742]: 2025-09-13 00:24:35.269 [INFO][3996] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0", GenerateName:"whisker-6c8cfb57d9-", Namespace:"calico-system", SelfLink:"", UID:"d745e9da-6e1c-43d6-8333-ec07d344faec", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6c8cfb57d9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"whisker-6c8cfb57d9-4528b", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.28.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicd2fb1b9933", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:35.326100 env[1742]: 2025-09-13 00:24:35.270 [INFO][3996] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.193/32] ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" Sep 13 00:24:35.326100 env[1742]: 2025-09-13 00:24:35.270 [INFO][3996] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicd2fb1b9933 ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" Sep 13 00:24:35.326100 env[1742]: 2025-09-13 00:24:35.293 [INFO][3996] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" Sep 13 00:24:35.326100 env[1742]: 2025-09-13 00:24:35.297 [INFO][3996] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0", GenerateName:"whisker-6c8cfb57d9-", Namespace:"calico-system", SelfLink:"", UID:"d745e9da-6e1c-43d6-8333-ec07d344faec", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6c8cfb57d9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e", Pod:"whisker-6c8cfb57d9-4528b", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.28.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicd2fb1b9933", MAC:"36:fe:2b:7f:0f:5b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:35.326100 env[1742]: 2025-09-13 00:24:35.321 [INFO][3996] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e" Namespace="calico-system" Pod="whisker-6c8cfb57d9-4528b" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6c8cfb57d9--4528b-eth0" Sep 13 00:24:35.350786 env[1742]: time="2025-09-13T00:24:35.350659872Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:35.350994 env[1742]: time="2025-09-13T00:24:35.350820998Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:35.350994 env[1742]: time="2025-09-13T00:24:35.350902227Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:35.351586 env[1742]: time="2025-09-13T00:24:35.351509373Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e pid=4031 runtime=io.containerd.runc.v2 Sep 13 00:24:35.379139 systemd[1]: Started cri-containerd-ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e.scope. Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.426000 audit: BPF prog-id=142 op=LOAD Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4031 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564366336313562633266323232383435643838343765303538376634 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4031 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564366336313562633266323232383435643838343765303538376634 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit: BPF prog-id=143 op=LOAD Sep 13 00:24:35.428000 audit[4041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4031 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564366336313562633266323232383435643838343765303538376634 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.428000 audit: BPF prog-id=144 op=LOAD Sep 13 00:24:35.428000 audit[4041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4031 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564366336313562633266323232383435643838343765303538376634 Sep 13 00:24:35.429000 audit: BPF prog-id=144 op=UNLOAD Sep 13 00:24:35.429000 audit: BPF prog-id=143 op=UNLOAD Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { perfmon } for pid=4041 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit[4041]: AVC avc: denied { bpf } for pid=4041 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:35.429000 audit: BPF prog-id=145 op=LOAD Sep 13 00:24:35.429000 audit[4041]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4031 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564366336313562633266323232383435643838343765303538376634 Sep 13 00:24:35.479797 env[1742]: time="2025-09-13T00:24:35.479726382Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6c8cfb57d9-4528b,Uid:d745e9da-6e1c-43d6-8333-ec07d344faec,Namespace:calico-system,Attempt:0,} returns sandbox id \"ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e\"" Sep 13 00:24:35.485557 env[1742]: time="2025-09-13T00:24:35.485504997Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 13 00:24:35.943000 audit[4112]: AVC avc: denied { write } for pid=4112 comm="tee" name="fd" dev="proc" ino=21912 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:24:35.943000 audit[4112]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff34fc7d7 a2=241 a3=1b6 items=1 ppid=4083 pid=4112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.943000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 13 00:24:35.943000 audit: PATH item=0 name="/dev/fd/63" inode=21909 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:24:35.943000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:24:35.951000 audit[4115]: AVC avc: denied { write } for pid=4115 comm="tee" name="fd" dev="proc" ino=21919 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:24:35.951000 audit[4115]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe4c7f7d7 a2=241 a3=1b6 items=1 ppid=4079 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.951000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 13 00:24:35.951000 audit: PATH item=0 name="/dev/fd/63" inode=21916 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:24:35.951000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:24:35.966000 audit[4119]: AVC avc: denied { write } for pid=4119 comm="tee" name="fd" dev="proc" ino=21928 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:24:35.971000 audit[4120]: AVC avc: denied { write } for pid=4120 comm="tee" name="fd" dev="proc" ino=21933 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:24:35.966000 audit[4119]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffea4c07d7 a2=241 a3=1b6 items=1 ppid=4082 pid=4119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.966000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 13 00:24:35.966000 audit: PATH item=0 name="/dev/fd/63" inode=21925 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:24:35.966000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:24:35.971000 audit[4120]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffff5b27c8 a2=241 a3=1b6 items=1 ppid=4077 pid=4120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.971000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 13 00:24:35.971000 audit: PATH item=0 name="/dev/fd/63" inode=22711 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:24:35.971000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:24:35.989000 audit[4125]: AVC avc: denied { write } for pid=4125 comm="tee" name="fd" dev="proc" ino=21941 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:24:35.989000 audit[4125]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe7a9f7c7 a2=241 a3=1b6 items=1 ppid=4072 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.989000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 13 00:24:35.989000 audit: PATH item=0 name="/dev/fd/63" inode=21929 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:24:35.989000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:24:35.999000 audit[4127]: AVC avc: denied { write } for pid=4127 comm="tee" name="fd" dev="proc" ino=22715 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:24:35.999000 audit[4127]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe9acd7d8 a2=241 a3=1b6 items=1 ppid=4074 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:35.999000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 13 00:24:35.999000 audit: PATH item=0 name="/dev/fd/63" inode=21930 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:24:35.999000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:24:36.004000 audit[4136]: AVC avc: denied { write } for pid=4136 comm="tee" name="fd" dev="proc" ino=21945 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 00:24:36.004000 audit[4136]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd212d7d9 a2=241 a3=1b6 items=1 ppid=4078 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:36.004000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 13 00:24:36.004000 audit: PATH item=0 name="/dev/fd/63" inode=21938 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 00:24:36.004000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 00:24:36.034057 systemd[1]: run-containerd-runc-k8s.io-ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e-runc.KQSuwp.mount: Deactivated successfully. Sep 13 00:24:36.247049 env[1742]: time="2025-09-13T00:24:36.246334996Z" level=info msg="StopPodSandbox for \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\"" Sep 13 00:24:36.248704 env[1742]: time="2025-09-13T00:24:36.248640556Z" level=info msg="StopPodSandbox for \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\"" Sep 13 00:24:36.252242 env[1742]: time="2025-09-13T00:24:36.252187242Z" level=info msg="StopPodSandbox for \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\"" Sep 13 00:24:36.253549 kubelet[2740]: I0913 00:24:36.253498 2740 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="b023d126-e890-47ca-8ea2-647be5377408" path="/var/lib/kubelet/pods/b023d126-e890-47ca-8ea2-647be5377408/volumes" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.605 [INFO][4175] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.605 [INFO][4175] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" iface="eth0" netns="/var/run/netns/cni-28502689-cb1b-9cfd-6d29-8a7930c38f5b" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.606 [INFO][4175] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" iface="eth0" netns="/var/run/netns/cni-28502689-cb1b-9cfd-6d29-8a7930c38f5b" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.606 [INFO][4175] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" iface="eth0" netns="/var/run/netns/cni-28502689-cb1b-9cfd-6d29-8a7930c38f5b" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.606 [INFO][4175] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.606 [INFO][4175] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.695 [INFO][4198] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.696 [INFO][4198] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.699 [INFO][4198] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.721 [WARNING][4198] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.721 [INFO][4198] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.726 [INFO][4198] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:36.757006 env[1742]: 2025-09-13 00:24:36.744 [INFO][4175] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:24:36.757006 env[1742]: time="2025-09-13T00:24:36.748853112Z" level=info msg="TearDown network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\" successfully" Sep 13 00:24:36.757006 env[1742]: time="2025-09-13T00:24:36.748928988Z" level=info msg="StopPodSandbox for \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\" returns successfully" Sep 13 00:24:36.756560 systemd[1]: run-netns-cni\x2d28502689\x2dcb1b\x2d9cfd\x2d6d29\x2d8a7930c38f5b.mount: Deactivated successfully. Sep 13 00:24:36.767261 env[1742]: time="2025-09-13T00:24:36.767178015Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-r7dh9,Uid:c89c8e1b-1e30-44db-b7f5-0c71a1572267,Namespace:calico-system,Attempt:1,}" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.570 [INFO][4180] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.570 [INFO][4180] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" iface="eth0" netns="/var/run/netns/cni-61031463-f92c-14cf-cbbf-805a5d2e261b" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.571 [INFO][4180] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" iface="eth0" netns="/var/run/netns/cni-61031463-f92c-14cf-cbbf-805a5d2e261b" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.571 [INFO][4180] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" iface="eth0" netns="/var/run/netns/cni-61031463-f92c-14cf-cbbf-805a5d2e261b" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.571 [INFO][4180] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.571 [INFO][4180] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.788 [INFO][4195] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.795 [INFO][4195] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.795 [INFO][4195] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.854 [WARNING][4195] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.854 [INFO][4195] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.859 [INFO][4195] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:36.870860 env[1742]: 2025-09-13 00:24:36.868 [INFO][4180] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:36.882218 systemd[1]: run-netns-cni\x2d61031463\x2df92c\x2d14cf\x2dcbbf\x2d805a5d2e261b.mount: Deactivated successfully. Sep 13 00:24:36.893068 env[1742]: time="2025-09-13T00:24:36.893012050Z" level=info msg="TearDown network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\" successfully" Sep 13 00:24:36.893245 env[1742]: time="2025-09-13T00:24:36.893209248Z" level=info msg="StopPodSandbox for \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\" returns successfully" Sep 13 00:24:36.894749 env[1742]: time="2025-09-13T00:24:36.894683512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lz88b,Uid:23546618-dee9-4a8d-9b55-8b6d00f86357,Namespace:kube-system,Attempt:1,}" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.663 [INFO][4179] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.663 [INFO][4179] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" iface="eth0" netns="/var/run/netns/cni-12420bbd-28b6-f4c9-985b-6f2f2a293fb4" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.663 [INFO][4179] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" iface="eth0" netns="/var/run/netns/cni-12420bbd-28b6-f4c9-985b-6f2f2a293fb4" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.664 [INFO][4179] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" iface="eth0" netns="/var/run/netns/cni-12420bbd-28b6-f4c9-985b-6f2f2a293fb4" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.664 [INFO][4179] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.664 [INFO][4179] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.929 [INFO][4208] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.930 [INFO][4208] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.931 [INFO][4208] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.971 [WARNING][4208] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.971 [INFO][4208] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.987 [INFO][4208] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:37.004312 env[1742]: 2025-09-13 00:24:36.995 [INFO][4179] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:24:37.005389 env[1742]: time="2025-09-13T00:24:37.004595980Z" level=info msg="TearDown network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\" successfully" Sep 13 00:24:37.005389 env[1742]: time="2025-09-13T00:24:37.004644197Z" level=info msg="StopPodSandbox for \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\" returns successfully" Sep 13 00:24:37.005874 env[1742]: time="2025-09-13T00:24:37.005806133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68555b4f5d-4fh4t,Uid:979d2bfc-9a3f-40d7-b66e-e4d30fa4257e,Namespace:calico-system,Attempt:1,}" Sep 13 00:24:37.033670 systemd[1]: run-netns-cni\x2d12420bbd\x2d28b6\x2df4c9\x2d985b\x2d6f2f2a293fb4.mount: Deactivated successfully. Sep 13 00:24:37.155296 systemd-networkd[1463]: calicd2fb1b9933: Gained IPv6LL Sep 13 00:24:37.244330 env[1742]: time="2025-09-13T00:24:37.244247273Z" level=info msg="StopPodSandbox for \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\"" Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.426000 audit: BPF prog-id=146 op=LOAD Sep 13 00:24:37.426000 audit[4316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd8ac4308 a2=98 a3=ffffd8ac42f8 items=0 ppid=4085 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.426000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:24:37.429000 audit: BPF prog-id=146 op=UNLOAD Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit: BPF prog-id=147 op=LOAD Sep 13 00:24:37.429000 audit[4316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd8ac41b8 a2=74 a3=95 items=0 ppid=4085 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.429000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:24:37.429000 audit: BPF prog-id=147 op=UNLOAD Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit[4316]: AVC avc: denied { bpf } for pid=4316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.429000 audit: BPF prog-id=148 op=LOAD Sep 13 00:24:37.429000 audit[4316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd8ac41e8 a2=40 a3=ffffd8ac4218 items=0 ppid=4085 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.429000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:24:37.433000 audit: BPF prog-id=148 op=UNLOAD Sep 13 00:24:37.433000 audit[4316]: AVC avc: denied { perfmon } for pid=4316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.433000 audit[4316]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd8ac4300 a2=50 a3=0 items=0 ppid=4085 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.433000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.435000 audit: BPF prog-id=149 op=LOAD Sep 13 00:24:37.435000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd6746668 a2=98 a3=ffffd6746658 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.435000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:37.436000 audit: BPF prog-id=149 op=UNLOAD Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit: BPF prog-id=150 op=LOAD Sep 13 00:24:37.436000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd67462f8 a2=74 a3=95 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.436000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:37.436000 audit: BPF prog-id=150 op=UNLOAD Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.436000 audit: BPF prog-id=151 op=LOAD Sep 13 00:24:37.436000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd6746358 a2=94 a3=2 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.436000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:37.436000 audit: BPF prog-id=151 op=UNLOAD Sep 13 00:24:37.469932 (udev-worker)[4018]: Network interface NamePolicy= disabled on kernel command line. Sep 13 00:24:37.523353 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:24:37.523502 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali06c66539cdc: link becomes ready Sep 13 00:24:37.516232 systemd-networkd[1463]: cali06c66539cdc: Link UP Sep 13 00:24:37.524197 systemd-networkd[1463]: cali06c66539cdc: Gained carrier Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.015 [INFO][4229] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.060 [INFO][4229] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0 coredns-7c65d6cfc9- kube-system 23546618-dee9-4a8d-9b55-8b6d00f86357 966 0 2025-09-13 00:23:44 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-123 coredns-7c65d6cfc9-lz88b eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali06c66539cdc [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.060 [INFO][4229] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.319 [INFO][4271] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" HandleID="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.320 [INFO][4271] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" HandleID="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3730), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-123", "pod":"coredns-7c65d6cfc9-lz88b", "timestamp":"2025-09-13 00:24:37.319810532 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.320 [INFO][4271] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.320 [INFO][4271] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.320 [INFO][4271] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.345 [INFO][4271] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.355 [INFO][4271] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.373 [INFO][4271] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.381 [INFO][4271] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.390 [INFO][4271] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.390 [INFO][4271] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.408 [INFO][4271] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5 Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.423 [INFO][4271] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.444 [INFO][4271] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.194/26] block=192.168.28.192/26 handle="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.444 [INFO][4271] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.194/26] handle="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" host="ip-172-31-25-123" Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.444 [INFO][4271] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:37.592521 env[1742]: 2025-09-13 00:24:37.444 [INFO][4271] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.194/26] IPv6=[] ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" HandleID="k8s-pod-network.2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:37.594043 env[1742]: 2025-09-13 00:24:37.461 [INFO][4229] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"23546618-dee9-4a8d-9b55-8b6d00f86357", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"coredns-7c65d6cfc9-lz88b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali06c66539cdc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:37.594043 env[1742]: 2025-09-13 00:24:37.461 [INFO][4229] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.194/32] ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:37.594043 env[1742]: 2025-09-13 00:24:37.461 [INFO][4229] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali06c66539cdc ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:37.594043 env[1742]: 2025-09-13 00:24:37.539 [INFO][4229] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:37.594043 env[1742]: 2025-09-13 00:24:37.542 [INFO][4229] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"23546618-dee9-4a8d-9b55-8b6d00f86357", ResourceVersion:"966", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5", Pod:"coredns-7c65d6cfc9-lz88b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali06c66539cdc", MAC:"52:22:8f:26:3c:02", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:37.594043 env[1742]: 2025-09-13 00:24:37.587 [INFO][4229] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5" Namespace="kube-system" Pod="coredns-7c65d6cfc9-lz88b" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:37.740028 env[1742]: time="2025-09-13T00:24:37.734458463Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:37.740028 env[1742]: time="2025-09-13T00:24:37.734554620Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:37.740028 env[1742]: time="2025-09-13T00:24:37.734581897Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:37.740028 env[1742]: time="2025-09-13T00:24:37.735187771Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5 pid=4341 runtime=io.containerd.runc.v2 Sep 13 00:24:37.821411 systemd-networkd[1463]: cali363b448aced: Link UP Sep 13 00:24:37.827342 systemd-networkd[1463]: cali363b448aced: Gained carrier Sep 13 00:24:37.828720 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali363b448aced: link becomes ready Sep 13 00:24:37.873444 systemd[1]: Started cri-containerd-2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5.scope. Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.090 [INFO][4215] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.207 [INFO][4215] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0 csi-node-driver- calico-system c89c8e1b-1e30-44db-b7f5-0c71a1572267 967 0 2025-09-13 00:24:11 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:856c6b598f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-25-123 csi-node-driver-r7dh9 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali363b448aced [] [] }} ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.208 [INFO][4215] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.602 [INFO][4280] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" HandleID="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.605 [INFO][4280] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" HandleID="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002fde00), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-123", "pod":"csi-node-driver-r7dh9", "timestamp":"2025-09-13 00:24:37.602641837 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.605 [INFO][4280] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.605 [INFO][4280] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.605 [INFO][4280] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.640 [INFO][4280] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.685 [INFO][4280] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.707 [INFO][4280] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.717 [INFO][4280] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.723 [INFO][4280] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.723 [INFO][4280] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.744 [INFO][4280] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.773 [INFO][4280] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.792 [INFO][4280] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.195/26] block=192.168.28.192/26 handle="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.792 [INFO][4280] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.195/26] handle="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" host="ip-172-31-25-123" Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.792 [INFO][4280] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:37.913123 env[1742]: 2025-09-13 00:24:37.792 [INFO][4280] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.195/26] IPv6=[] ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" HandleID="k8s-pod-network.657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:37.914906 env[1742]: 2025-09-13 00:24:37.804 [INFO][4215] cni-plugin/k8s.go 418: Populated endpoint ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c89c8e1b-1e30-44db-b7f5-0c71a1572267", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"csi-node-driver-r7dh9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.28.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali363b448aced", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:37.914906 env[1742]: 2025-09-13 00:24:37.804 [INFO][4215] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.195/32] ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:37.914906 env[1742]: 2025-09-13 00:24:37.804 [INFO][4215] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali363b448aced ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:37.914906 env[1742]: 2025-09-13 00:24:37.828 [INFO][4215] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:37.914906 env[1742]: 2025-09-13 00:24:37.836 [INFO][4215] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c89c8e1b-1e30-44db-b7f5-0c71a1572267", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f", Pod:"csi-node-driver-r7dh9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.28.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali363b448aced", MAC:"96:c1:ef:ce:dc:fa", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:37.914906 env[1742]: 2025-09-13 00:24:37.901 [INFO][4215] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f" Namespace="calico-system" Pod="csi-node-driver-r7dh9" WorkloadEndpoint="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.967000 audit: BPF prog-id=152 op=LOAD Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4341 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261626538626363646635653732306339643965343236393639366530 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4341 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261626538626363646635653732306339643965343236393639366530 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit: BPF prog-id=153 op=LOAD Sep 13 00:24:37.969000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4341 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261626538626363646635653732306339643965343236393639366530 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit: BPF prog-id=154 op=LOAD Sep 13 00:24:37.969000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4341 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261626538626363646635653732306339643965343236393639366530 Sep 13 00:24:37.969000 audit: BPF prog-id=154 op=UNLOAD Sep 13 00:24:37.969000 audit: BPF prog-id=153 op=UNLOAD Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:37.969000 audit: BPF prog-id=155 op=LOAD Sep 13 00:24:37.969000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4341 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:37.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261626538626363646635653732306339643965343236393639366530 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit: BPF prog-id=156 op=LOAD Sep 13 00:24:38.018000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd6746318 a2=40 a3=ffffd6746348 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.018000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.018000 audit: BPF prog-id=156 op=UNLOAD Sep 13 00:24:38.018000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.018000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd6746430 a2=50 a3=0 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.018000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.034002 systemd[1]: run-containerd-runc-k8s.io-2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5-runc.0dgak7.mount: Deactivated successfully. Sep 13 00:24:38.059273 systemd-networkd[1463]: calief005adfa26: Link UP Sep 13 00:24:38.066285 systemd-networkd[1463]: calief005adfa26: Gained carrier Sep 13 00:24:38.067392 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calief005adfa26: link becomes ready Sep 13 00:24:38.070197 env[1742]: time="2025-09-13T00:24:38.057560850Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:38.070197 env[1742]: time="2025-09-13T00:24:38.057657019Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:38.070197 env[1742]: time="2025-09-13T00:24:38.057684044Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:38.070197 env[1742]: time="2025-09-13T00:24:38.068175318Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f pid=4384 runtime=io.containerd.runc.v2 Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.639 [INFO][4301] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.639 [INFO][4301] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" iface="eth0" netns="/var/run/netns/cni-0e78bf3d-b77a-9865-4cf2-7ea73bee268b" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.639 [INFO][4301] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" iface="eth0" netns="/var/run/netns/cni-0e78bf3d-b77a-9865-4cf2-7ea73bee268b" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.646 [INFO][4301] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" iface="eth0" netns="/var/run/netns/cni-0e78bf3d-b77a-9865-4cf2-7ea73bee268b" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.647 [INFO][4301] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.647 [INFO][4301] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.890 [INFO][4331] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:37.890 [INFO][4331] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:38.027 [INFO][4331] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:38.093 [WARNING][4331] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:38.093 [INFO][4331] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:38.107 [INFO][4331] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:38.121169 env[1742]: 2025-09-13 00:24:38.115 [INFO][4301] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:24:38.123052 env[1742]: time="2025-09-13T00:24:38.122991283Z" level=info msg="TearDown network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\" successfully" Sep 13 00:24:38.123255 env[1742]: time="2025-09-13T00:24:38.123219142Z" level=info msg="StopPodSandbox for \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\" returns successfully" Sep 13 00:24:38.124267 env[1742]: time="2025-09-13T00:24:38.124210520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-xlz4j,Uid:e2a814ca-9dba-4638-9ba1-92017b2ca1d6,Namespace:calico-apiserver,Attempt:1,}" Sep 13 00:24:38.138000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.139492 systemd[1]: run-netns-cni\x2d0e78bf3d\x2db77a\x2d9865\x2d4cf2\x2d7ea73bee268b.mount: Deactivated successfully. Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.176 [INFO][4251] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.207 [INFO][4251] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0 calico-kube-controllers-68555b4f5d- calico-system 979d2bfc-9a3f-40d7-b66e-e4d30fa4257e 968 0 2025-09-13 00:24:11 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:68555b4f5d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-25-123 calico-kube-controllers-68555b4f5d-4fh4t eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calief005adfa26 [] [] }} ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.208 [INFO][4251] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.660 [INFO][4287] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" HandleID="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.667 [INFO][4287] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" HandleID="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000120950), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-123", "pod":"calico-kube-controllers-68555b4f5d-4fh4t", "timestamp":"2025-09-13 00:24:37.660823972 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.667 [INFO][4287] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.798 [INFO][4287] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.798 [INFO][4287] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.882 [INFO][4287] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.912 [INFO][4287] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.934 [INFO][4287] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.941 [INFO][4287] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.956 [INFO][4287] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.956 [INFO][4287] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.966 [INFO][4287] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11 Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:37.999 [INFO][4287] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:38.025 [INFO][4287] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.196/26] block=192.168.28.192/26 handle="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:38.025 [INFO][4287] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.196/26] handle="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" host="ip-172-31-25-123" Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:38.025 [INFO][4287] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:38.143930 env[1742]: 2025-09-13 00:24:38.025 [INFO][4287] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.196/26] IPv6=[] ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" HandleID="k8s-pod-network.69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:38.145530 env[1742]: 2025-09-13 00:24:38.037 [INFO][4251] cni-plugin/k8s.go 418: Populated endpoint ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0", GenerateName:"calico-kube-controllers-68555b4f5d-", Namespace:"calico-system", SelfLink:"", UID:"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68555b4f5d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"calico-kube-controllers-68555b4f5d-4fh4t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calief005adfa26", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:38.145530 env[1742]: 2025-09-13 00:24:38.038 [INFO][4251] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.196/32] ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:38.145530 env[1742]: 2025-09-13 00:24:38.038 [INFO][4251] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calief005adfa26 ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:38.145530 env[1742]: 2025-09-13 00:24:38.067 [INFO][4251] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:38.145530 env[1742]: 2025-09-13 00:24:38.070 [INFO][4251] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0", GenerateName:"calico-kube-controllers-68555b4f5d-", Namespace:"calico-system", SelfLink:"", UID:"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68555b4f5d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11", Pod:"calico-kube-controllers-68555b4f5d-4fh4t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calief005adfa26", MAC:"66:74:e0:f7:39:65", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:38.145530 env[1742]: 2025-09-13 00:24:38.122 [INFO][4251] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11" Namespace="calico-system" Pod="calico-kube-controllers-68555b4f5d-4fh4t" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:24:38.138000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6746388 a2=28 a3=ffffd67464b8 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.138000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.146000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.146000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd67463b8 a2=28 a3=ffffd67464e8 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.146000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.146000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd6746268 a2=28 a3=ffffd6746398 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.146000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.146000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd67463d8 a2=28 a3=ffffd6746508 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.146000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.146000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd67463b8 a2=28 a3=ffffd67464e8 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.146000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.146000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd67463a8 a2=28 a3=ffffd67464d8 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.146000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.146000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd67463d8 a2=28 a3=ffffd6746508 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd67463b8 a2=28 a3=ffffd67464e8 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd67463d8 a2=28 a3=ffffd6746508 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd67463a8 a2=28 a3=ffffd67464d8 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6746428 a2=28 a3=ffffd6746568 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd6746160 a2=50 a3=0 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.147000 audit: BPF prog-id=157 op=LOAD Sep 13 00:24:38.147000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd6746168 a2=94 a3=5 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.148000 audit: BPF prog-id=157 op=UNLOAD Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd6746270 a2=50 a3=0 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.148000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd67463b8 a2=4 a3=3 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.148000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.148000 audit[4317]: AVC avc: denied { confidentiality } for pid=4317 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:24:38.148000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd6746398 a2=94 a3=6 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.148000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.149000 audit[4317]: AVC avc: denied { confidentiality } for pid=4317 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:24:38.149000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd6745b68 a2=94 a3=83 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.149000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { perfmon } for pid=4317 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { bpf } for pid=4317 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.153000 audit[4317]: AVC avc: denied { confidentiality } for pid=4317 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:24:38.153000 audit[4317]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd6745b68 a2=94 a3=83 items=0 ppid=4085 pid=4317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.153000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 00:24:38.192756 systemd[1]: run-containerd-runc-k8s.io-657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f-runc.NRv3OR.mount: Deactivated successfully. Sep 13 00:24:38.204492 systemd[1]: Started cri-containerd-657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f.scope. Sep 13 00:24:38.224321 env[1742]: time="2025-09-13T00:24:38.224262346Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-lz88b,Uid:23546618-dee9-4a8d-9b55-8b6d00f86357,Namespace:kube-system,Attempt:1,} returns sandbox id \"2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5\"" Sep 13 00:24:38.244435 env[1742]: time="2025-09-13T00:24:38.244361626Z" level=info msg="CreateContainer within sandbox \"2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 00:24:38.281919 env[1742]: time="2025-09-13T00:24:38.277556241Z" level=info msg="StopPodSandbox for \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\"" Sep 13 00:24:38.303372 kernel: kauditd_printk_skb: 397 callbacks suppressed Sep 13 00:24:38.303545 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.305906 env[1742]: time="2025-09-13T00:24:38.305806722Z" level=info msg="StopPodSandbox for \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\"" Sep 13 00:24:38.314037 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.327445 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.345042 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.363071 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.378600 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.396636 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 00:24:38.396766 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.406435 kernel: audit: type=1400 audit(1757723078.292:1113): avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.406549 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 00:24:38.292000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.292000 audit: BPF prog-id=158 op=LOAD Sep 13 00:24:38.292000 audit[4426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdfe3e7c8 a2=98 a3=ffffdfe3e7b8 items=0 ppid=4085 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.292000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:24:38.295000 audit: BPF prog-id=158 op=UNLOAD Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.295000 audit: BPF prog-id=159 op=LOAD Sep 13 00:24:38.295000 audit[4426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdfe3e678 a2=74 a3=95 items=0 ppid=4085 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.295000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:24:38.303000 audit: BPF prog-id=159 op=UNLOAD Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.303000 audit: BPF prog-id=160 op=LOAD Sep 13 00:24:38.303000 audit[4426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdfe3e6a8 a2=40 a3=ffffdfe3e6d8 items=0 ppid=4085 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.303000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 00:24:38.303000 audit: BPF prog-id=160 op=UNLOAD Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.366000 audit: BPF prog-id=161 op=LOAD Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4384 pid=4402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373338393438396362373163356132656238393337316438663761 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4384 pid=4402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373338393438396362373163356132656238393337316438663761 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.369000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.435287 env[1742]: time="2025-09-13T00:24:38.435218718Z" level=info msg="CreateContainer within sandbox \"2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"a0a8a47b47597c8d587b394036c21b441253b500860f7be170bc14220f1138b9\"" Sep 13 00:24:38.447851 env[1742]: time="2025-09-13T00:24:38.447759996Z" level=info msg="StartContainer for \"a0a8a47b47597c8d587b394036c21b441253b500860f7be170bc14220f1138b9\"" Sep 13 00:24:38.369000 audit[4402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4384 pid=4402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373338393438396362373163356132656238393337316438663761 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit: BPF prog-id=163 op=LOAD Sep 13 00:24:38.467000 audit[4402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4384 pid=4402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373338393438396362373163356132656238393337316438663761 Sep 13 00:24:38.467000 audit: BPF prog-id=163 op=UNLOAD Sep 13 00:24:38.467000 audit: BPF prog-id=162 op=UNLOAD Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { perfmon } for pid=4402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit[4402]: AVC avc: denied { bpf } for pid=4402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.467000 audit: BPF prog-id=164 op=LOAD Sep 13 00:24:38.467000 audit[4402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4384 pid=4402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635373338393438396362373163356132656238393337316438663761 Sep 13 00:24:38.512182 env[1742]: time="2025-09-13T00:24:38.487006849Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:38.512182 env[1742]: time="2025-09-13T00:24:38.487084286Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:38.512182 env[1742]: time="2025-09-13T00:24:38.487110530Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:38.512182 env[1742]: time="2025-09-13T00:24:38.489088654Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11 pid=4473 runtime=io.containerd.runc.v2 Sep 13 00:24:38.640965 systemd-networkd[1463]: vxlan.calico: Link UP Sep 13 00:24:38.640988 systemd-networkd[1463]: vxlan.calico: Gained carrier Sep 13 00:24:38.660254 systemd[1]: Started cri-containerd-a0a8a47b47597c8d587b394036c21b441253b500860f7be170bc14220f1138b9.scope. Sep 13 00:24:38.736923 systemd[1]: Started cri-containerd-69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11.scope. Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.771000 audit: BPF prog-id=165 op=LOAD Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4341 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613861343762343735393763386435383762333934303336633231 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4341 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613861343762343735393763386435383762333934303336633231 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit: BPF prog-id=166 op=LOAD Sep 13 00:24:38.772000 audit[4509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4341 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613861343762343735393763386435383762333934303336633231 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit: BPF prog-id=167 op=LOAD Sep 13 00:24:38.772000 audit[4509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4341 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613861343762343735393763386435383762333934303336633231 Sep 13 00:24:38.772000 audit: BPF prog-id=167 op=UNLOAD Sep 13 00:24:38.772000 audit: BPF prog-id=166 op=UNLOAD Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { perfmon } for pid=4509 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit[4509]: AVC avc: denied { bpf } for pid=4509 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.772000 audit: BPF prog-id=168 op=LOAD Sep 13 00:24:38.772000 audit[4509]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4341 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130613861343762343735393763386435383762333934303336633231 Sep 13 00:24:38.792318 env[1742]: time="2025-09-13T00:24:38.792257029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-r7dh9,Uid:c89c8e1b-1e30-44db-b7f5-0c71a1572267,Namespace:calico-system,Attempt:1,} returns sandbox id \"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f\"" Sep 13 00:24:38.889375 env[1742]: time="2025-09-13T00:24:38.889316541Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:38.903085 env[1742]: time="2025-09-13T00:24:38.898282576Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:38.903085 env[1742]: time="2025-09-13T00:24:38.902770249Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:38.910616 env[1742]: time="2025-09-13T00:24:38.910546892Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:38.913013 env[1742]: time="2025-09-13T00:24:38.912801318Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.921000 audit: BPF prog-id=169 op=LOAD Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4473 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639646331363264663361623532333565666539346564363566646336 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4473 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639646331363264663361623532333565666539346564363566646336 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit: BPF prog-id=170 op=LOAD Sep 13 00:24:38.923000 audit[4493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4473 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639646331363264663361623532333565666539346564363566646336 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.923000 audit: BPF prog-id=171 op=LOAD Sep 13 00:24:38.923000 audit[4493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4473 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639646331363264663361623532333565666539346564363566646336 Sep 13 00:24:38.924000 audit: BPF prog-id=171 op=UNLOAD Sep 13 00:24:38.924000 audit: BPF prog-id=170 op=UNLOAD Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:38.924000 audit: BPF prog-id=172 op=LOAD Sep 13 00:24:38.924000 audit[4493]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4473 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:38.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639646331363264663361623532333565666539346564363566646336 Sep 13 00:24:38.929742 env[1742]: time="2025-09-13T00:24:38.926174854Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 13 00:24:38.929742 env[1742]: time="2025-09-13T00:24:38.928383488Z" level=info msg="StartContainer for \"a0a8a47b47597c8d587b394036c21b441253b500860f7be170bc14220f1138b9\" returns successfully" Sep 13 00:24:38.929742 env[1742]: time="2025-09-13T00:24:38.929582384Z" level=info msg="CreateContainer within sandbox \"ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 13 00:24:38.985432 env[1742]: time="2025-09-13T00:24:38.985322671Z" level=info msg="CreateContainer within sandbox \"ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"dee713aae0efd91664ba3199ae0d79271adff008ebc9d1ccfd2f0717efffdbe1\"" Sep 13 00:24:38.993361 env[1742]: time="2025-09-13T00:24:38.993304564Z" level=info msg="StartContainer for \"dee713aae0efd91664ba3199ae0d79271adff008ebc9d1ccfd2f0717efffdbe1\"" Sep 13 00:24:39.011212 systemd-networkd[1463]: cali363b448aced: Gained IPv6LL Sep 13 00:24:39.017000 audit[4530]: AVC avc: denied { getattr } for pid=4530 comm="coredns" path="cgroup:[4026532972]" dev="nsfs" ino=4026532972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c209,c373 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 00:24:39.017000 audit[4530]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=4341 pid=4530 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c209,c373 key=(null) Sep 13 00:24:39.017000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 00:24:39.140339 systemd[1]: Started cri-containerd-dee713aae0efd91664ba3199ae0d79271adff008ebc9d1ccfd2f0717efffdbe1.scope. Sep 13 00:24:39.141516 systemd-networkd[1463]: cali06c66539cdc: Gained IPv6LL Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:38.693 [INFO][4446] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:38.694 [INFO][4446] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" iface="eth0" netns="/var/run/netns/cni-ed88f072-f62d-0462-7588-63b70a2f1baa" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:38.694 [INFO][4446] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" iface="eth0" netns="/var/run/netns/cni-ed88f072-f62d-0462-7588-63b70a2f1baa" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:38.705 [INFO][4446] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" iface="eth0" netns="/var/run/netns/cni-ed88f072-f62d-0462-7588-63b70a2f1baa" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:38.705 [INFO][4446] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:38.705 [INFO][4446] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:39.092 [INFO][4532] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:39.092 [INFO][4532] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:39.093 [INFO][4532] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:39.169 [WARNING][4532] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:39.169 [INFO][4532] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:39.180 [INFO][4532] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:39.188314 env[1742]: 2025-09-13 00:24:39.183 [INFO][4446] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:24:39.212256 env[1742]: time="2025-09-13T00:24:39.212178705Z" level=info msg="TearDown network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\" successfully" Sep 13 00:24:39.212256 env[1742]: time="2025-09-13T00:24:39.212245365Z" level=info msg="StopPodSandbox for \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\" returns successfully" Sep 13 00:24:39.215304 env[1742]: time="2025-09-13T00:24:39.215223831Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ths8j,Uid:016d98cc-9cfc-481a-818d-62b978bada49,Namespace:kube-system,Attempt:1,}" Sep 13 00:24:39.231455 systemd[1]: run-containerd-runc-k8s.io-dee713aae0efd91664ba3199ae0d79271adff008ebc9d1ccfd2f0717efffdbe1-runc.9Mhxwd.mount: Deactivated successfully. Sep 13 00:24:39.231678 systemd[1]: run-netns-cni\x2ded88f072\x2df62d\x2d0462\x2d7588\x2d63b70a2f1baa.mount: Deactivated successfully. Sep 13 00:24:39.252446 env[1742]: time="2025-09-13T00:24:39.251860155Z" level=info msg="StopPodSandbox for \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\"" Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.259000 audit: BPF prog-id=173 op=LOAD Sep 13 00:24:39.259000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0b37448 a2=98 a3=ffffd0b37438 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.259000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.260000 audit: BPF prog-id=173 op=UNLOAD Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit: BPF prog-id=174 op=LOAD Sep 13 00:24:39.260000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0b37128 a2=74 a3=95 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.260000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.260000 audit: BPF prog-id=174 op=UNLOAD Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.260000 audit: BPF prog-id=175 op=LOAD Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:38.876 [WARNING][4483] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"23546618-dee9-4a8d-9b55-8b6d00f86357", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5", Pod:"coredns-7c65d6cfc9-lz88b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali06c66539cdc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:38.878 [INFO][4483] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:38.879 [INFO][4483] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" iface="eth0" netns="" Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:38.879 [INFO][4483] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:38.879 [INFO][4483] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:39.107 [INFO][4568] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:39.108 [INFO][4568] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:39.181 [INFO][4568] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:39.227 [WARNING][4568] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:39.227 [INFO][4568] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:39.254 [INFO][4568] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:39.274865 env[1742]: 2025-09-13 00:24:39.271 [INFO][4483] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:39.280536 env[1742]: time="2025-09-13T00:24:39.274898966Z" level=info msg="TearDown network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\" successfully" Sep 13 00:24:39.280536 env[1742]: time="2025-09-13T00:24:39.274946487Z" level=info msg="StopPodSandbox for \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\" returns successfully" Sep 13 00:24:39.260000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0b37188 a2=94 a3=2 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.260000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.282000 audit: BPF prog-id=175 op=UNLOAD Sep 13 00:24:39.282000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.282000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd0b371b8 a2=28 a3=ffffd0b372e8 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.282000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.282000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.282000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd0b371e8 a2=28 a3=ffffd0b37318 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.282000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd0b37098 a2=28 a3=ffffd0b371c8 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd0b37208 a2=28 a3=ffffd0b37338 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd0b371e8 a2=28 a3=ffffd0b37318 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd0b371d8 a2=28 a3=ffffd0b37308 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd0b37208 a2=28 a3=ffffd0b37338 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd0b371e8 a2=28 a3=ffffd0b37318 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd0b37208 a2=28 a3=ffffd0b37338 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd0b371d8 a2=28 a3=ffffd0b37308 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.285000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.285000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd0b37258 a2=28 a3=ffffd0b37398 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.285000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.286000 audit: BPF prog-id=176 op=LOAD Sep 13 00:24:39.286000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd0b37078 a2=40 a3=ffffd0b370a8 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.286000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.286000 audit: BPF prog-id=176 op=UNLOAD Sep 13 00:24:39.287000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.287000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffd0b370a0 a2=50 a3=0 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.287000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffd0b370a0 a2=50 a3=0 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.291000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit: BPF prog-id=177 op=LOAD Sep 13 00:24:39.291000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd0b36808 a2=94 a3=2 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.291000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.291000 audit: BPF prog-id=177 op=UNLOAD Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { perfmon } for pid=4618 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit[4618]: AVC avc: denied { bpf } for pid=4618 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.291000 audit: BPF prog-id=178 op=LOAD Sep 13 00:24:39.291000 audit[4618]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd0b36998 a2=94 a3=30 items=0 ppid=4085 pid=4618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.291000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 00:24:39.313368 env[1742]: time="2025-09-13T00:24:39.288405639Z" level=info msg="RemovePodSandbox for \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\"" Sep 13 00:24:39.313368 env[1742]: time="2025-09-13T00:24:39.288465340Z" level=info msg="Forcibly stopping sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\"" Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.318000 audit: BPF prog-id=179 op=LOAD Sep 13 00:24:39.318000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc3b64598 a2=98 a3=ffffc3b64588 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.318000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:39.346000 audit: BPF prog-id=179 op=UNLOAD Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.347000 audit: BPF prog-id=180 op=LOAD Sep 13 00:24:39.347000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3b64228 a2=74 a3=95 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.347000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:39.358000 audit: BPF prog-id=180 op=UNLOAD Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.358000 audit: BPF prog-id=181 op=LOAD Sep 13 00:24:39.358000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3b64288 a2=94 a3=2 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.358000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:39.362000 audit: BPF prog-id=181 op=UNLOAD Sep 13 00:24:39.447094 systemd-networkd[1463]: cali99c9ea14f2e: Link UP Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.457000 audit: BPF prog-id=182 op=LOAD Sep 13 00:24:39.465000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.465000 audit[4593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4031 pid=4593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465653731336161653065666439313636346261333139396165306437 Sep 13 00:24:39.466000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.466000 audit[4593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4031 pid=4593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465653731336161653065666439313636346261333139396165306437 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.474071 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali99c9ea14f2e: link becomes ready Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.472568 systemd-networkd[1463]: cali99c9ea14f2e: Gained carrier Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.467000 audit: BPF prog-id=183 op=LOAD Sep 13 00:24:39.467000 audit[4593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4031 pid=4593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465653731336161653065666439313636346261333139396165306437 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.490000 audit: BPF prog-id=184 op=LOAD Sep 13 00:24:39.490000 audit[4593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4031 pid=4593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465653731336161653065666439313636346261333139396165306437 Sep 13 00:24:39.498000 audit: BPF prog-id=184 op=UNLOAD Sep 13 00:24:39.498000 audit: BPF prog-id=183 op=UNLOAD Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { perfmon } for pid=4593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit[4593]: AVC avc: denied { bpf } for pid=4593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:39.501000 audit: BPF prog-id=185 op=LOAD Sep 13 00:24:39.501000 audit[4593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4031 pid=4593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:39.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465653731336161653065666439313636346261333139396165306437 Sep 13 00:24:39.565969 env[1742]: time="2025-09-13T00:24:39.565825126Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68555b4f5d-4fh4t,Uid:979d2bfc-9a3f-40d7-b66e-e4d30fa4257e,Namespace:calico-system,Attempt:1,} returns sandbox id \"69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11\"" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:38.983 [INFO][4464] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0 calico-apiserver-547d6b8874- calico-apiserver e2a814ca-9dba-4638-9ba1-92017b2ca1d6 974 0 2025-09-13 00:24:00 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:547d6b8874 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-25-123 calico-apiserver-547d6b8874-xlz4j eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali99c9ea14f2e [] [] }} ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:38.984 [INFO][4464] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.194 [INFO][4599] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" HandleID="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.195 [INFO][4599] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" HandleID="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000330260), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-25-123", "pod":"calico-apiserver-547d6b8874-xlz4j", "timestamp":"2025-09-13 00:24:39.194498247 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.195 [INFO][4599] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.262 [INFO][4599] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.262 [INFO][4599] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.307 [INFO][4599] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.324 [INFO][4599] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.336 [INFO][4599] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.344 [INFO][4599] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.380 [INFO][4599] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.380 [INFO][4599] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.387 [INFO][4599] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.402 [INFO][4599] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.433 [INFO][4599] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.197/26] block=192.168.28.192/26 handle="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.433 [INFO][4599] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.197/26] handle="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" host="ip-172-31-25-123" Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.433 [INFO][4599] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:39.595778 env[1742]: 2025-09-13 00:24:39.433 [INFO][4599] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.197/26] IPv6=[] ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" HandleID="k8s-pod-network.b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:39.597397 env[1742]: 2025-09-13 00:24:39.437 [INFO][4464] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"e2a814ca-9dba-4638-9ba1-92017b2ca1d6", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"calico-apiserver-547d6b8874-xlz4j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali99c9ea14f2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:39.597397 env[1742]: 2025-09-13 00:24:39.437 [INFO][4464] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.197/32] ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:39.597397 env[1742]: 2025-09-13 00:24:39.437 [INFO][4464] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali99c9ea14f2e ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:39.597397 env[1742]: 2025-09-13 00:24:39.476 [INFO][4464] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:39.597397 env[1742]: 2025-09-13 00:24:39.488 [INFO][4464] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"e2a814ca-9dba-4638-9ba1-92017b2ca1d6", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e", Pod:"calico-apiserver-547d6b8874-xlz4j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali99c9ea14f2e", MAC:"ca:c8:ef:ee:90:58", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:39.597397 env[1742]: 2025-09-13 00:24:39.549 [INFO][4464] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-xlz4j" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:24:39.658111 env[1742]: time="2025-09-13T00:24:39.651061222Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:39.658111 env[1742]: time="2025-09-13T00:24:39.651127954Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:39.658111 env[1742]: time="2025-09-13T00:24:39.651153659Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:39.658111 env[1742]: time="2025-09-13T00:24:39.651368869Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e pid=4695 runtime=io.containerd.runc.v2 Sep 13 00:24:39.689116 systemd[1]: Started cri-containerd-b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e.scope. Sep 13 00:24:39.715143 systemd-networkd[1463]: calief005adfa26: Gained IPv6LL Sep 13 00:24:39.837006 kubelet[2740]: I0913 00:24:39.836327 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-lz88b" podStartSLOduration=55.836297685 podStartE2EDuration="55.836297685s" podCreationTimestamp="2025-09-13 00:23:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:24:39.826921897 +0000 UTC m=+61.784220706" watchObservedRunningTime="2025-09-13 00:24:39.836297685 +0000 UTC m=+61.793596494" Sep 13 00:24:39.843128 systemd-networkd[1463]: vxlan.calico: Gained IPv6LL Sep 13 00:24:39.895084 env[1742]: time="2025-09-13T00:24:39.894926291Z" level=info msg="StartContainer for \"dee713aae0efd91664ba3199ae0d79271adff008ebc9d1ccfd2f0717efffdbe1\" returns successfully" Sep 13 00:24:40.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.123:22-139.178.89.65:55782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:40.092203 systemd[1]: Started sshd@7-172.31.25.123:22-139.178.89.65:55782.service. Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:39.831 [INFO][4648] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:39.832 [INFO][4648] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" iface="eth0" netns="/var/run/netns/cni-d8c45cfe-968f-7b0c-264a-ba1a122d2cfd" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:39.832 [INFO][4648] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" iface="eth0" netns="/var/run/netns/cni-d8c45cfe-968f-7b0c-264a-ba1a122d2cfd" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:39.840 [INFO][4648] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" iface="eth0" netns="/var/run/netns/cni-d8c45cfe-968f-7b0c-264a-ba1a122d2cfd" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:39.840 [INFO][4648] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:39.840 [INFO][4648] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:40.057 [INFO][4729] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:40.057 [INFO][4729] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:40.057 [INFO][4729] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:40.168 [WARNING][4729] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:40.168 [INFO][4729] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:40.188 [INFO][4729] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:40.200245 env[1742]: 2025-09-13 00:24:40.197 [INFO][4648] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:24:40.209539 systemd[1]: run-netns-cni\x2dd8c45cfe\x2d968f\x2d7b0c\x2d264a\x2dba1a122d2cfd.mount: Deactivated successfully. Sep 13 00:24:40.219007 env[1742]: time="2025-09-13T00:24:40.217163273Z" level=info msg="TearDown network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\" successfully" Sep 13 00:24:40.219007 env[1742]: time="2025-09-13T00:24:40.217232418Z" level=info msg="StopPodSandbox for \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\" returns successfully" Sep 13 00:24:40.219903 env[1742]: time="2025-09-13T00:24:40.219822607Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-zxxxp,Uid:6680d8ea-1f08-4608-a26d-959dcacfb8a7,Namespace:calico-apiserver,Attempt:1,}" Sep 13 00:24:40.248538 env[1742]: time="2025-09-13T00:24:40.248466930Z" level=info msg="StopPodSandbox for \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\"" Sep 13 00:24:40.293000 audit[4634]: AVC avc: denied { search } for pid=4634 comm="nginx" name="crypto" dev="proc" ino=24882 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c896 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 13 00:24:40.293000 audit[4634]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffb5e97958 a2=0 a3=0 items=0 ppid=4031 pid=4634 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c896 key=(null) Sep 13 00:24:40.293000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.341000 audit: BPF prog-id=186 op=LOAD Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4695 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623065373765636139356262303238373962333937336634636536 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4695 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623065373765636139356262303238373962333937336634636536 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit: BPF prog-id=187 op=LOAD Sep 13 00:24:40.342000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4695 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623065373765636139356262303238373962333937336634636536 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.342000 audit: BPF prog-id=188 op=LOAD Sep 13 00:24:40.342000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4695 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623065373765636139356262303238373962333937336634636536 Sep 13 00:24:40.342000 audit: BPF prog-id=188 op=UNLOAD Sep 13 00:24:40.343000 audit: BPF prog-id=187 op=UNLOAD Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { perfmon } for pid=4705 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit[4705]: AVC avc: denied { bpf } for pid=4705 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.343000 audit: BPF prog-id=189 op=LOAD Sep 13 00:24:40.343000 audit[4705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4695 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623065373765636139356262303238373962333937336634636536 Sep 13 00:24:40.381000 audit[4746]: USER_ACCT pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:40.384177 sshd[4746]: Accepted publickey for core from 139.178.89.65 port 55782 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:24:40.384000 audit[4746]: CRED_ACQ pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:40.384000 audit[4746]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffded81900 a2=3 a3=1 items=0 ppid=1 pid=4746 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.384000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:24:40.388498 sshd[4746]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:24:40.409585 systemd[1]: Started session-8.scope. Sep 13 00:24:40.413510 systemd-logind[1734]: New session 8 of user core. Sep 13 00:24:40.445000 audit[4746]: USER_START pid=4746 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:40.448000 audit[4788]: CRED_ACQ pid=4788 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:40.479201 systemd-networkd[1463]: calied00054271c: Link UP Sep 13 00:24:40.490096 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:24:40.490261 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calied00054271c: link becomes ready Sep 13 00:24:40.491095 systemd-networkd[1463]: calied00054271c: Gained carrier Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:39.790 [WARNING][4649] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"23546618-dee9-4a8d-9b55-8b6d00f86357", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"2abe8bccdf5e720c9d9e4269696e0db59f586850ddd2f90f1cbbd07aa4ab5eb5", Pod:"coredns-7c65d6cfc9-lz88b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali06c66539cdc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:39.790 [INFO][4649] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:39.790 [INFO][4649] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" iface="eth0" netns="" Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:39.790 [INFO][4649] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:39.790 [INFO][4649] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:40.064 [INFO][4722] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:40.064 [INFO][4722] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:40.402 [INFO][4722] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:40.439 [WARNING][4722] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:40.439 [INFO][4722] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" HandleID="k8s-pod-network.0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--lz88b-eth0" Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:40.456 [INFO][4722] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:40.523730 env[1742]: 2025-09-13 00:24:40.510 [INFO][4649] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8" Sep 13 00:24:40.525035 env[1742]: time="2025-09-13T00:24:40.524978647Z" level=info msg="TearDown network for sandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\" successfully" Sep 13 00:24:40.557651 env[1742]: time="2025-09-13T00:24:40.554148419Z" level=info msg="RemovePodSandbox \"0de2508ac70fee7d829095e7962aa94128936a753391ec5bcf4d4cf90848cac8\" returns successfully" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:39.795 [INFO][4657] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0 coredns-7c65d6cfc9- kube-system 016d98cc-9cfc-481a-818d-62b978bada49 986 0 2025-09-13 00:23:44 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-123 coredns-7c65d6cfc9-ths8j eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calied00054271c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:39.795 [INFO][4657] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.059 [INFO][4730] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" HandleID="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.062 [INFO][4730] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" HandleID="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000329e80), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-123", "pod":"coredns-7c65d6cfc9-ths8j", "timestamp":"2025-09-13 00:24:40.056010043 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.063 [INFO][4730] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.189 [INFO][4730] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.189 [INFO][4730] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.244 [INFO][4730] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.296 [INFO][4730] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.326 [INFO][4730] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.331 [INFO][4730] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.340 [INFO][4730] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.340 [INFO][4730] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.355 [INFO][4730] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.370 [INFO][4730] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.398 [INFO][4730] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.198/26] block=192.168.28.192/26 handle="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.398 [INFO][4730] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.198/26] handle="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" host="ip-172-31-25-123" Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.407 [INFO][4730] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:40.565623 env[1742]: 2025-09-13 00:24:40.408 [INFO][4730] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.198/26] IPv6=[] ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" HandleID="k8s-pod-network.db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:40.566832 env[1742]: 2025-09-13 00:24:40.456 [INFO][4657] cni-plugin/k8s.go 418: Populated endpoint ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"016d98cc-9cfc-481a-818d-62b978bada49", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"coredns-7c65d6cfc9-ths8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied00054271c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:40.566832 env[1742]: 2025-09-13 00:24:40.457 [INFO][4657] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.198/32] ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:40.566832 env[1742]: 2025-09-13 00:24:40.457 [INFO][4657] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calied00054271c ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:40.566832 env[1742]: 2025-09-13 00:24:40.492 [INFO][4657] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:40.566832 env[1742]: 2025-09-13 00:24:40.493 [INFO][4657] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"016d98cc-9cfc-481a-818d-62b978bada49", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec", Pod:"coredns-7c65d6cfc9-ths8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied00054271c", MAC:"66:0f:b7:cc:b5:43", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:40.566832 env[1742]: 2025-09-13 00:24:40.520 [INFO][4657] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ths8j" WorkloadEndpoint="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:24:40.575754 env[1742]: time="2025-09-13T00:24:40.575681090Z" level=info msg="StopPodSandbox for \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\"" Sep 13 00:24:40.606000 audit[4792]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:40.606000 audit[4792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe86d37b0 a2=0 a3=1 items=0 ppid=2845 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:40.623000 audit[4792]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:40.623000 audit[4792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffe86d37b0 a2=0 a3=1 items=0 ppid=2845 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.623000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:40.726724 env[1742]: time="2025-09-13T00:24:40.726553113Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:40.727098 env[1742]: time="2025-09-13T00:24:40.727035314Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:40.727295 env[1742]: time="2025-09-13T00:24:40.727224052Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:40.727881 env[1742]: time="2025-09-13T00:24:40.727813474Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec pid=4820 runtime=io.containerd.runc.v2 Sep 13 00:24:40.735000 audit[4832]: NETFILTER_CFG table=filter:103 family=2 entries=17 op=nft_register_rule pid=4832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:40.735000 audit[4832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc9929ce0 a2=0 a3=1 items=0 ppid=2845 pid=4832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.735000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:40.785000 audit[4832]: NETFILTER_CFG table=nat:104 family=2 entries=35 op=nft_register_chain pid=4832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:40.785000 audit[4832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffc9929ce0 a2=0 a3=1 items=0 ppid=2845 pid=4832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.785000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit: BPF prog-id=190 op=LOAD Sep 13 00:24:40.821000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3b64248 a2=40 a3=ffffc3b64278 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.821000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.821000 audit: BPF prog-id=190 op=UNLOAD Sep 13 00:24:40.821000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.821000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc3b64360 a2=50 a3=0 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.821000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.867172 systemd-networkd[1463]: cali99c9ea14f2e: Gained IPv6LL Sep 13 00:24:40.888000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.888000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b642b8 a2=28 a3=ffffc3b643e8 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.888000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.888000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.888000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b642e8 a2=28 a3=ffffc3b64418 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.888000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.888000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.888000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b64198 a2=28 a3=ffffc3b642c8 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.888000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.888000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.888000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b64308 a2=28 a3=ffffc3b64438 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.888000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.888000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.888000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b642e8 a2=28 a3=ffffc3b64418 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.888000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.888000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.888000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b642d8 a2=28 a3=ffffc3b64408 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.888000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b64308 a2=28 a3=ffffc3b64438 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.889000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b642e8 a2=28 a3=ffffc3b64418 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.889000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b64308 a2=28 a3=ffffc3b64438 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.889000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3b642d8 a2=28 a3=ffffc3b64408 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.889000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3b64358 a2=28 a3=ffffc3b64498 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.889000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc3b64090 a2=50 a3=0 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.889000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.889000 audit: BPF prog-id=191 op=LOAD Sep 13 00:24:40.889000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc3b64098 a2=94 a3=5 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.889000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.890000 audit: BPF prog-id=191 op=UNLOAD Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc3b641a0 a2=50 a3=0 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.890000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc3b642e8 a2=4 a3=3 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.890000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { confidentiality } for pid=4641 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:24:40.890000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3b642c8 a2=94 a3=6 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.890000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.890000 audit[4641]: AVC avc: denied { confidentiality } for pid=4641 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:24:40.890000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3b63a98 a2=94 a3=83 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.890000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { perfmon } for pid=4641 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.892000 audit[4641]: AVC avc: denied { confidentiality } for pid=4641 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 00:24:40.892000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3b63a98 a2=94 a3=83 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.892000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.893000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.893000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3b654d8 a2=10 a3=ffffc3b655c8 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.893000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.894000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.894000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3b65398 a2=10 a3=ffffc3b65488 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.894000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.894000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.894000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3b65308 a2=10 a3=ffffc3b65488 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.894000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.894000 audit[4641]: AVC avc: denied { bpf } for pid=4641 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:40.894000 audit[4641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3b65308 a2=10 a3=ffffc3b65488 items=0 ppid=4085 pid=4641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:40.894000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 00:24:40.888229 sshd[4746]: pam_unix(sshd:session): session closed for user core Sep 13 00:24:40.897000 audit[4746]: USER_END pid=4746 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:40.897000 audit[4746]: CRED_DISP pid=4746 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:40.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.123:22-139.178.89.65:55782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:40.901366 systemd[1]: sshd@7-172.31.25.123:22-139.178.89.65:55782.service: Deactivated successfully. Sep 13 00:24:40.902754 systemd[1]: session-8.scope: Deactivated successfully. Sep 13 00:24:40.905356 systemd-logind[1734]: Session 8 logged out. Waiting for processes to exit. Sep 13 00:24:40.911545 systemd-logind[1734]: Removed session 8. Sep 13 00:24:40.918863 systemd[1]: Started cri-containerd-db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec.scope. Sep 13 00:24:40.923000 audit: BPF prog-id=178 op=UNLOAD Sep 13 00:24:40.969026 env[1742]: time="2025-09-13T00:24:40.968938651Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-xlz4j,Uid:e2a814ca-9dba-4638-9ba1-92017b2ca1d6,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e\"" Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.051000 audit: BPF prog-id=192 op=LOAD Sep 13 00:24:41.053000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.053000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4820 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333439346262613838633537383839353439373664623965373134 Sep 13 00:24:41.053000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.053000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4820 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333439346262613838633537383839353439373664623965373134 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.054000 audit: BPF prog-id=193 op=LOAD Sep 13 00:24:41.054000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4820 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333439346262613838633537383839353439373664623965373134 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.055000 audit: BPF prog-id=194 op=LOAD Sep 13 00:24:41.055000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4820 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333439346262613838633537383839353439373664623965373134 Sep 13 00:24:41.057000 audit: BPF prog-id=194 op=UNLOAD Sep 13 00:24:41.058000 audit: BPF prog-id=193 op=UNLOAD Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { perfmon } for pid=4846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit[4846]: AVC avc: denied { bpf } for pid=4846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.058000 audit: BPF prog-id=195 op=LOAD Sep 13 00:24:41.058000 audit[4846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4820 pid=4846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462333439346262613838633537383839353439373664623965373134 Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:40.592 [INFO][4781] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:40.593 [INFO][4781] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" iface="eth0" netns="/var/run/netns/cni-403798a8-65d0-d8c8-02db-e05014c9c330" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:40.611 [INFO][4781] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" iface="eth0" netns="/var/run/netns/cni-403798a8-65d0-d8c8-02db-e05014c9c330" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:40.611 [INFO][4781] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" iface="eth0" netns="/var/run/netns/cni-403798a8-65d0-d8c8-02db-e05014c9c330" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:40.616 [INFO][4781] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:40.616 [INFO][4781] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:41.014 [INFO][4808] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:41.015 [INFO][4808] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:41.015 [INFO][4808] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:41.043 [WARNING][4808] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:41.043 [INFO][4808] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:41.046 [INFO][4808] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:41.078151 env[1742]: 2025-09-13 00:24:41.068 [INFO][4781] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:24:41.087276 env[1742]: time="2025-09-13T00:24:41.087181321Z" level=info msg="TearDown network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\" successfully" Sep 13 00:24:41.087506 env[1742]: time="2025-09-13T00:24:41.087466264Z" level=info msg="StopPodSandbox for \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\" returns successfully" Sep 13 00:24:41.089413 env[1742]: time="2025-09-13T00:24:41.089349538Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-w5ml5,Uid:00cbf28a-8d0b-40f9-8c22-74f53f1a205f,Namespace:calico-system,Attempt:1,}" Sep 13 00:24:41.091267 systemd[1]: run-netns-cni\x2d403798a8\x2d65d0\x2dd8c8\x2d02db\x2de05014c9c330.mount: Deactivated successfully. Sep 13 00:24:41.183804 env[1742]: time="2025-09-13T00:24:41.183625528Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ths8j,Uid:016d98cc-9cfc-481a-818d-62b978bada49,Namespace:kube-system,Attempt:1,} returns sandbox id \"db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec\"" Sep 13 00:24:41.197440 env[1742]: time="2025-09-13T00:24:41.197386164Z" level=info msg="CreateContainer within sandbox \"db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 00:24:41.302055 systemd-networkd[1463]: calibe9f1c5192a: Link UP Sep 13 00:24:41.324993 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibe9f1c5192a: link becomes ready Sep 13 00:24:41.325265 systemd-networkd[1463]: calibe9f1c5192a: Gained carrier Sep 13 00:24:41.399172 env[1742]: time="2025-09-13T00:24:41.399080607Z" level=info msg="CreateContainer within sandbox \"db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1e4f01a834604db32d80c1748702f373e0f02d4cd5e01236d68560341c0d6446\"" Sep 13 00:24:41.404816 env[1742]: time="2025-09-13T00:24:41.404746856Z" level=info msg="StartContainer for \"1e4f01a834604db32d80c1748702f373e0f02d4cd5e01236d68560341c0d6446\"" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:40.609 [INFO][4758] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0 calico-apiserver-547d6b8874- calico-apiserver 6680d8ea-1f08-4608-a26d-959dcacfb8a7 1005 0 2025-09-13 00:24:00 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:547d6b8874 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-25-123 calico-apiserver-547d6b8874-zxxxp eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibe9f1c5192a [] [] }} ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:40.609 [INFO][4758] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.124 [INFO][4809] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" HandleID="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.126 [INFO][4809] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" HandleID="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cab40), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-25-123", "pod":"calico-apiserver-547d6b8874-zxxxp", "timestamp":"2025-09-13 00:24:41.124702672 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.127 [INFO][4809] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.127 [INFO][4809] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.127 [INFO][4809] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.176 [INFO][4809] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.210 [INFO][4809] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.223 [INFO][4809] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.229 [INFO][4809] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.240 [INFO][4809] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.241 [INFO][4809] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.246 [INFO][4809] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682 Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.259 [INFO][4809] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.277 [INFO][4809] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.199/26] block=192.168.28.192/26 handle="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.277 [INFO][4809] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.199/26] handle="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" host="ip-172-31-25-123" Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.279 [INFO][4809] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:41.411111 env[1742]: 2025-09-13 00:24:41.279 [INFO][4809] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.199/26] IPv6=[] ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" HandleID="k8s-pod-network.29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:41.412377 env[1742]: 2025-09-13 00:24:41.286 [INFO][4758] cni-plugin/k8s.go 418: Populated endpoint ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"6680d8ea-1f08-4608-a26d-959dcacfb8a7", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"calico-apiserver-547d6b8874-zxxxp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibe9f1c5192a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:41.412377 env[1742]: 2025-09-13 00:24:41.287 [INFO][4758] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.199/32] ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:41.412377 env[1742]: 2025-09-13 00:24:41.287 [INFO][4758] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibe9f1c5192a ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:41.412377 env[1742]: 2025-09-13 00:24:41.346 [INFO][4758] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:41.412377 env[1742]: 2025-09-13 00:24:41.347 [INFO][4758] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"6680d8ea-1f08-4608-a26d-959dcacfb8a7", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682", Pod:"calico-apiserver-547d6b8874-zxxxp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibe9f1c5192a", MAC:"62:3a:28:ff:6a:a9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:41.412377 env[1742]: 2025-09-13 00:24:41.383 [INFO][4758] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682" Namespace="calico-apiserver" Pod="calico-apiserver-547d6b8874-zxxxp" WorkloadEndpoint="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.152 [WARNING][4844] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.153 [INFO][4844] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.153 [INFO][4844] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" iface="eth0" netns="" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.153 [INFO][4844] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.153 [INFO][4844] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.456 [INFO][4894] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.456 [INFO][4894] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.456 [INFO][4894] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.479 [WARNING][4894] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.479 [INFO][4894] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.483 [INFO][4894] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:41.501922 env[1742]: 2025-09-13 00:24:41.485 [INFO][4844] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:41.502702 env[1742]: time="2025-09-13T00:24:41.501975474Z" level=info msg="TearDown network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\" successfully" Sep 13 00:24:41.502702 env[1742]: time="2025-09-13T00:24:41.502039926Z" level=info msg="StopPodSandbox for \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\" returns successfully" Sep 13 00:24:41.513004 systemd[1]: Started cri-containerd-1e4f01a834604db32d80c1748702f373e0f02d4cd5e01236d68560341c0d6446.scope. Sep 13 00:24:41.568528 env[1742]: time="2025-09-13T00:24:41.568460716Z" level=info msg="RemovePodSandbox for \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\"" Sep 13 00:24:41.568690 env[1742]: time="2025-09-13T00:24:41.568553237Z" level=info msg="Forcibly stopping sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\"" Sep 13 00:24:41.605983 env[1742]: time="2025-09-13T00:24:41.596350393Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:41.605983 env[1742]: time="2025-09-13T00:24:41.596418505Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:41.605983 env[1742]: time="2025-09-13T00:24:41.596443849Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:41.605983 env[1742]: time="2025-09-13T00:24:41.596738020Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682 pid=4988 runtime=io.containerd.runc.v2 Sep 13 00:24:41.666415 systemd[1]: Started cri-containerd-29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682.scope. Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.763000 audit: BPF prog-id=196 op=LOAD Sep 13 00:24:41.766000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.766000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4988 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239626136613564616364316661393861396331643133353261623637 Sep 13 00:24:41.766000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.766000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4988 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239626136613564616364316661393861396331643133353261623637 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.767000 audit: BPF prog-id=197 op=LOAD Sep 13 00:24:41.767000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4988 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239626136613564616364316661393861396331643133353261623637 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.769000 audit: BPF prog-id=198 op=LOAD Sep 13 00:24:41.769000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4988 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239626136613564616364316661393861396331643133353261623637 Sep 13 00:24:41.770000 audit: BPF prog-id=198 op=UNLOAD Sep 13 00:24:41.770000 audit: BPF prog-id=197 op=UNLOAD Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.771000 audit: BPF prog-id=199 op=LOAD Sep 13 00:24:41.771000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4988 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239626136613564616364316661393861396331643133353261623637 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.778000 audit: BPF prog-id=200 op=LOAD Sep 13 00:24:41.780000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.780000 audit[4958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4820 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165346630316138333436303464623332643830633137343837303266 Sep 13 00:24:41.780000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.780000 audit[4958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4820 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165346630316138333436303464623332643830633137343837303266 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.782000 audit: BPF prog-id=201 op=LOAD Sep 13 00:24:41.782000 audit[4958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4820 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165346630316138333436303464623332643830633137343837303266 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.783000 audit: BPF prog-id=202 op=LOAD Sep 13 00:24:41.783000 audit[4958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4820 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165346630316138333436303464623332643830633137343837303266 Sep 13 00:24:41.784000 audit: BPF prog-id=202 op=UNLOAD Sep 13 00:24:41.785000 audit: BPF prog-id=201 op=UNLOAD Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { perfmon } for pid=4958 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit[4958]: AVC avc: denied { bpf } for pid=4958 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:41.785000 audit: BPF prog-id=203 op=LOAD Sep 13 00:24:41.785000 audit[4958]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4820 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:41.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165346630316138333436303464623332643830633137343837303266 Sep 13 00:24:41.828350 systemd-networkd[1463]: calied00054271c: Gained IPv6LL Sep 13 00:24:41.878582 env[1742]: time="2025-09-13T00:24:41.878484264Z" level=info msg="StartContainer for \"1e4f01a834604db32d80c1748702f373e0f02d4cd5e01236d68560341c0d6446\" returns successfully" Sep 13 00:24:41.929381 systemd-networkd[1463]: calic11cb0f14ef: Link UP Sep 13 00:24:41.938500 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 00:24:41.938693 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic11cb0f14ef: link becomes ready Sep 13 00:24:41.938935 systemd-networkd[1463]: calic11cb0f14ef: Gained carrier Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.393 [INFO][4907] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0 goldmane-7988f88666- calico-system 00cbf28a-8d0b-40f9-8c22-74f53f1a205f 1048 0 2025-09-13 00:24:10 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:7988f88666 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-25-123 goldmane-7988f88666-w5ml5 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic11cb0f14ef [] [] }} ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.394 [INFO][4907] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.598 [INFO][4939] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" HandleID="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.599 [INFO][4939] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" HandleID="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003590e0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-123", "pod":"goldmane-7988f88666-w5ml5", "timestamp":"2025-09-13 00:24:41.59837846 +0000 UTC"}, Hostname:"ip-172-31-25-123", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.599 [INFO][4939] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.599 [INFO][4939] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.600 [INFO][4939] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-123' Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.625 [INFO][4939] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.693 [INFO][4939] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.728 [INFO][4939] ipam/ipam.go 511: Trying affinity for 192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.757 [INFO][4939] ipam/ipam.go 158: Attempting to load block cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.790 [INFO][4939] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.28.192/26 host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.790 [INFO][4939] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.28.192/26 handle="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.854 [INFO][4939] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.874 [INFO][4939] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.28.192/26 handle="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.916 [INFO][4939] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.28.200/26] block=192.168.28.192/26 handle="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.916 [INFO][4939] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.28.200/26] handle="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" host="ip-172-31-25-123" Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.916 [INFO][4939] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:41.985213 env[1742]: 2025-09-13 00:24:41.916 [INFO][4939] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.28.200/26] IPv6=[] ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" HandleID="k8s-pod-network.02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.986531 env[1742]: 2025-09-13 00:24:41.923 [INFO][4907] cni-plugin/k8s.go 418: Populated endpoint ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"00cbf28a-8d0b-40f9-8c22-74f53f1a205f", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"", Pod:"goldmane-7988f88666-w5ml5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.28.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic11cb0f14ef", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:41.986531 env[1742]: 2025-09-13 00:24:41.923 [INFO][4907] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.28.200/32] ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.986531 env[1742]: 2025-09-13 00:24:41.923 [INFO][4907] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic11cb0f14ef ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.986531 env[1742]: 2025-09-13 00:24:41.940 [INFO][4907] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.986531 env[1742]: 2025-09-13 00:24:41.941 [INFO][4907] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"00cbf28a-8d0b-40f9-8c22-74f53f1a205f", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd", Pod:"goldmane-7988f88666-w5ml5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.28.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic11cb0f14ef", MAC:"96:08:bf:73:17:62", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:24:41.986531 env[1742]: 2025-09-13 00:24:41.978 [INFO][4907] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd" Namespace="calico-system" Pod="goldmane-7988f88666-w5ml5" WorkloadEndpoint="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:24:41.998000 audit[4980]: AVC avc: denied { getattr } for pid=4980 comm="coredns" path="cgroup:[4026532996]" dev="nsfs" ino=4026532996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c431,c788 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 00:24:41.998000 audit[4980]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400014ab88 a2=400014c578 a3=0 items=0 ppid=4820 pid=4980 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c431,c788 key=(null) Sep 13 00:24:41.998000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 00:24:42.038331 systemd[1]: run-containerd-runc-k8s.io-16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713-runc.48H2Ry.mount: Deactivated successfully. Sep 13 00:24:42.093758 env[1742]: time="2025-09-13T00:24:42.093670063Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-547d6b8874-zxxxp,Uid:6680d8ea-1f08-4608-a26d-959dcacfb8a7,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682\"" Sep 13 00:24:42.124432 env[1742]: time="2025-09-13T00:24:42.124308275Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 00:24:42.124432 env[1742]: time="2025-09-13T00:24:42.124386671Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 00:24:42.124724 env[1742]: time="2025-09-13T00:24:42.124652834Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 00:24:42.125724 env[1742]: time="2025-09-13T00:24:42.125627771Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd pid=5081 runtime=io.containerd.runc.v2 Sep 13 00:24:42.217000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:42.217000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f76c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:42.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:42.220000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:42.220000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f76e0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:42.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:42.220000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:42.220000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f7700 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:42.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:42.220000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:24:42.220000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017f7720 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:24:42.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:24:42.223374 systemd[1]: Started cri-containerd-02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd.scope. Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.005 [WARNING][5016] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" WorkloadEndpoint="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.005 [INFO][5016] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.005 [INFO][5016] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" iface="eth0" netns="" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.005 [INFO][5016] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.005 [INFO][5016] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.207 [INFO][5066] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.207 [INFO][5066] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.207 [INFO][5066] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.255 [WARNING][5066] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.255 [INFO][5066] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" HandleID="k8s-pod-network.1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Workload="ip--172--31--25--123-k8s-whisker--6f95d74bfd--khjtp-eth0" Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.259 [INFO][5066] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:24:42.267994 env[1742]: 2025-09-13 00:24:42.262 [INFO][5016] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8" Sep 13 00:24:42.267994 env[1742]: time="2025-09-13T00:24:42.266064392Z" level=info msg="TearDown network for sandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\" successfully" Sep 13 00:24:42.282946 env[1742]: time="2025-09-13T00:24:42.282870881Z" level=info msg="RemovePodSandbox \"1d9950573ba77199e7c8ae3c6af9d6303ea26cab08734b478f3acf108966c3d8\" returns successfully" Sep 13 00:24:42.327834 env[1742]: time="2025-09-13T00:24:42.327674826Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:42.335626 env[1742]: time="2025-09-13T00:24:42.335499833Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:42.339967 env[1742]: time="2025-09-13T00:24:42.339865893Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:42.347849 env[1742]: time="2025-09-13T00:24:42.347774961Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:42.348428 env[1742]: time="2025-09-13T00:24:42.348353546Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 13 00:24:42.361159 env[1742]: time="2025-09-13T00:24:42.361074634Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 13 00:24:42.364173 env[1742]: time="2025-09-13T00:24:42.364083494Z" level=info msg="CreateContainer within sandbox \"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 13 00:24:42.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.387000 audit: BPF prog-id=204 op=LOAD Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5081 pid=5090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032623539313532663234393261326330363037663038366564316562 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5081 pid=5090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032623539313532663234393261326330363037663038366564316562 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit: BPF prog-id=205 op=LOAD Sep 13 00:24:42.389000 audit[5090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5081 pid=5090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032623539313532663234393261326330363037663038366564316562 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.389000 audit: BPF prog-id=206 op=LOAD Sep 13 00:24:42.389000 audit[5090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5081 pid=5090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032623539313532663234393261326330363037663038366564316562 Sep 13 00:24:42.390000 audit: BPF prog-id=206 op=UNLOAD Sep 13 00:24:42.390000 audit: BPF prog-id=205 op=UNLOAD Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { perfmon } for pid=5090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit[5090]: AVC avc: denied { bpf } for pid=5090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.390000 audit: BPF prog-id=207 op=LOAD Sep 13 00:24:42.390000 audit[5090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5081 pid=5090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032623539313532663234393261326330363037663038366564316562 Sep 13 00:24:42.396000 audit[5110]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=5110 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:24:42.396000 audit[5110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffffc918f0 a2=0 a3=ffff9cf63fa8 items=0 ppid=4085 pid=5110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.396000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:24:42.425813 env[1742]: time="2025-09-13T00:24:42.425694696Z" level=info msg="CreateContainer within sandbox \"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"56eeb75221f25d101b7102308e9681890d92a88400d9e304aece4e0b76ceb6ea\"" Sep 13 00:24:42.427334 env[1742]: time="2025-09-13T00:24:42.427249850Z" level=info msg="StartContainer for \"56eeb75221f25d101b7102308e9681890d92a88400d9e304aece4e0b76ceb6ea\"" Sep 13 00:24:42.450000 audit[5116]: NETFILTER_CFG table=mangle:106 family=2 entries=16 op=nft_register_chain pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:24:42.450000 audit[5116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd59ae500 a2=0 a3=ffffb5a63fa8 items=0 ppid=4085 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.450000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:24:42.477362 systemd[1]: Started cri-containerd-56eeb75221f25d101b7102308e9681890d92a88400d9e304aece4e0b76ceb6ea.scope. Sep 13 00:24:42.501000 audit[5109]: NETFILTER_CFG table=raw:107 family=2 entries=21 op=nft_register_chain pid=5109 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:24:42.501000 audit[5109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffeea07550 a2=0 a3=ffff82d28fa8 items=0 ppid=4085 pid=5109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.501000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:24:42.547000 audit[5119]: NETFILTER_CFG table=filter:108 family=2 entries=184 op=nft_register_chain pid=5119 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:24:42.547000 audit[5119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=106120 a0=3 a1=ffffd17590a0 a2=0 a3=ffffb03bffa8 items=0 ppid=4085 pid=5119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.547000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:24:42.617817 env[1742]: time="2025-09-13T00:24:42.617748167Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-7988f88666-w5ml5,Uid:00cbf28a-8d0b-40f9-8c22-74f53f1a205f,Namespace:calico-system,Attempt:1,} returns sandbox id \"02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd\"" Sep 13 00:24:42.715000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.715000 audit[5129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4384 pid=5129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656562373532323166323564313031623731303233303865393638 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.716000 audit: BPF prog-id=208 op=LOAD Sep 13 00:24:42.716000 audit[5129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4384 pid=5129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.716000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656562373532323166323564313031623731303233303865393638 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit: BPF prog-id=209 op=LOAD Sep 13 00:24:42.717000 audit[5129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4384 pid=5129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656562373532323166323564313031623731303233303865393638 Sep 13 00:24:42.717000 audit: BPF prog-id=209 op=UNLOAD Sep 13 00:24:42.717000 audit: BPF prog-id=208 op=UNLOAD Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { perfmon } for pid=5129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit[5129]: AVC avc: denied { bpf } for pid=5129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:42.717000 audit: BPF prog-id=210 op=LOAD Sep 13 00:24:42.717000 audit[5129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4384 pid=5129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.717000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656562373532323166323564313031623731303233303865393638 Sep 13 00:24:42.768230 env[1742]: time="2025-09-13T00:24:42.768166347Z" level=info msg="StartContainer for \"56eeb75221f25d101b7102308e9681890d92a88400d9e304aece4e0b76ceb6ea\" returns successfully" Sep 13 00:24:42.779000 audit[5170]: NETFILTER_CFG table=filter:109 family=2 entries=163 op=nft_register_chain pid=5170 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 00:24:42.779000 audit[5170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=93812 a0=3 a1=fffff13f96a0 a2=0 a3=ffffa8839fa8 items=0 ppid=4085 pid=5170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.779000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 00:24:42.862393 kubelet[2740]: I0913 00:24:42.860629 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-ths8j" podStartSLOduration=58.858667657 podStartE2EDuration="58.858667657s" podCreationTimestamp="2025-09-13 00:23:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 00:24:42.834343963 +0000 UTC m=+64.791642772" watchObservedRunningTime="2025-09-13 00:24:42.858667657 +0000 UTC m=+64.815966466" Sep 13 00:24:42.890000 audit[5175]: NETFILTER_CFG table=filter:110 family=2 entries=14 op=nft_register_rule pid=5175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:42.890000 audit[5175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe9ed5e50 a2=0 a3=1 items=0 ppid=2845 pid=5175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.890000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:42.898000 audit[5175]: NETFILTER_CFG table=nat:111 family=2 entries=44 op=nft_register_rule pid=5175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:42.898000 audit[5175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe9ed5e50 a2=0 a3=1 items=0 ppid=2845 pid=5175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.898000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:42.921000 audit[5177]: NETFILTER_CFG table=filter:112 family=2 entries=14 op=nft_register_rule pid=5177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:42.921000 audit[5177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe446f880 a2=0 a3=1 items=0 ppid=2845 pid=5177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.921000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:42.967000 audit[5177]: NETFILTER_CFG table=nat:113 family=2 entries=56 op=nft_register_chain pid=5177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:42.967000 audit[5177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffe446f880 a2=0 a3=1 items=0 ppid=2845 pid=5177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:42.967000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:43.108167 systemd-networkd[1463]: calic11cb0f14ef: Gained IPv6LL Sep 13 00:24:43.235832 systemd-networkd[1463]: calibe9f1c5192a: Gained IPv6LL Sep 13 00:24:45.924984 systemd[1]: Started sshd@8-172.31.25.123:22-139.178.89.65:55794.service. Sep 13 00:24:45.937573 kernel: kauditd_printk_skb: 938 callbacks suppressed Sep 13 00:24:45.937730 kernel: audit: type=1130 audit(1757723085.925:1373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.123:22-139.178.89.65:55794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:45.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.123:22-139.178.89.65:55794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:46.049096 env[1742]: time="2025-09-13T00:24:46.049037584Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:46.054374 env[1742]: time="2025-09-13T00:24:46.054299652Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:46.058089 env[1742]: time="2025-09-13T00:24:46.058014174Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:46.061632 env[1742]: time="2025-09-13T00:24:46.061578372Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:46.062752 env[1742]: time="2025-09-13T00:24:46.062704617Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 13 00:24:46.069283 env[1742]: time="2025-09-13T00:24:46.068836572Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 13 00:24:46.116000 audit[5182]: USER_ACCT pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.117601 sshd[5182]: Accepted publickey for core from 139.178.89.65 port 55794 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:24:46.128000 audit[5182]: CRED_ACQ pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.142909 kernel: audit: type=1101 audit(1757723086.116:1374): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.143156 kernel: audit: type=1103 audit(1757723086.128:1375): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.152755 kernel: audit: type=1006 audit(1757723086.129:1376): pid=5182 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Sep 13 00:24:46.129000 audit[5182]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde4bc120 a2=3 a3=1 items=0 ppid=1 pid=5182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:46.160260 env[1742]: time="2025-09-13T00:24:46.160164454Z" level=info msg="CreateContainer within sandbox \"69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 13 00:24:46.163423 sshd[5182]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:24:46.167981 kernel: audit: type=1300 audit(1757723086.129:1376): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde4bc120 a2=3 a3=1 items=0 ppid=1 pid=5182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:46.129000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:24:46.174341 kernel: audit: type=1327 audit(1757723086.129:1376): proctitle=737368643A20636F7265205B707269765D Sep 13 00:24:46.183391 systemd-logind[1734]: New session 9 of user core. Sep 13 00:24:46.185501 systemd[1]: Started session-9.scope. Sep 13 00:24:46.197000 audit[5182]: USER_START pid=5182 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.212094 kernel: audit: type=1105 audit(1757723086.197:1377): pid=5182 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.239261 kernel: audit: type=1103 audit(1757723086.211:1378): pid=5186 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.211000 audit[5186]: CRED_ACQ pid=5186 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.290887 env[1742]: time="2025-09-13T00:24:46.290798540Z" level=info msg="CreateContainer within sandbox \"69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618\"" Sep 13 00:24:46.300350 env[1742]: time="2025-09-13T00:24:46.296793466Z" level=info msg="StartContainer for \"b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618\"" Sep 13 00:24:46.382705 systemd[1]: Started cri-containerd-b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618.scope. Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.509378 kernel: audit: type=1400 audit(1757723086.492:1379): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.509547 kernel: audit: type=1400 audit(1757723086.492:1380): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.502000 audit: BPF prog-id=211 op=LOAD Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4473 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:46.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386662343039346236306530346336313739333131336361613535 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4473 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:46.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386662343039346236306530346336313739333131336361613535 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit: BPF prog-id=212 op=LOAD Sep 13 00:24:46.510000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4473 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:46.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386662343039346236306530346336313739333131336361613535 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit: BPF prog-id=213 op=LOAD Sep 13 00:24:46.510000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4473 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:46.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386662343039346236306530346336313739333131336361613535 Sep 13 00:24:46.510000 audit: BPF prog-id=213 op=UNLOAD Sep 13 00:24:46.510000 audit: BPF prog-id=212 op=UNLOAD Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:46.510000 audit: BPF prog-id=214 op=LOAD Sep 13 00:24:46.510000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4473 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:46.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386662343039346236306530346336313739333131336361613535 Sep 13 00:24:46.564343 sshd[5182]: pam_unix(sshd:session): session closed for user core Sep 13 00:24:46.565000 audit[5182]: USER_END pid=5182 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.565000 audit[5182]: CRED_DISP pid=5182 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:46.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.123:22-139.178.89.65:55794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:46.568866 systemd[1]: session-9.scope: Deactivated successfully. Sep 13 00:24:46.570020 systemd-logind[1734]: Session 9 logged out. Waiting for processes to exit. Sep 13 00:24:46.570332 systemd[1]: sshd@8-172.31.25.123:22-139.178.89.65:55794.service: Deactivated successfully. Sep 13 00:24:46.572486 systemd-logind[1734]: Removed session 9. Sep 13 00:24:46.595306 env[1742]: time="2025-09-13T00:24:46.595142113Z" level=info msg="StartContainer for \"b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618\" returns successfully" Sep 13 00:24:47.933228 systemd[1]: run-containerd-runc-k8s.io-b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618-runc.mxFmlq.mount: Deactivated successfully. Sep 13 00:24:48.011051 kubelet[2740]: I0913 00:24:48.010916 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-68555b4f5d-4fh4t" podStartSLOduration=30.518068712 podStartE2EDuration="37.0108917s" podCreationTimestamp="2025-09-13 00:24:11 +0000 UTC" firstStartedPulling="2025-09-13 00:24:39.574320106 +0000 UTC m=+61.531618891" lastFinishedPulling="2025-09-13 00:24:46.067143034 +0000 UTC m=+68.024441879" observedRunningTime="2025-09-13 00:24:46.876293563 +0000 UTC m=+68.833592372" watchObservedRunningTime="2025-09-13 00:24:48.0108917 +0000 UTC m=+69.968190473" Sep 13 00:24:48.968912 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4109217670.mount: Deactivated successfully. Sep 13 00:24:49.006914 env[1742]: time="2025-09-13T00:24:49.006830987Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:49.012094 env[1742]: time="2025-09-13T00:24:49.012024266Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:49.014886 env[1742]: time="2025-09-13T00:24:49.014813304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:49.018600 env[1742]: time="2025-09-13T00:24:49.018536392Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:49.020494 env[1742]: time="2025-09-13T00:24:49.020436223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 13 00:24:49.024856 env[1742]: time="2025-09-13T00:24:49.024610191Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 00:24:49.029259 env[1742]: time="2025-09-13T00:24:49.029194082Z" level=info msg="CreateContainer within sandbox \"ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 13 00:24:49.062082 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1559564052.mount: Deactivated successfully. Sep 13 00:24:49.069465 env[1742]: time="2025-09-13T00:24:49.069402899Z" level=info msg="CreateContainer within sandbox \"ed6c615bc2f222845d8847e0587f4ab8e6b61fb2d7d40d3bb6a47241c4aa944e\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"e7c0b5a583d130e5fa0b5bfea3f076bb6d58fc4af929849b4cca5aeb261d0de2\"" Sep 13 00:24:49.070716 env[1742]: time="2025-09-13T00:24:49.070662333Z" level=info msg="StartContainer for \"e7c0b5a583d130e5fa0b5bfea3f076bb6d58fc4af929849b4cca5aeb261d0de2\"" Sep 13 00:24:49.157740 systemd[1]: Started cri-containerd-e7c0b5a583d130e5fa0b5bfea3f076bb6d58fc4af929849b4cca5aeb261d0de2.scope. Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.195000 audit: BPF prog-id=215 op=LOAD Sep 13 00:24:49.197000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.197000 audit[5273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4031 pid=5273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:49.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537633062356135383364313330653566613062356266656133663037 Sep 13 00:24:49.197000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.197000 audit[5273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4031 pid=5273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:49.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537633062356135383364313330653566613062356266656133663037 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.198000 audit: BPF prog-id=216 op=LOAD Sep 13 00:24:49.198000 audit[5273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4031 pid=5273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:49.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537633062356135383364313330653566613062356266656133663037 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.200000 audit: BPF prog-id=217 op=LOAD Sep 13 00:24:49.200000 audit[5273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4031 pid=5273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:49.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537633062356135383364313330653566613062356266656133663037 Sep 13 00:24:49.201000 audit: BPF prog-id=217 op=UNLOAD Sep 13 00:24:49.201000 audit: BPF prog-id=216 op=UNLOAD Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { perfmon } for pid=5273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit[5273]: AVC avc: denied { bpf } for pid=5273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:49.201000 audit: BPF prog-id=218 op=LOAD Sep 13 00:24:49.201000 audit[5273]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4031 pid=5273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:49.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537633062356135383364313330653566613062356266656133663037 Sep 13 00:24:49.258583 env[1742]: time="2025-09-13T00:24:49.258328341Z" level=info msg="StartContainer for \"e7c0b5a583d130e5fa0b5bfea3f076bb6d58fc4af929849b4cca5aeb261d0de2\" returns successfully" Sep 13 00:24:49.909000 audit[5304]: NETFILTER_CFG table=filter:114 family=2 entries=13 op=nft_register_rule pid=5304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:49.909000 audit[5304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff9c4ec30 a2=0 a3=1 items=0 ppid=2845 pid=5304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:49.909000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:49.914000 audit[5304]: NETFILTER_CFG table=nat:115 family=2 entries=27 op=nft_register_chain pid=5304 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:49.914000 audit[5304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=fffff9c4ec30 a2=0 a3=1 items=0 ppid=2845 pid=5304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:49.914000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:51.591328 systemd[1]: Started sshd@9-172.31.25.123:22-139.178.89.65:52654.service. Sep 13 00:24:51.597212 kernel: kauditd_printk_skb: 121 callbacks suppressed Sep 13 00:24:51.597425 kernel: audit: type=1130 audit(1757723091.592:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.123:22-139.178.89.65:52654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:51.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.123:22-139.178.89.65:52654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:51.777000 audit[5306]: USER_ACCT pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:51.779060 sshd[5306]: Accepted publickey for core from 139.178.89.65 port 52654 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:24:51.789000 audit[5306]: CRED_ACQ pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:51.792043 sshd[5306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:24:51.800257 kernel: audit: type=1101 audit(1757723091.777:1421): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:51.800504 kernel: audit: type=1103 audit(1757723091.789:1422): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:51.807389 kernel: audit: type=1006 audit(1757723091.789:1423): pid=5306 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 13 00:24:51.789000 audit[5306]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde5cfb80 a2=3 a3=1 items=0 ppid=1 pid=5306 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:51.810267 systemd[1]: Started session-10.scope. Sep 13 00:24:51.811498 systemd-logind[1734]: New session 10 of user core. Sep 13 00:24:51.819895 kernel: audit: type=1300 audit(1757723091.789:1423): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde5cfb80 a2=3 a3=1 items=0 ppid=1 pid=5306 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:51.789000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:24:51.825864 kernel: audit: type=1327 audit(1757723091.789:1423): proctitle=737368643A20636F7265205B707269765D Sep 13 00:24:51.846000 audit[5306]: USER_START pid=5306 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:51.859000 audit[5308]: CRED_ACQ pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:51.871508 kernel: audit: type=1105 audit(1757723091.846:1424): pid=5306 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:51.871684 kernel: audit: type=1103 audit(1757723091.859:1425): pid=5308 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:52.180766 sshd[5306]: pam_unix(sshd:session): session closed for user core Sep 13 00:24:52.183000 audit[5306]: USER_END pid=5306 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:52.187718 systemd[1]: session-10.scope: Deactivated successfully. Sep 13 00:24:52.189106 systemd[1]: sshd@9-172.31.25.123:22-139.178.89.65:52654.service: Deactivated successfully. Sep 13 00:24:52.183000 audit[5306]: CRED_DISP pid=5306 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:52.206452 kernel: audit: type=1106 audit(1757723092.183:1426): pid=5306 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:52.206584 kernel: audit: type=1104 audit(1757723092.183:1427): pid=5306 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:52.207265 systemd-logind[1734]: Session 10 logged out. Waiting for processes to exit. Sep 13 00:24:52.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.123:22-139.178.89.65:52654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:52.209198 systemd-logind[1734]: Removed session 10. Sep 13 00:24:52.742156 env[1742]: time="2025-09-13T00:24:52.742101564Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:52.746745 env[1742]: time="2025-09-13T00:24:52.746695497Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:52.750650 env[1742]: time="2025-09-13T00:24:52.750602401Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:52.754515 env[1742]: time="2025-09-13T00:24:52.754468049Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:52.756204 env[1742]: time="2025-09-13T00:24:52.756116309Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 00:24:52.760853 env[1742]: time="2025-09-13T00:24:52.760791650Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 00:24:52.763704 env[1742]: time="2025-09-13T00:24:52.763567390Z" level=info msg="CreateContainer within sandbox \"b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 00:24:52.801216 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2605509365.mount: Deactivated successfully. Sep 13 00:24:52.807803 env[1742]: time="2025-09-13T00:24:52.807718489Z" level=info msg="CreateContainer within sandbox \"b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"7411f81220886788de61e6e8d3a52a5bf896af9006550ab3e53f6a755b43d942\"" Sep 13 00:24:52.811117 env[1742]: time="2025-09-13T00:24:52.811044445Z" level=info msg="StartContainer for \"7411f81220886788de61e6e8d3a52a5bf896af9006550ab3e53f6a755b43d942\"" Sep 13 00:24:52.859705 systemd[1]: Started cri-containerd-7411f81220886788de61e6e8d3a52a5bf896af9006550ab3e53f6a755b43d942.scope. Sep 13 00:24:52.893599 systemd[1]: run-containerd-runc-k8s.io-7411f81220886788de61e6e8d3a52a5bf896af9006550ab3e53f6a755b43d942-runc.qht2f4.mount: Deactivated successfully. Sep 13 00:24:52.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.930000 audit: BPF prog-id=219 op=LOAD Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4695 pid=5332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734313166383132323038383637383864653631653665386433613532 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4695 pid=5332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734313166383132323038383637383864653631653665386433613532 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit: BPF prog-id=220 op=LOAD Sep 13 00:24:52.932000 audit[5332]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4695 pid=5332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734313166383132323038383637383864653631653665386433613532 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.932000 audit: BPF prog-id=221 op=LOAD Sep 13 00:24:52.932000 audit[5332]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4695 pid=5332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:52.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734313166383132323038383637383864653631653665386433613532 Sep 13 00:24:52.933000 audit: BPF prog-id=221 op=UNLOAD Sep 13 00:24:52.933000 audit: BPF prog-id=220 op=UNLOAD Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { perfmon } for pid=5332 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit[5332]: AVC avc: denied { bpf } for pid=5332 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:52.933000 audit: BPF prog-id=222 op=LOAD Sep 13 00:24:52.933000 audit[5332]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4695 pid=5332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:52.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734313166383132323038383637383864653631653665386433613532 Sep 13 00:24:53.015243 env[1742]: time="2025-09-13T00:24:53.015082790Z" level=info msg="StartContainer for \"7411f81220886788de61e6e8d3a52a5bf896af9006550ab3e53f6a755b43d942\" returns successfully" Sep 13 00:24:53.108618 env[1742]: time="2025-09-13T00:24:53.108555727Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:53.116743 env[1742]: time="2025-09-13T00:24:53.116689347Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:53.123236 env[1742]: time="2025-09-13T00:24:53.123180949Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:53.128865 env[1742]: time="2025-09-13T00:24:53.128808088Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:53.132005 env[1742]: time="2025-09-13T00:24:53.129838247Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 00:24:53.136750 env[1742]: time="2025-09-13T00:24:53.136692647Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 13 00:24:53.139430 env[1742]: time="2025-09-13T00:24:53.139370262Z" level=info msg="CreateContainer within sandbox \"29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 00:24:53.190685 env[1742]: time="2025-09-13T00:24:53.190618192Z" level=info msg="CreateContainer within sandbox \"29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"bd4acc17a32d04a7c7cdc8561e78620962959f4730e2544763bed7011f117124\"" Sep 13 00:24:53.193379 env[1742]: time="2025-09-13T00:24:53.192193251Z" level=info msg="StartContainer for \"bd4acc17a32d04a7c7cdc8561e78620962959f4730e2544763bed7011f117124\"" Sep 13 00:24:53.257530 systemd[1]: Started cri-containerd-bd4acc17a32d04a7c7cdc8561e78620962959f4730e2544763bed7011f117124.scope. Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.380000 audit: BPF prog-id=223 op=LOAD Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4988 pid=5383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:53.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264346163633137613332643034613763376364633835363165373836 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4988 pid=5383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:53.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264346163633137613332643034613763376364633835363165373836 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit: BPF prog-id=224 op=LOAD Sep 13 00:24:53.381000 audit[5383]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4988 pid=5383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:53.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264346163633137613332643034613763376364633835363165373836 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit: BPF prog-id=225 op=LOAD Sep 13 00:24:53.381000 audit[5383]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4988 pid=5383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:53.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264346163633137613332643034613763376364633835363165373836 Sep 13 00:24:53.381000 audit: BPF prog-id=225 op=UNLOAD Sep 13 00:24:53.381000 audit: BPF prog-id=224 op=UNLOAD Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { perfmon } for pid=5383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit[5383]: AVC avc: denied { bpf } for pid=5383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:53.381000 audit: BPF prog-id=226 op=LOAD Sep 13 00:24:53.381000 audit[5383]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4988 pid=5383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:53.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264346163633137613332643034613763376364633835363165373836 Sep 13 00:24:53.473367 env[1742]: time="2025-09-13T00:24:53.473283454Z" level=info msg="StartContainer for \"bd4acc17a32d04a7c7cdc8561e78620962959f4730e2544763bed7011f117124\" returns successfully" Sep 13 00:24:53.940160 kubelet[2740]: I0913 00:24:53.940058 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-547d6b8874-zxxxp" podStartSLOduration=42.90240122 podStartE2EDuration="53.940036854s" podCreationTimestamp="2025-09-13 00:24:00 +0000 UTC" firstStartedPulling="2025-09-13 00:24:42.095689226 +0000 UTC m=+64.052988011" lastFinishedPulling="2025-09-13 00:24:53.133324872 +0000 UTC m=+75.090623645" observedRunningTime="2025-09-13 00:24:53.940014054 +0000 UTC m=+75.897312863" watchObservedRunningTime="2025-09-13 00:24:53.940036854 +0000 UTC m=+75.897335663" Sep 13 00:24:53.940847 kubelet[2740]: I0913 00:24:53.940772 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-6c8cfb57d9-4528b" podStartSLOduration=6.402451144 podStartE2EDuration="19.940759163s" podCreationTimestamp="2025-09-13 00:24:34 +0000 UTC" firstStartedPulling="2025-09-13 00:24:35.484389141 +0000 UTC m=+57.441687926" lastFinishedPulling="2025-09-13 00:24:49.02269716 +0000 UTC m=+70.979995945" observedRunningTime="2025-09-13 00:24:49.878021763 +0000 UTC m=+71.835320572" watchObservedRunningTime="2025-09-13 00:24:53.940759163 +0000 UTC m=+75.898057960" Sep 13 00:24:54.002000 audit[5424]: NETFILTER_CFG table=filter:116 family=2 entries=12 op=nft_register_rule pid=5424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:54.002000 audit[5424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe22fda70 a2=0 a3=1 items=0 ppid=2845 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:54.002000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:54.012000 audit[5424]: NETFILTER_CFG table=nat:117 family=2 entries=22 op=nft_register_rule pid=5424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:54.012000 audit[5424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe22fda70 a2=0 a3=1 items=0 ppid=2845 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:54.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:54.923990 kubelet[2740]: I0913 00:24:54.923546 2740 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:24:54.925104 kubelet[2740]: I0913 00:24:54.924651 2740 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:24:55.020000 audit[5426]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=5426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:55.020000 audit[5426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc1fdaca0 a2=0 a3=1 items=0 ppid=2845 pid=5426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:55.020000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:55.029000 audit[5426]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=5426 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:55.029000 audit[5426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc1fdaca0 a2=0 a3=1 items=0 ppid=2845 pid=5426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:55.029000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:55.925667 kubelet[2740]: I0913 00:24:55.925626 2740 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:24:56.532140 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount901094563.mount: Deactivated successfully. Sep 13 00:24:57.218247 kernel: kauditd_printk_skb: 127 callbacks suppressed Sep 13 00:24:57.218441 kernel: audit: type=1130 audit(1757723097.209:1469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.123:22-139.178.89.65:52668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:57.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.123:22-139.178.89.65:52668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:57.210076 systemd[1]: Started sshd@10-172.31.25.123:22-139.178.89.65:52668.service. Sep 13 00:24:57.432000 audit[5429]: USER_ACCT pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.444200 sshd[5429]: Accepted publickey for core from 139.178.89.65 port 52668 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:24:57.447642 sshd[5429]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:24:57.433000 audit[5393]: AVC avc: denied { watch } for pid=5393 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_24_23.874072406/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c220,c431 tclass=file permissive=0 Sep 13 00:24:57.460082 kernel: audit: type=1101 audit(1757723097.432:1470): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.460275 kernel: audit: type=1400 audit(1757723097.433:1471): avc: denied { watch } for pid=5393 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_24_23.874072406/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c220,c431 tclass=file permissive=0 Sep 13 00:24:57.490420 kernel: audit: type=1300 audit(1757723097.433:1471): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4002916ce0 a2=fc6 a3=0 items=0 ppid=4988 pid=5393 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 key=(null) Sep 13 00:24:57.433000 audit[5393]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4002916ce0 a2=fc6 a3=0 items=0 ppid=4988 pid=5393 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 key=(null) Sep 13 00:24:57.471794 systemd-logind[1734]: New session 11 of user core. Sep 13 00:24:57.433000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:24:57.500147 systemd[1]: Started session-11.scope. Sep 13 00:24:57.506661 kernel: audit: type=1327 audit(1757723097.433:1471): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:24:57.445000 audit[5429]: CRED_ACQ pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.517840 kernel: audit: type=1103 audit(1757723097.445:1472): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.533874 kernel: audit: type=1006 audit(1757723097.445:1473): pid=5429 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 13 00:24:57.445000 audit[5429]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0d03d90 a2=3 a3=1 items=0 ppid=1 pid=5429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:57.548848 kernel: audit: type=1300 audit(1757723097.445:1473): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0d03d90 a2=3 a3=1 items=0 ppid=1 pid=5429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:57.445000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:24:57.558817 kernel: audit: type=1327 audit(1757723097.445:1473): proctitle=737368643A20636F7265205B707269765D Sep 13 00:24:57.560233 kubelet[2740]: I0913 00:24:57.560125 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-547d6b8874-xlz4j" podStartSLOduration=45.775887515 podStartE2EDuration="57.560102708s" podCreationTimestamp="2025-09-13 00:24:00 +0000 UTC" firstStartedPulling="2025-09-13 00:24:40.975003786 +0000 UTC m=+62.932302571" lastFinishedPulling="2025-09-13 00:24:52.759218991 +0000 UTC m=+74.716517764" observedRunningTime="2025-09-13 00:24:53.967972101 +0000 UTC m=+75.925270910" watchObservedRunningTime="2025-09-13 00:24:57.560102708 +0000 UTC m=+79.517401493" Sep 13 00:24:57.519000 audit[5429]: USER_START pid=5429 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.572886 kernel: audit: type=1105 audit(1757723097.519:1474): pid=5429 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.522000 audit[5431]: CRED_ACQ pid=5431 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.668000 audit[5440]: NETFILTER_CFG table=filter:120 family=2 entries=11 op=nft_register_rule pid=5440 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:57.668000 audit[5440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe5488cf0 a2=0 a3=1 items=0 ppid=2845 pid=5440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:57.668000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:57.677000 audit[5440]: NETFILTER_CFG table=nat:121 family=2 entries=29 op=nft_register_chain pid=5440 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:57.677000 audit[5440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe5488cf0 a2=0 a3=1 items=0 ppid=2845 pid=5440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:57.677000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:57.879000 audit[5343]: AVC avc: denied { watch } for pid=5343 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_24_23.3876893614/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c289,c779 tclass=file permissive=0 Sep 13 00:24:57.879000 audit[5343]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000fca060 a2=fc6 a3=0 items=0 ppid=4695 pid=5343 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c779 key=(null) Sep 13 00:24:57.879000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:24:57.979881 sshd[5429]: pam_unix(sshd:session): session closed for user core Sep 13 00:24:57.980000 audit[5429]: USER_END pid=5429 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.981000 audit[5429]: CRED_DISP pid=5429 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:24:57.984413 systemd[1]: sshd@10-172.31.25.123:22-139.178.89.65:52668.service: Deactivated successfully. Sep 13 00:24:57.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.123:22-139.178.89.65:52668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:24:57.985838 systemd[1]: session-11.scope: Deactivated successfully. Sep 13 00:24:57.988299 systemd-logind[1734]: Session 11 logged out. Waiting for processes to exit. Sep 13 00:24:57.992938 systemd-logind[1734]: Removed session 11. Sep 13 00:24:58.040475 env[1742]: time="2025-09-13T00:24:58.040396932Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:58.046079 env[1742]: time="2025-09-13T00:24:58.046003223Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:58.054226 env[1742]: time="2025-09-13T00:24:58.054153890Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:58.061440 env[1742]: time="2025-09-13T00:24:58.061364075Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:58.064443 env[1742]: time="2025-09-13T00:24:58.063058749Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 13 00:24:58.070537 env[1742]: time="2025-09-13T00:24:58.070469083Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 13 00:24:58.073334 env[1742]: time="2025-09-13T00:24:58.073248253Z" level=info msg="CreateContainer within sandbox \"02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 13 00:24:58.143858 env[1742]: time="2025-09-13T00:24:58.143637860Z" level=info msg="CreateContainer within sandbox \"02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be\"" Sep 13 00:24:58.145328 env[1742]: time="2025-09-13T00:24:58.145274838Z" level=info msg="StartContainer for \"e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be\"" Sep 13 00:24:58.148356 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2501716290.mount: Deactivated successfully. Sep 13 00:24:58.221515 systemd[1]: Started cri-containerd-e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be.scope. Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.375000 audit: BPF prog-id=227 op=LOAD Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=5081 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:58.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643034353565613733613264633430623838616534376131313261 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=5081 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:58.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643034353565613733613264633430623838616534376131313261 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit: BPF prog-id=228 op=LOAD Sep 13 00:24:58.377000 audit[5450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=5081 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:58.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643034353565613733613264633430623838616534376131313261 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit: BPF prog-id=229 op=LOAD Sep 13 00:24:58.377000 audit[5450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=5081 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:58.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643034353565613733613264633430623838616534376131313261 Sep 13 00:24:58.377000 audit: BPF prog-id=229 op=UNLOAD Sep 13 00:24:58.377000 audit: BPF prog-id=228 op=UNLOAD Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { perfmon } for pid=5450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit[5450]: AVC avc: denied { bpf } for pid=5450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:24:58.377000 audit: BPF prog-id=230 op=LOAD Sep 13 00:24:58.377000 audit[5450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=5081 pid=5450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:58.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643034353565613733613264633430623838616534376131313261 Sep 13 00:24:58.477170 env[1742]: time="2025-09-13T00:24:58.477095338Z" level=info msg="StartContainer for \"e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be\" returns successfully" Sep 13 00:24:59.023000 audit[5495]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=5495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:59.023000 audit[5495]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc8259a50 a2=0 a3=1 items=0 ppid=2845 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:59.023000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:59.028000 audit[5495]: NETFILTER_CFG table=nat:123 family=2 entries=24 op=nft_register_rule pid=5495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:24:59.028000 audit[5495]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffc8259a50 a2=0 a3=1 items=0 ppid=2845 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:24:59.028000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:24:59.129679 systemd[1]: run-containerd-runc-k8s.io-e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be-runc.lj9BN4.mount: Deactivated successfully. Sep 13 00:24:59.875398 env[1742]: time="2025-09-13T00:24:59.875341212Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:59.881800 env[1742]: time="2025-09-13T00:24:59.881746395Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:59.889932 env[1742]: time="2025-09-13T00:24:59.889521819Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:59.902289 env[1742]: time="2025-09-13T00:24:59.902230076Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 00:24:59.903446 env[1742]: time="2025-09-13T00:24:59.903377799Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 13 00:24:59.915058 env[1742]: time="2025-09-13T00:24:59.914909342Z" level=info msg="CreateContainer within sandbox \"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 13 00:24:59.975395 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3003709801.mount: Deactivated successfully. Sep 13 00:24:59.977941 env[1742]: time="2025-09-13T00:24:59.977842057Z" level=info msg="CreateContainer within sandbox \"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"6b126d13ea1c0971305e3ed0a3ecc89ab6faa6e19a6d2616b7266d23edcc0e06\"" Sep 13 00:24:59.980001 env[1742]: time="2025-09-13T00:24:59.979831910Z" level=info msg="StartContainer for \"6b126d13ea1c0971305e3ed0a3ecc89ab6faa6e19a6d2616b7266d23edcc0e06\"" Sep 13 00:25:00.044658 systemd[1]: Started cri-containerd-6b126d13ea1c0971305e3ed0a3ecc89ab6faa6e19a6d2616b7266d23edcc0e06.scope. Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4384 pid=5517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:00.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662313236643133656131633039373133303565336564306133656363 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit: BPF prog-id=231 op=LOAD Sep 13 00:25:00.116000 audit[5517]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4384 pid=5517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:00.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662313236643133656131633039373133303565336564306133656363 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit: BPF prog-id=232 op=LOAD Sep 13 00:25:00.116000 audit[5517]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4384 pid=5517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:00.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662313236643133656131633039373133303565336564306133656363 Sep 13 00:25:00.116000 audit: BPF prog-id=232 op=UNLOAD Sep 13 00:25:00.116000 audit: BPF prog-id=231 op=UNLOAD Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { perfmon } for pid=5517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit[5517]: AVC avc: denied { bpf } for pid=5517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:25:00.116000 audit: BPF prog-id=233 op=LOAD Sep 13 00:25:00.116000 audit[5517]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4384 pid=5517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:00.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662313236643133656131633039373133303565336564306133656363 Sep 13 00:25:00.155801 env[1742]: time="2025-09-13T00:25:00.155646401Z" level=info msg="StartContainer for \"6b126d13ea1c0971305e3ed0a3ecc89ab6faa6e19a6d2616b7266d23edcc0e06\" returns successfully" Sep 13 00:25:00.523080 kubelet[2740]: I0913 00:25:00.523029 2740 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 13 00:25:00.523771 kubelet[2740]: I0913 00:25:00.523098 2740 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 13 00:25:00.967062 kubelet[2740]: I0913 00:25:00.966733 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-7988f88666-w5ml5" podStartSLOduration=35.520175693 podStartE2EDuration="50.966708524s" podCreationTimestamp="2025-09-13 00:24:10 +0000 UTC" firstStartedPulling="2025-09-13 00:24:42.619897999 +0000 UTC m=+64.577196784" lastFinishedPulling="2025-09-13 00:24:58.06643083 +0000 UTC m=+80.023729615" observedRunningTime="2025-09-13 00:24:58.963062716 +0000 UTC m=+80.920361525" watchObservedRunningTime="2025-09-13 00:25:00.966708524 +0000 UTC m=+82.924007321" Sep 13 00:25:03.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.123:22-139.178.89.65:56004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:03.007115 systemd[1]: Started sshd@11-172.31.25.123:22-139.178.89.65:56004.service. Sep 13 00:25:03.009666 kernel: kauditd_printk_skb: 119 callbacks suppressed Sep 13 00:25:03.009807 kernel: audit: type=1130 audit(1757723103.006:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.123:22-139.178.89.65:56004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:03.200544 sshd[5568]: Accepted publickey for core from 139.178.89.65 port 56004 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:03.199000 audit[5568]: USER_ACCT pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.203858 sshd[5568]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:03.201000 audit[5568]: CRED_ACQ pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.221861 kernel: audit: type=1101 audit(1757723103.199:1509): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.222026 kernel: audit: type=1103 audit(1757723103.201:1510): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.228522 kernel: audit: type=1006 audit(1757723103.201:1511): pid=5568 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 13 00:25:03.201000 audit[5568]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd482b8c0 a2=3 a3=1 items=0 ppid=1 pid=5568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:03.239275 kernel: audit: type=1300 audit(1757723103.201:1511): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd482b8c0 a2=3 a3=1 items=0 ppid=1 pid=5568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:03.201000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:03.242984 kernel: audit: type=1327 audit(1757723103.201:1511): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:03.249081 systemd-logind[1734]: New session 12 of user core. Sep 13 00:25:03.250193 systemd[1]: Started session-12.scope. Sep 13 00:25:03.259000 audit[5568]: USER_START pid=5568 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.275342 kernel: audit: type=1105 audit(1757723103.259:1512): pid=5568 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.275495 kernel: audit: type=1103 audit(1757723103.273:1513): pid=5570 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.273000 audit[5570]: CRED_ACQ pid=5570 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.522312 sshd[5568]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:03.523000 audit[5568]: USER_END pid=5568 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.529213 systemd-logind[1734]: Session 12 logged out. Waiting for processes to exit. Sep 13 00:25:03.532302 systemd[1]: session-12.scope: Deactivated successfully. Sep 13 00:25:03.534707 systemd-logind[1734]: Removed session 12. Sep 13 00:25:03.525000 audit[5568]: CRED_DISP pid=5568 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.536771 systemd[1]: sshd@11-172.31.25.123:22-139.178.89.65:56004.service: Deactivated successfully. Sep 13 00:25:03.545742 kernel: audit: type=1106 audit(1757723103.523:1514): pid=5568 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.545855 kernel: audit: type=1104 audit(1757723103.525:1515): pid=5568 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:03.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.123:22-139.178.89.65:56004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:08.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.123:22-139.178.89.65:56012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:08.560469 systemd[1]: Started sshd@12-172.31.25.123:22-139.178.89.65:56012.service. Sep 13 00:25:08.563054 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:25:08.563140 kernel: audit: type=1130 audit(1757723108.559:1517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.123:22-139.178.89.65:56012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:08.734000 audit[5583]: USER_ACCT pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:08.736238 sshd[5583]: Accepted publickey for core from 139.178.89.65 port 56012 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:08.747000 audit[5583]: CRED_ACQ pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:08.749481 sshd[5583]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:08.758024 kernel: audit: type=1101 audit(1757723108.734:1518): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:08.758517 kernel: audit: type=1103 audit(1757723108.747:1519): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:08.758606 kernel: audit: type=1006 audit(1757723108.747:1520): pid=5583 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 13 00:25:08.747000 audit[5583]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2d5d600 a2=3 a3=1 items=0 ppid=1 pid=5583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:08.770075 systemd[1]: Started session-13.scope. Sep 13 00:25:08.771775 systemd-logind[1734]: New session 13 of user core. Sep 13 00:25:08.775823 kernel: audit: type=1300 audit(1757723108.747:1520): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2d5d600 a2=3 a3=1 items=0 ppid=1 pid=5583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:08.776145 kernel: audit: type=1327 audit(1757723108.747:1520): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:08.747000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:08.786000 audit[5583]: USER_START pid=5583 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:08.789000 audit[5585]: CRED_ACQ pid=5585 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:08.809274 kernel: audit: type=1105 audit(1757723108.786:1521): pid=5583 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:08.809368 kernel: audit: type=1103 audit(1757723108.789:1522): pid=5585 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:09.034184 sshd[5583]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:09.035000 audit[5583]: USER_END pid=5583 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:09.040002 systemd[1]: sshd@12-172.31.25.123:22-139.178.89.65:56012.service: Deactivated successfully. Sep 13 00:25:09.041293 systemd[1]: session-13.scope: Deactivated successfully. Sep 13 00:25:09.049423 systemd-logind[1734]: Session 13 logged out. Waiting for processes to exit. Sep 13 00:25:09.036000 audit[5583]: CRED_DISP pid=5583 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:09.058771 kernel: audit: type=1106 audit(1757723109.035:1523): pid=5583 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:09.058892 kernel: audit: type=1104 audit(1757723109.036:1524): pid=5583 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:09.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.123:22-139.178.89.65:56012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:09.060014 systemd-logind[1734]: Removed session 13. Sep 13 00:25:11.178875 systemd[1]: run-containerd-runc-k8s.io-16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713-runc.fK5gXP.mount: Deactivated successfully. Sep 13 00:25:13.379247 kubelet[2740]: I0913 00:25:13.379189 2740 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 00:25:13.453656 kubelet[2740]: I0913 00:25:13.453519 2740 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-r7dh9" podStartSLOduration=41.347129035 podStartE2EDuration="1m2.453465961s" podCreationTimestamp="2025-09-13 00:24:11 +0000 UTC" firstStartedPulling="2025-09-13 00:24:38.799228463 +0000 UTC m=+60.756527248" lastFinishedPulling="2025-09-13 00:24:59.905565389 +0000 UTC m=+81.862864174" observedRunningTime="2025-09-13 00:25:00.967232231 +0000 UTC m=+82.924531052" watchObservedRunningTime="2025-09-13 00:25:13.453465961 +0000 UTC m=+95.410764746" Sep 13 00:25:13.528000 audit[5640]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=5640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:13.528000 audit[5640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe566b710 a2=0 a3=1 items=0 ppid=2845 pid=5640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:13.528000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:13.537000 audit[5640]: NETFILTER_CFG table=nat:125 family=2 entries=36 op=nft_register_chain pid=5640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:13.537000 audit[5640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffe566b710 a2=0 a3=1 items=0 ppid=2845 pid=5640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:13.537000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:14.066613 systemd[1]: Started sshd@13-172.31.25.123:22-139.178.89.65:54634.service. Sep 13 00:25:14.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.123:22-139.178.89.65:54634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:14.071927 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:25:14.072182 kernel: audit: type=1130 audit(1757723114.067:1528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.123:22-139.178.89.65:54634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:14.291000 audit[5660]: USER_ACCT pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.297046 sshd[5660]: Accepted publickey for core from 139.178.89.65 port 54634 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:14.304019 kernel: audit: type=1101 audit(1757723114.291:1529): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.303000 audit[5660]: CRED_ACQ pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.320202 kernel: audit: type=1103 audit(1757723114.303:1530): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.320418 kernel: audit: type=1006 audit(1757723114.303:1531): pid=5660 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Sep 13 00:25:14.320483 kernel: audit: type=1300 audit(1757723114.303:1531): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4e8a130 a2=3 a3=1 items=0 ppid=1 pid=5660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:14.303000 audit[5660]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4e8a130 a2=3 a3=1 items=0 ppid=1 pid=5660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:14.303000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:14.334317 kernel: audit: type=1327 audit(1757723114.303:1531): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:14.335841 sshd[5660]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:14.346126 systemd-logind[1734]: New session 14 of user core. Sep 13 00:25:14.347438 systemd[1]: Started session-14.scope. Sep 13 00:25:14.356000 audit[5660]: USER_START pid=5660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.371886 kernel: audit: type=1105 audit(1757723114.356:1532): pid=5660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.370000 audit[5662]: CRED_ACQ pid=5662 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.382026 kernel: audit: type=1103 audit(1757723114.370:1533): pid=5662 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.637673 sshd[5660]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:14.639000 audit[5660]: USER_END pid=5660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.640000 audit[5660]: CRED_DISP pid=5660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.662405 kernel: audit: type=1106 audit(1757723114.639:1534): pid=5660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.662526 kernel: audit: type=1104 audit(1757723114.640:1535): pid=5660 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:14.652927 systemd[1]: sshd@13-172.31.25.123:22-139.178.89.65:54634.service: Deactivated successfully. Sep 13 00:25:14.654296 systemd[1]: session-14.scope: Deactivated successfully. Sep 13 00:25:14.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.123:22-139.178.89.65:54634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:14.663662 systemd-logind[1734]: Session 14 logged out. Waiting for processes to exit. Sep 13 00:25:14.665641 systemd-logind[1734]: Removed session 14. Sep 13 00:25:19.681741 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:25:19.681908 kernel: audit: type=1130 audit(1757723119.669:1537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.123:22-139.178.89.65:54646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:19.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.123:22-139.178.89.65:54646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:19.669750 systemd[1]: Started sshd@14-172.31.25.123:22-139.178.89.65:54646.service. Sep 13 00:25:19.843000 audit[5676]: USER_ACCT pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:19.844454 sshd[5676]: Accepted publickey for core from 139.178.89.65 port 54646 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:19.847527 sshd[5676]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:19.845000 audit[5676]: CRED_ACQ pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:19.856682 systemd[1]: Started session-15.scope. Sep 13 00:25:19.858489 systemd-logind[1734]: New session 15 of user core. Sep 13 00:25:19.864873 kernel: audit: type=1101 audit(1757723119.843:1538): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:19.865058 kernel: audit: type=1103 audit(1757723119.845:1539): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:19.871752 kernel: audit: type=1006 audit(1757723119.845:1540): pid=5676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Sep 13 00:25:19.845000 audit[5676]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2cc6470 a2=3 a3=1 items=0 ppid=1 pid=5676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:19.883468 kernel: audit: type=1300 audit(1757723119.845:1540): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2cc6470 a2=3 a3=1 items=0 ppid=1 pid=5676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:19.845000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:19.887334 kernel: audit: type=1327 audit(1757723119.845:1540): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:19.889069 kernel: audit: type=1105 audit(1757723119.873:1541): pid=5676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:19.873000 audit[5676]: USER_START pid=5676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:19.878000 audit[5678]: CRED_ACQ pid=5678 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:19.908908 kernel: audit: type=1103 audit(1757723119.878:1542): pid=5678 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:20.126142 sshd[5676]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:20.127000 audit[5676]: USER_END pid=5676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:20.131007 systemd-logind[1734]: Session 15 logged out. Waiting for processes to exit. Sep 13 00:25:20.133265 systemd[1]: session-15.scope: Deactivated successfully. Sep 13 00:25:20.135194 systemd-logind[1734]: Removed session 15. Sep 13 00:25:20.136454 systemd[1]: sshd@14-172.31.25.123:22-139.178.89.65:54646.service: Deactivated successfully. Sep 13 00:25:20.127000 audit[5676]: CRED_DISP pid=5676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:20.149635 kernel: audit: type=1106 audit(1757723120.127:1543): pid=5676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:20.149769 kernel: audit: type=1104 audit(1757723120.127:1544): pid=5676 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:20.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.123:22-139.178.89.65:54646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:23.363000 audit[5734]: NETFILTER_CFG table=filter:126 family=2 entries=9 op=nft_register_rule pid=5734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:23.363000 audit[5734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd49b8740 a2=0 a3=1 items=0 ppid=2845 pid=5734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:23.363000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:23.369000 audit[5734]: NETFILTER_CFG table=nat:127 family=2 entries=31 op=nft_register_chain pid=5734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:23.369000 audit[5734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd49b8740 a2=0 a3=1 items=0 ppid=2845 pid=5734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:23.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:25.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.123:22-139.178.89.65:48654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:25.154143 systemd[1]: Started sshd@15-172.31.25.123:22-139.178.89.65:48654.service. Sep 13 00:25:25.156746 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:25:25.156868 kernel: audit: type=1130 audit(1757723125.153:1548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.123:22-139.178.89.65:48654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:25.337000 audit[5736]: USER_ACCT pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.343882 sshd[5736]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:25.345784 sshd[5736]: Accepted publickey for core from 139.178.89.65 port 48654 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:25.351075 kernel: audit: type=1101 audit(1757723125.337:1549): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.342000 audit[5736]: CRED_ACQ pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.362679 kernel: audit: type=1103 audit(1757723125.342:1550): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.362834 kernel: audit: type=1006 audit(1757723125.342:1551): pid=5736 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 13 00:25:25.342000 audit[5736]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7f09880 a2=3 a3=1 items=0 ppid=1 pid=5736 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:25.380677 kernel: audit: type=1300 audit(1757723125.342:1551): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7f09880 a2=3 a3=1 items=0 ppid=1 pid=5736 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:25.372838 systemd-logind[1734]: New session 16 of user core. Sep 13 00:25:25.375807 systemd[1]: Started session-16.scope. Sep 13 00:25:25.342000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:25.385298 kernel: audit: type=1327 audit(1757723125.342:1551): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:25.385000 audit[5736]: USER_START pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.399019 kernel: audit: type=1105 audit(1757723125.385:1552): pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.398000 audit[5738]: CRED_ACQ pid=5738 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.408992 kernel: audit: type=1103 audit(1757723125.398:1553): pid=5738 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.651579 sshd[5736]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:25.652000 audit[5736]: USER_END pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.653000 audit[5736]: CRED_DISP pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.666724 systemd[1]: sshd@15-172.31.25.123:22-139.178.89.65:48654.service: Deactivated successfully. Sep 13 00:25:25.668620 systemd[1]: session-16.scope: Deactivated successfully. Sep 13 00:25:25.675850 kernel: audit: type=1106 audit(1757723125.652:1554): pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.676032 kernel: audit: type=1104 audit(1757723125.653:1555): pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.123:22-139.178.89.65:48654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:25.677521 systemd-logind[1734]: Session 16 logged out. Waiting for processes to exit. Sep 13 00:25:25.687301 systemd[1]: Started sshd@16-172.31.25.123:22-139.178.89.65:48670.service. Sep 13 00:25:25.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.123:22-139.178.89.65:48670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:25.689808 systemd-logind[1734]: Removed session 16. Sep 13 00:25:25.859000 audit[5749]: USER_ACCT pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.860470 sshd[5749]: Accepted publickey for core from 139.178.89.65 port 48670 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:25.861000 audit[5749]: CRED_ACQ pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.861000 audit[5749]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc52e9290 a2=3 a3=1 items=0 ppid=1 pid=5749 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:25.861000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:25.863736 sshd[5749]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:25.872082 systemd-logind[1734]: New session 17 of user core. Sep 13 00:25:25.873250 systemd[1]: Started session-17.scope. Sep 13 00:25:25.882000 audit[5749]: USER_START pid=5749 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:25.885000 audit[5751]: CRED_ACQ pid=5751 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.216228 sshd[5749]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:26.219000 audit[5749]: USER_END pid=5749 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.219000 audit[5749]: CRED_DISP pid=5749 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.223098 systemd[1]: session-17.scope: Deactivated successfully. Sep 13 00:25:26.224653 systemd-logind[1734]: Session 17 logged out. Waiting for processes to exit. Sep 13 00:25:26.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.123:22-139.178.89.65:48670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:26.225071 systemd[1]: sshd@16-172.31.25.123:22-139.178.89.65:48670.service: Deactivated successfully. Sep 13 00:25:26.227671 systemd-logind[1734]: Removed session 17. Sep 13 00:25:26.248822 systemd[1]: Started sshd@17-172.31.25.123:22-139.178.89.65:48682.service. Sep 13 00:25:26.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.123:22-139.178.89.65:48682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:26.439000 audit[5758]: USER_ACCT pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.441192 sshd[5758]: Accepted publickey for core from 139.178.89.65 port 48682 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:26.441000 audit[5758]: CRED_ACQ pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.442000 audit[5758]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9691a80 a2=3 a3=1 items=0 ppid=1 pid=5758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:26.442000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:26.444572 sshd[5758]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:26.454628 systemd[1]: Started session-18.scope. Sep 13 00:25:26.456107 systemd-logind[1734]: New session 18 of user core. Sep 13 00:25:26.466000 audit[5758]: USER_START pid=5758 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.468000 audit[5760]: CRED_ACQ pid=5760 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.713645 sshd[5758]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:26.715000 audit[5758]: USER_END pid=5758 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.716000 audit[5758]: CRED_DISP pid=5758 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:26.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.123:22-139.178.89.65:48682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:26.720306 systemd[1]: sshd@17-172.31.25.123:22-139.178.89.65:48682.service: Deactivated successfully. Sep 13 00:25:26.721639 systemd[1]: session-18.scope: Deactivated successfully. Sep 13 00:25:26.725028 systemd-logind[1734]: Session 18 logged out. Waiting for processes to exit. Sep 13 00:25:26.727364 systemd-logind[1734]: Removed session 18. Sep 13 00:25:31.743851 systemd[1]: Started sshd@18-172.31.25.123:22-139.178.89.65:39202.service. Sep 13 00:25:31.755842 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 13 00:25:31.756015 kernel: audit: type=1130 audit(1757723131.743:1575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.123:22-139.178.89.65:39202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:31.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.123:22-139.178.89.65:39202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:31.915000 audit[5770]: USER_ACCT pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:31.917196 sshd[5770]: Accepted publickey for core from 139.178.89.65 port 39202 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:31.920437 sshd[5770]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:31.918000 audit[5770]: CRED_ACQ pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:31.938125 kernel: audit: type=1101 audit(1757723131.915:1576): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:31.938252 kernel: audit: type=1103 audit(1757723131.918:1577): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:31.944725 kernel: audit: type=1006 audit(1757723131.918:1578): pid=5770 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 13 00:25:31.918000 audit[5770]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1422630 a2=3 a3=1 items=0 ppid=1 pid=5770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:31.955266 kernel: audit: type=1300 audit(1757723131.918:1578): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1422630 a2=3 a3=1 items=0 ppid=1 pid=5770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:31.918000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:31.962124 kernel: audit: type=1327 audit(1757723131.918:1578): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:31.960552 systemd[1]: Started session-19.scope. Sep 13 00:25:31.961385 systemd-logind[1734]: New session 19 of user core. Sep 13 00:25:31.971000 audit[5770]: USER_START pid=5770 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:31.974000 audit[5772]: CRED_ACQ pid=5772 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:31.993150 kernel: audit: type=1105 audit(1757723131.971:1579): pid=5770 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:31.993281 kernel: audit: type=1103 audit(1757723131.974:1580): pid=5772 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:32.245331 sshd[5770]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:32.246000 audit[5770]: USER_END pid=5770 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:32.250401 systemd[1]: session-19.scope: Deactivated successfully. Sep 13 00:25:32.251502 systemd[1]: sshd@18-172.31.25.123:22-139.178.89.65:39202.service: Deactivated successfully. Sep 13 00:25:32.247000 audit[5770]: CRED_DISP pid=5770 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:32.269996 kernel: audit: type=1106 audit(1757723132.246:1581): pid=5770 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:32.270100 kernel: audit: type=1104 audit(1757723132.247:1582): pid=5770 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:32.261615 systemd-logind[1734]: Session 19 logged out. Waiting for processes to exit. Sep 13 00:25:32.263552 systemd-logind[1734]: Removed session 19. Sep 13 00:25:32.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.123:22-139.178.89.65:39202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:33.258000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:33.258000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002b0f380 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:25:33.258000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:25:33.259000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:33.259000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400152c360 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:25:33.259000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:25:34.102000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:34.102000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4012fe1ef0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:25:34.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:25:34.102000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:34.102000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4012fe1f50 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:25:34.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:25:34.124000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:34.124000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4013406ba0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:25:34.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:25:34.135000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:34.135000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4011dc8820 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:25:34.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:25:34.394000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:34.394000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4013bfeab0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:25:34.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:25:34.395000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:34.395000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=4012638160 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:25:34.395000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:25:37.275917 systemd[1]: Started sshd@19-172.31.25.123:22-139.178.89.65:39214.service. Sep 13 00:25:37.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.123:22-139.178.89.65:39214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:37.278737 kernel: kauditd_printk_skb: 25 callbacks suppressed Sep 13 00:25:37.278829 kernel: audit: type=1130 audit(1757723137.275:1592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.123:22-139.178.89.65:39214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:37.471000 audit[5786]: USER_ACCT pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.474180 sshd[5786]: Accepted publickey for core from 139.178.89.65 port 39214 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:37.478701 sshd[5786]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:37.476000 audit[5786]: CRED_ACQ pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.493723 kernel: audit: type=1101 audit(1757723137.471:1593): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.493841 kernel: audit: type=1103 audit(1757723137.476:1594): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.500317 kernel: audit: type=1006 audit(1757723137.477:1595): pid=5786 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Sep 13 00:25:37.477000 audit[5786]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd688680 a2=3 a3=1 items=0 ppid=1 pid=5786 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:37.508559 systemd-logind[1734]: New session 20 of user core. Sep 13 00:25:37.512556 kernel: audit: type=1300 audit(1757723137.477:1595): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd688680 a2=3 a3=1 items=0 ppid=1 pid=5786 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:37.512610 kernel: audit: type=1327 audit(1757723137.477:1595): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:37.477000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:37.511289 systemd[1]: Started session-20.scope. Sep 13 00:25:37.523000 audit[5786]: USER_START pid=5786 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.523000 audit[5788]: CRED_ACQ pid=5788 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.547990 kernel: audit: type=1105 audit(1757723137.523:1596): pid=5786 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.548110 kernel: audit: type=1103 audit(1757723137.523:1597): pid=5788 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.775335 sshd[5786]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:37.776000 audit[5786]: USER_END pid=5786 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.780780 systemd[1]: session-20.scope: Deactivated successfully. Sep 13 00:25:37.782176 systemd[1]: sshd@19-172.31.25.123:22-139.178.89.65:39214.service: Deactivated successfully. Sep 13 00:25:37.777000 audit[5786]: CRED_DISP pid=5786 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.798944 kernel: audit: type=1106 audit(1757723137.776:1598): pid=5786 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.799110 kernel: audit: type=1104 audit(1757723137.777:1599): pid=5786 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:37.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.123:22-139.178.89.65:39214 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:37.799353 systemd-logind[1734]: Session 20 logged out. Waiting for processes to exit. Sep 13 00:25:37.802049 systemd-logind[1734]: Removed session 20. Sep 13 00:25:41.199843 systemd[1]: run-containerd-runc-k8s.io-16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713-runc.61JD4U.mount: Deactivated successfully. Sep 13 00:25:42.221000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:42.221000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:42.221000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400177fee0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:25:42.221000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:25:42.221000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400152d9a0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:25:42.221000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:25:42.223000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:42.223000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400152db60 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:25:42.223000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:25:42.222000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:25:42.222000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001896280 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:25:42.222000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:25:42.320836 env[1742]: time="2025-09-13T00:25:42.320767309Z" level=info msg="StopPodSandbox for \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\"" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.388 [WARNING][5827] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0", GenerateName:"calico-kube-controllers-68555b4f5d-", Namespace:"calico-system", SelfLink:"", UID:"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68555b4f5d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11", Pod:"calico-kube-controllers-68555b4f5d-4fh4t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calief005adfa26", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.388 [INFO][5827] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.388 [INFO][5827] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" iface="eth0" netns="" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.388 [INFO][5827] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.388 [INFO][5827] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.430 [INFO][5835] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.431 [INFO][5835] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.431 [INFO][5835] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.445 [WARNING][5835] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.445 [INFO][5835] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.448 [INFO][5835] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:42.455269 env[1742]: 2025-09-13 00:25:42.451 [INFO][5827] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.456334 env[1742]: time="2025-09-13T00:25:42.456282425Z" level=info msg="TearDown network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\" successfully" Sep 13 00:25:42.456478 env[1742]: time="2025-09-13T00:25:42.456441533Z" level=info msg="StopPodSandbox for \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\" returns successfully" Sep 13 00:25:42.457284 env[1742]: time="2025-09-13T00:25:42.457222784Z" level=info msg="RemovePodSandbox for \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\"" Sep 13 00:25:42.457617 env[1742]: time="2025-09-13T00:25:42.457552377Z" level=info msg="Forcibly stopping sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\"" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.525 [WARNING][5849] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0", GenerateName:"calico-kube-controllers-68555b4f5d-", Namespace:"calico-system", SelfLink:"", UID:"979d2bfc-9a3f-40d7-b66e-e4d30fa4257e", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68555b4f5d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"69dc162df3ab5235efe94ed65fdc6c2244c681b99ce6bef866586b3220836c11", Pod:"calico-kube-controllers-68555b4f5d-4fh4t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.28.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calief005adfa26", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.526 [INFO][5849] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.526 [INFO][5849] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" iface="eth0" netns="" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.526 [INFO][5849] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.527 [INFO][5849] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.574 [INFO][5856] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.574 [INFO][5856] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.574 [INFO][5856] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.586 [WARNING][5856] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.587 [INFO][5856] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" HandleID="k8s-pod-network.debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Workload="ip--172--31--25--123-k8s-calico--kube--controllers--68555b4f5d--4fh4t-eth0" Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.589 [INFO][5856] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:42.596851 env[1742]: 2025-09-13 00:25:42.592 [INFO][5849] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8" Sep 13 00:25:42.596851 env[1742]: time="2025-09-13T00:25:42.596111758Z" level=info msg="TearDown network for sandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\" successfully" Sep 13 00:25:42.603806 env[1742]: time="2025-09-13T00:25:42.603640052Z" level=info msg="RemovePodSandbox \"debbfefd72d8918dcfcf630ea6344d10d214a91b0275c6e8f5ff3992d0e1fbe8\" returns successfully" Sep 13 00:25:42.604900 env[1742]: time="2025-09-13T00:25:42.604833335Z" level=info msg="StopPodSandbox for \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\"" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.670 [WARNING][5870] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c89c8e1b-1e30-44db-b7f5-0c71a1572267", ResourceVersion:"1204", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f", Pod:"csi-node-driver-r7dh9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.28.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali363b448aced", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.670 [INFO][5870] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.670 [INFO][5870] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" iface="eth0" netns="" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.670 [INFO][5870] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.670 [INFO][5870] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.709 [INFO][5877] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.710 [INFO][5877] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.710 [INFO][5877] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.736 [WARNING][5877] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.737 [INFO][5877] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.740 [INFO][5877] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:42.747787 env[1742]: 2025-09-13 00:25:42.743 [INFO][5870] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.750686 env[1742]: time="2025-09-13T00:25:42.750587770Z" level=info msg="TearDown network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\" successfully" Sep 13 00:25:42.750686 env[1742]: time="2025-09-13T00:25:42.750662098Z" level=info msg="StopPodSandbox for \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\" returns successfully" Sep 13 00:25:42.751529 env[1742]: time="2025-09-13T00:25:42.751445436Z" level=info msg="RemovePodSandbox for \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\"" Sep 13 00:25:42.751661 env[1742]: time="2025-09-13T00:25:42.751536240Z" level=info msg="Forcibly stopping sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\"" Sep 13 00:25:42.817911 kernel: kauditd_printk_skb: 13 callbacks suppressed Sep 13 00:25:42.818131 kernel: audit: type=1130 audit(1757723142.805:1605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.123:22-139.178.89.65:33912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:42.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.123:22-139.178.89.65:33912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:42.806594 systemd[1]: Started sshd@20-172.31.25.123:22-139.178.89.65:33912.service. Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.846 [WARNING][5892] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c89c8e1b-1e30-44db-b7f5-0c71a1572267", ResourceVersion:"1204", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"856c6b598f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"657389489cb71c5a2eb89371d8f7afd388e69bf28f96ca6f7cce9153fa52d37f", Pod:"csi-node-driver-r7dh9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.28.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali363b448aced", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.847 [INFO][5892] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.847 [INFO][5892] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" iface="eth0" netns="" Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.847 [INFO][5892] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.847 [INFO][5892] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.893 [INFO][5901] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.894 [INFO][5901] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.894 [INFO][5901] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.909 [WARNING][5901] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.909 [INFO][5901] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" HandleID="k8s-pod-network.fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Workload="ip--172--31--25--123-k8s-csi--node--driver--r7dh9-eth0" Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.911 [INFO][5901] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:42.923500 env[1742]: 2025-09-13 00:25:42.915 [INFO][5892] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5" Sep 13 00:25:42.923500 env[1742]: time="2025-09-13T00:25:42.918891950Z" level=info msg="TearDown network for sandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\" successfully" Sep 13 00:25:42.932020 env[1742]: time="2025-09-13T00:25:42.931907753Z" level=info msg="RemovePodSandbox \"fc3d5105207024fafe442dfaa994a4934cbe363f2c357d3f0f30e38f998510d5\" returns successfully" Sep 13 00:25:42.937287 env[1742]: time="2025-09-13T00:25:42.937221812Z" level=info msg="StopPodSandbox for \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\"" Sep 13 00:25:43.038000 audit[5898]: USER_ACCT pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.049804 sshd[5898]: Accepted publickey for core from 139.178.89.65 port 33912 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:43.066332 kernel: audit: type=1101 audit(1757723143.038:1606): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.066508 kernel: audit: type=1103 audit(1757723143.054:1607): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.054000 audit[5898]: CRED_ACQ pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.074354 kernel: audit: type=1006 audit(1757723143.054:1608): pid=5898 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Sep 13 00:25:43.087452 kernel: audit: type=1300 audit(1757723143.054:1608): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd416bfd0 a2=3 a3=1 items=0 ppid=1 pid=5898 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:43.054000 audit[5898]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd416bfd0 a2=3 a3=1 items=0 ppid=1 pid=5898 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:43.093176 sshd[5898]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:43.054000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:43.098202 kernel: audit: type=1327 audit(1757723143.054:1608): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:43.113103 systemd[1]: Started session-21.scope. Sep 13 00:25:43.114726 systemd-logind[1734]: New session 21 of user core. Sep 13 00:25:43.144000 audit[5898]: USER_START pid=5898 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.157000 audit[5930]: CRED_ACQ pid=5930 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.168324 kernel: audit: type=1105 audit(1757723143.144:1609): pid=5898 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.168481 kernel: audit: type=1103 audit(1757723143.157:1610): pid=5930 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.019 [WARNING][5917] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"6680d8ea-1f08-4608-a26d-959dcacfb8a7", ResourceVersion:"1171", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682", Pod:"calico-apiserver-547d6b8874-zxxxp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibe9f1c5192a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.019 [INFO][5917] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.019 [INFO][5917] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" iface="eth0" netns="" Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.019 [INFO][5917] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.019 [INFO][5917] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.103 [INFO][5924] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.125 [INFO][5924] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.126 [INFO][5924] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.161 [WARNING][5924] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.161 [INFO][5924] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.170 [INFO][5924] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:43.176345 env[1742]: 2025-09-13 00:25:43.173 [INFO][5917] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.177602 env[1742]: time="2025-09-13T00:25:43.177548364Z" level=info msg="TearDown network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\" successfully" Sep 13 00:25:43.177764 env[1742]: time="2025-09-13T00:25:43.177726372Z" level=info msg="StopPodSandbox for \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\" returns successfully" Sep 13 00:25:43.178931 env[1742]: time="2025-09-13T00:25:43.178861108Z" level=info msg="RemovePodSandbox for \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\"" Sep 13 00:25:43.179151 env[1742]: time="2025-09-13T00:25:43.178922308Z" level=info msg="Forcibly stopping sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\"" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.278 [WARNING][5940] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"6680d8ea-1f08-4608-a26d-959dcacfb8a7", ResourceVersion:"1171", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"29ba6a5dacd1fa98a9c1d1352ab6703e6ab58315709c691758e93107aa80a682", Pod:"calico-apiserver-547d6b8874-zxxxp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibe9f1c5192a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.278 [INFO][5940] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.278 [INFO][5940] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" iface="eth0" netns="" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.279 [INFO][5940] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.279 [INFO][5940] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.377 [INFO][5954] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.380 [INFO][5954] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.380 [INFO][5954] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.398 [WARNING][5954] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.398 [INFO][5954] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" HandleID="k8s-pod-network.2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--zxxxp-eth0" Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.403 [INFO][5954] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:43.411244 env[1742]: 2025-09-13 00:25:43.408 [INFO][5940] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4" Sep 13 00:25:43.412800 env[1742]: time="2025-09-13T00:25:43.412705718Z" level=info msg="TearDown network for sandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\" successfully" Sep 13 00:25:43.421771 env[1742]: time="2025-09-13T00:25:43.421623820Z" level=info msg="RemovePodSandbox \"2b4816a8ff5d0c9f061b6e559485bfaee5f0189da3787d3c3289b542681853e4\" returns successfully" Sep 13 00:25:43.422831 env[1742]: time="2025-09-13T00:25:43.422761484Z" level=info msg="StopPodSandbox for \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\"" Sep 13 00:25:43.479079 sshd[5898]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:43.479000 audit[5898]: USER_END pid=5898 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.495226 systemd[1]: sshd@20-172.31.25.123:22-139.178.89.65:33912.service: Deactivated successfully. Sep 13 00:25:43.480000 audit[5898]: CRED_DISP pid=5898 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.496725 systemd[1]: session-21.scope: Deactivated successfully. Sep 13 00:25:43.507450 kernel: audit: type=1106 audit(1757723143.479:1611): pid=5898 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.510046 kernel: audit: type=1104 audit(1757723143.480:1612): pid=5898 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:43.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.123:22-139.178.89.65:33912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:43.511477 systemd-logind[1734]: Session 21 logged out. Waiting for processes to exit. Sep 13 00:25:43.516442 systemd-logind[1734]: Removed session 21. Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.528 [WARNING][5969] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"e2a814ca-9dba-4638-9ba1-92017b2ca1d6", ResourceVersion:"1239", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e", Pod:"calico-apiserver-547d6b8874-xlz4j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali99c9ea14f2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.528 [INFO][5969] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.528 [INFO][5969] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" iface="eth0" netns="" Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.528 [INFO][5969] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.528 [INFO][5969] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.577 [INFO][5977] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.577 [INFO][5977] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.577 [INFO][5977] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.589 [WARNING][5977] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.589 [INFO][5977] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.592 [INFO][5977] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:43.598610 env[1742]: 2025-09-13 00:25:43.595 [INFO][5969] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.599727 env[1742]: time="2025-09-13T00:25:43.599677400Z" level=info msg="TearDown network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\" successfully" Sep 13 00:25:43.599867 env[1742]: time="2025-09-13T00:25:43.599834324Z" level=info msg="StopPodSandbox for \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\" returns successfully" Sep 13 00:25:43.600668 env[1742]: time="2025-09-13T00:25:43.600626195Z" level=info msg="RemovePodSandbox for \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\"" Sep 13 00:25:43.601165 env[1742]: time="2025-09-13T00:25:43.601102440Z" level=info msg="Forcibly stopping sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\"" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.669 [WARNING][5991] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0", GenerateName:"calico-apiserver-547d6b8874-", Namespace:"calico-apiserver", SelfLink:"", UID:"e2a814ca-9dba-4638-9ba1-92017b2ca1d6", ResourceVersion:"1239", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"547d6b8874", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"b9b0e77eca95bb02879b3973f4ce6facf48fdf6d7a77d4891924a6e295d68e8e", Pod:"calico-apiserver-547d6b8874-xlz4j", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.28.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali99c9ea14f2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.670 [INFO][5991] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.670 [INFO][5991] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" iface="eth0" netns="" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.670 [INFO][5991] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.670 [INFO][5991] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.711 [INFO][5998] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.712 [INFO][5998] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.712 [INFO][5998] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.724 [WARNING][5998] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.724 [INFO][5998] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" HandleID="k8s-pod-network.e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Workload="ip--172--31--25--123-k8s-calico--apiserver--547d6b8874--xlz4j-eth0" Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.727 [INFO][5998] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:43.733148 env[1742]: 2025-09-13 00:25:43.729 [INFO][5991] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b" Sep 13 00:25:43.736004 env[1742]: time="2025-09-13T00:25:43.735896937Z" level=info msg="TearDown network for sandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\" successfully" Sep 13 00:25:43.743682 env[1742]: time="2025-09-13T00:25:43.743613356Z" level=info msg="RemovePodSandbox \"e41758e4b576253f2f543230d13dcd1d981fffd5a149336b8ad737386a93925b\" returns successfully" Sep 13 00:25:43.744626 env[1742]: time="2025-09-13T00:25:43.744531767Z" level=info msg="StopPodSandbox for \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\"" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.828 [WARNING][6012] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"016d98cc-9cfc-481a-818d-62b978bada49", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec", Pod:"coredns-7c65d6cfc9-ths8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied00054271c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.829 [INFO][6012] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.829 [INFO][6012] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" iface="eth0" netns="" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.829 [INFO][6012] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.829 [INFO][6012] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.870 [INFO][6019] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.870 [INFO][6019] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.870 [INFO][6019] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.882 [WARNING][6019] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.882 [INFO][6019] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.885 [INFO][6019] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:43.890814 env[1742]: 2025-09-13 00:25:43.887 [INFO][6012] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:43.892116 env[1742]: time="2025-09-13T00:25:43.890835174Z" level=info msg="TearDown network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\" successfully" Sep 13 00:25:43.892116 env[1742]: time="2025-09-13T00:25:43.890880774Z" level=info msg="StopPodSandbox for \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\" returns successfully" Sep 13 00:25:43.893186 env[1742]: time="2025-09-13T00:25:43.893138760Z" level=info msg="RemovePodSandbox for \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\"" Sep 13 00:25:43.893423 env[1742]: time="2025-09-13T00:25:43.893361241Z" level=info msg="Forcibly stopping sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\"" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:43.958 [WARNING][6033] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"016d98cc-9cfc-481a-818d-62b978bada49", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 23, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"db3494bba88c5788954976db9e714fa8a5b1921ee43fea708c18c4fa19f784ec", Pod:"coredns-7c65d6cfc9-ths8j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.28.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calied00054271c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:43.959 [INFO][6033] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:43.959 [INFO][6033] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" iface="eth0" netns="" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:43.959 [INFO][6033] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:43.959 [INFO][6033] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:44.011 [INFO][6041] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:44.012 [INFO][6041] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:44.012 [INFO][6041] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:44.024 [WARNING][6041] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:44.024 [INFO][6041] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" HandleID="k8s-pod-network.db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Workload="ip--172--31--25--123-k8s-coredns--7c65d6cfc9--ths8j-eth0" Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:44.026 [INFO][6041] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:44.032249 env[1742]: 2025-09-13 00:25:44.029 [INFO][6033] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0" Sep 13 00:25:44.032249 env[1742]: time="2025-09-13T00:25:44.032129381Z" level=info msg="TearDown network for sandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\" successfully" Sep 13 00:25:44.039515 env[1742]: time="2025-09-13T00:25:44.039449186Z" level=info msg="RemovePodSandbox \"db9c6178770bdf0966865fe5e6ba85f8a66d9777c9c6005e63ccc3fc322e29f0\" returns successfully" Sep 13 00:25:44.040478 env[1742]: time="2025-09-13T00:25:44.040436369Z" level=info msg="StopPodSandbox for \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\"" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.115 [WARNING][6055] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"00cbf28a-8d0b-40f9-8c22-74f53f1a205f", ResourceVersion:"1290", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd", Pod:"goldmane-7988f88666-w5ml5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.28.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic11cb0f14ef", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.117 [INFO][6055] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.117 [INFO][6055] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" iface="eth0" netns="" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.117 [INFO][6055] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.117 [INFO][6055] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.178 [INFO][6062] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.178 [INFO][6062] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.178 [INFO][6062] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.191 [WARNING][6062] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.191 [INFO][6062] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.194 [INFO][6062] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:44.199822 env[1742]: 2025-09-13 00:25:44.196 [INFO][6055] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.200833 env[1742]: time="2025-09-13T00:25:44.200783555Z" level=info msg="TearDown network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\" successfully" Sep 13 00:25:44.201012 env[1742]: time="2025-09-13T00:25:44.200936964Z" level=info msg="StopPodSandbox for \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\" returns successfully" Sep 13 00:25:44.201756 env[1742]: time="2025-09-13T00:25:44.201715202Z" level=info msg="RemovePodSandbox for \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\"" Sep 13 00:25:44.202087 env[1742]: time="2025-09-13T00:25:44.202010991Z" level=info msg="Forcibly stopping sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\"" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.279 [WARNING][6077] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0", GenerateName:"goldmane-7988f88666-", Namespace:"calico-system", SelfLink:"", UID:"00cbf28a-8d0b-40f9-8c22-74f53f1a205f", ResourceVersion:"1290", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 0, 24, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"7988f88666", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-123", ContainerID:"02b59152f2492a2c0607f086ed1eb85081e2a292fbddd912ed90e5dd7c6a16bd", Pod:"goldmane-7988f88666-w5ml5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.28.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic11cb0f14ef", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.280 [INFO][6077] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.282 [INFO][6077] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" iface="eth0" netns="" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.282 [INFO][6077] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.282 [INFO][6077] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.328 [INFO][6084] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.329 [INFO][6084] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.329 [INFO][6084] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.342 [WARNING][6084] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.342 [INFO][6084] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" HandleID="k8s-pod-network.de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Workload="ip--172--31--25--123-k8s-goldmane--7988f88666--w5ml5-eth0" Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.345 [INFO][6084] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 00:25:44.350475 env[1742]: 2025-09-13 00:25:44.347 [INFO][6077] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4" Sep 13 00:25:44.352260 env[1742]: time="2025-09-13T00:25:44.352090540Z" level=info msg="TearDown network for sandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\" successfully" Sep 13 00:25:44.359273 env[1742]: time="2025-09-13T00:25:44.359209201Z" level=info msg="RemovePodSandbox \"de3b373438f4cb646e0d271a48b0b8da3e107f2a58f4dcfde83f8c9d3c5cf3f4\" returns successfully" Sep 13 00:25:48.511272 systemd[1]: Started sshd@21-172.31.25.123:22-139.178.89.65:33914.service. Sep 13 00:25:48.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.123:22-139.178.89.65:33914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:48.519983 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:25:48.520139 kernel: audit: type=1130 audit(1757723148.511:1614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.123:22-139.178.89.65:33914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:48.689000 audit[6094]: USER_ACCT pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.695160 sshd[6094]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:48.696187 sshd[6094]: Accepted publickey for core from 139.178.89.65 port 33914 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:48.691000 audit[6094]: CRED_ACQ pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.710170 kernel: audit: type=1101 audit(1757723148.689:1615): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.710277 kernel: audit: type=1103 audit(1757723148.691:1616): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.717280 kernel: audit: type=1006 audit(1757723148.691:1617): pid=6094 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Sep 13 00:25:48.717423 kernel: audit: type=1300 audit(1757723148.691:1617): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3556c30 a2=3 a3=1 items=0 ppid=1 pid=6094 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:48.691000 audit[6094]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3556c30 a2=3 a3=1 items=0 ppid=1 pid=6094 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:48.720288 systemd[1]: Started session-22.scope. Sep 13 00:25:48.721395 systemd-logind[1734]: New session 22 of user core. Sep 13 00:25:48.728190 kernel: audit: type=1327 audit(1757723148.691:1617): proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:48.691000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:48.735000 audit[6094]: USER_START pid=6094 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.735000 audit[6096]: CRED_ACQ pid=6096 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.757246 kernel: audit: type=1105 audit(1757723148.735:1618): pid=6094 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.757348 kernel: audit: type=1103 audit(1757723148.735:1619): pid=6096 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.979345 sshd[6094]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:48.980000 audit[6094]: USER_END pid=6094 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.981000 audit[6094]: CRED_DISP pid=6094 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.995326 systemd[1]: sshd@21-172.31.25.123:22-139.178.89.65:33914.service: Deactivated successfully. Sep 13 00:25:48.996666 systemd[1]: session-22.scope: Deactivated successfully. Sep 13 00:25:49.004463 kernel: audit: type=1106 audit(1757723148.980:1620): pid=6094 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:49.004609 kernel: audit: type=1104 audit(1757723148.981:1621): pid=6094 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:48.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.123:22-139.178.89.65:33914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:49.005985 systemd-logind[1734]: Session 22 logged out. Waiting for processes to exit. Sep 13 00:25:49.016225 systemd[1]: Started sshd@22-172.31.25.123:22-139.178.89.65:33922.service. Sep 13 00:25:49.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.123:22-139.178.89.65:33922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:49.019107 systemd-logind[1734]: Removed session 22. Sep 13 00:25:49.190000 audit[6106]: USER_ACCT pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:49.193069 sshd[6106]: Accepted publickey for core from 139.178.89.65 port 33922 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:49.194894 sshd[6106]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:49.193000 audit[6106]: CRED_ACQ pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:49.193000 audit[6106]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb973560 a2=3 a3=1 items=0 ppid=1 pid=6106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:49.193000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:49.202982 systemd-logind[1734]: New session 23 of user core. Sep 13 00:25:49.204471 systemd[1]: Started session-23.scope. Sep 13 00:25:49.214000 audit[6106]: USER_START pid=6106 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:49.218000 audit[6108]: CRED_ACQ pid=6108 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:49.808920 sshd[6106]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:49.809000 audit[6106]: USER_END pid=6106 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:49.810000 audit[6106]: CRED_DISP pid=6106 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:49.813938 systemd[1]: session-23.scope: Deactivated successfully. Sep 13 00:25:49.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.123:22-139.178.89.65:33922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:49.815851 systemd[1]: sshd@22-172.31.25.123:22-139.178.89.65:33922.service: Deactivated successfully. Sep 13 00:25:49.815886 systemd-logind[1734]: Session 23 logged out. Waiting for processes to exit. Sep 13 00:25:49.819487 systemd-logind[1734]: Removed session 23. Sep 13 00:25:49.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.123:22-139.178.89.65:33930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:49.836942 systemd[1]: Started sshd@23-172.31.25.123:22-139.178.89.65:33930.service. Sep 13 00:25:50.023000 audit[6116]: USER_ACCT pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:50.025067 sshd[6116]: Accepted publickey for core from 139.178.89.65 port 33930 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:50.026000 audit[6116]: CRED_ACQ pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:50.026000 audit[6116]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0344240 a2=3 a3=1 items=0 ppid=1 pid=6116 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:50.026000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:50.028645 sshd[6116]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:50.037057 systemd-logind[1734]: New session 24 of user core. Sep 13 00:25:50.038668 systemd[1]: Started session-24.scope. Sep 13 00:25:50.048000 audit[6116]: USER_START pid=6116 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:50.051000 audit[6118]: CRED_ACQ pid=6118 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.236483 systemd[1]: run-containerd-runc-k8s.io-e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be-runc.u1S8QN.mount: Deactivated successfully. Sep 13 00:25:53.698000 audit[6168]: NETFILTER_CFG table=filter:128 family=2 entries=20 op=nft_register_rule pid=6168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:53.701967 kernel: kauditd_printk_skb: 20 callbacks suppressed Sep 13 00:25:53.702149 kernel: audit: type=1325 audit(1757723153.698:1638): table=filter:128 family=2 entries=20 op=nft_register_rule pid=6168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:53.698000 audit[6168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffc1f5ba70 a2=0 a3=1 items=0 ppid=2845 pid=6168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:53.720580 kernel: audit: type=1300 audit(1757723153.698:1638): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffc1f5ba70 a2=0 a3=1 items=0 ppid=2845 pid=6168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:53.721584 sshd[6116]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:53.698000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:53.729433 kernel: audit: type=1327 audit(1757723153.698:1638): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:53.730188 systemd[1]: sshd@23-172.31.25.123:22-139.178.89.65:33930.service: Deactivated successfully. Sep 13 00:25:53.731648 systemd[1]: session-24.scope: Deactivated successfully. Sep 13 00:25:53.732710 systemd[1]: session-24.scope: Consumed 1.166s CPU time. Sep 13 00:25:53.722000 audit[6116]: USER_END pid=6116 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.745134 kernel: audit: type=1106 audit(1757723153.722:1639): pid=6116 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.745630 systemd-logind[1734]: Session 24 logged out. Waiting for processes to exit. Sep 13 00:25:53.723000 audit[6116]: CRED_DISP pid=6116 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.754697 systemd[1]: Started sshd@24-172.31.25.123:22-139.178.89.65:42104.service. Sep 13 00:25:53.770986 kernel: audit: type=1104 audit(1757723153.723:1640): pid=6116 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.771141 kernel: audit: type=1131 audit(1757723153.729:1641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.123:22-139.178.89.65:33930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:53.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.123:22-139.178.89.65:33930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:53.771894 systemd-logind[1734]: Removed session 24. Sep 13 00:25:53.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.123:22-139.178.89.65:42104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:53.786816 kernel: audit: type=1130 audit(1757723153.754:1642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.123:22-139.178.89.65:42104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:53.787000 audit[6168]: NETFILTER_CFG table=nat:129 family=2 entries=26 op=nft_register_rule pid=6168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:53.808844 kernel: audit: type=1325 audit(1757723153.787:1643): table=nat:129 family=2 entries=26 op=nft_register_rule pid=6168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:53.809023 kernel: audit: type=1300 audit(1757723153.787:1643): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffc1f5ba70 a2=0 a3=1 items=0 ppid=2845 pid=6168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:53.787000 audit[6168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffc1f5ba70 a2=0 a3=1 items=0 ppid=2845 pid=6168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:53.787000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:53.815316 kernel: audit: type=1327 audit(1757723153.787:1643): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:53.834000 audit[6174]: NETFILTER_CFG table=filter:130 family=2 entries=32 op=nft_register_rule pid=6174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:53.834000 audit[6174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdf456740 a2=0 a3=1 items=0 ppid=2845 pid=6174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:53.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:53.844000 audit[6174]: NETFILTER_CFG table=nat:131 family=2 entries=26 op=nft_register_rule pid=6174 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:25:53.844000 audit[6174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffdf456740 a2=0 a3=1 items=0 ppid=2845 pid=6174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:53.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:25:53.953000 audit[6171]: USER_ACCT pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.954447 sshd[6171]: Accepted publickey for core from 139.178.89.65 port 42104 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:53.955000 audit[6171]: CRED_ACQ pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.955000 audit[6171]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7549b90 a2=3 a3=1 items=0 ppid=1 pid=6171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:53.955000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:53.957581 sshd[6171]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:53.965901 systemd-logind[1734]: New session 25 of user core. Sep 13 00:25:53.967057 systemd[1]: Started session-25.scope. Sep 13 00:25:53.979000 audit[6171]: USER_START pid=6171 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:53.981000 audit[6175]: CRED_ACQ pid=6175 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.503132 sshd[6171]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:54.504000 audit[6171]: USER_END pid=6171 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.504000 audit[6171]: CRED_DISP pid=6171 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.508867 systemd[1]: sshd@24-172.31.25.123:22-139.178.89.65:42104.service: Deactivated successfully. Sep 13 00:25:54.508000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.123:22-139.178.89.65:42104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:54.510910 systemd[1]: session-25.scope: Deactivated successfully. Sep 13 00:25:54.512406 systemd-logind[1734]: Session 25 logged out. Waiting for processes to exit. Sep 13 00:25:54.515126 systemd-logind[1734]: Removed session 25. Sep 13 00:25:54.533140 systemd[1]: Started sshd@25-172.31.25.123:22-139.178.89.65:42116.service. Sep 13 00:25:54.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.123:22-139.178.89.65:42116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:54.704000 audit[6183]: USER_ACCT pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.706133 sshd[6183]: Accepted publickey for core from 139.178.89.65 port 42116 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:25:54.706000 audit[6183]: CRED_ACQ pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.707000 audit[6183]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7293650 a2=3 a3=1 items=0 ppid=1 pid=6183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:25:54.707000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:25:54.709265 sshd[6183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:25:54.718343 systemd-logind[1734]: New session 26 of user core. Sep 13 00:25:54.719270 systemd[1]: Started session-26.scope. Sep 13 00:25:54.729000 audit[6183]: USER_START pid=6183 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.732000 audit[6185]: CRED_ACQ pid=6185 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.978356 sshd[6183]: pam_unix(sshd:session): session closed for user core Sep 13 00:25:54.979000 audit[6183]: USER_END pid=6183 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.979000 audit[6183]: CRED_DISP pid=6183 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:25:54.983408 systemd[1]: session-26.scope: Deactivated successfully. Sep 13 00:25:54.984589 systemd[1]: sshd@25-172.31.25.123:22-139.178.89.65:42116.service: Deactivated successfully. Sep 13 00:25:54.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.123:22-139.178.89.65:42116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:25:54.986372 systemd-logind[1734]: Session 26 logged out. Waiting for processes to exit. Sep 13 00:25:54.989802 systemd-logind[1734]: Removed session 26. Sep 13 00:25:57.434000 audit[5393]: AVC avc: denied { watch } for pid=5393 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_24_23.874072406/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c220,c431 tclass=file permissive=0 Sep 13 00:25:57.434000 audit[5393]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40020506e0 a2=fc6 a3=0 items=0 ppid=4988 pid=5393 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 key=(null) Sep 13 00:25:57.434000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:25:57.880000 audit[5343]: AVC avc: denied { watch } for pid=5343 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_24_23.3876893614/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c289,c779 tclass=file permissive=0 Sep 13 00:25:57.880000 audit[5343]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001120580 a2=fc6 a3=0 items=0 ppid=4695 pid=5343 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c779 key=(null) Sep 13 00:25:57.880000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:25:57.950825 amazon-ssm-agent[1722]: 2025-09-13 00:25:57 INFO [HealthCheck] HealthCheck reporting agent health. Sep 13 00:26:00.011307 systemd[1]: Started sshd@26-172.31.25.123:22-139.178.89.65:59420.service. Sep 13 00:26:00.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.123:22-139.178.89.65:59420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:00.020149 kernel: kauditd_printk_skb: 33 callbacks suppressed Sep 13 00:26:00.020246 kernel: audit: type=1130 audit(1757723160.011:1665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.123:22-139.178.89.65:59420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:00.187000 audit[6198]: USER_ACCT pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.188383 sshd[6198]: Accepted publickey for core from 139.178.89.65 port 59420 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:26:00.191686 sshd[6198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:26:00.189000 audit[6198]: CRED_ACQ pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.201768 systemd[1]: Started session-27.scope. Sep 13 00:26:00.204662 systemd-logind[1734]: New session 27 of user core. Sep 13 00:26:00.207846 kernel: audit: type=1101 audit(1757723160.187:1666): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.208403 kernel: audit: type=1103 audit(1757723160.189:1667): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.215102 kernel: audit: type=1006 audit(1757723160.190:1668): pid=6198 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Sep 13 00:26:00.190000 audit[6198]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff703c600 a2=3 a3=1 items=0 ppid=1 pid=6198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:00.226780 kernel: audit: type=1300 audit(1757723160.190:1668): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff703c600 a2=3 a3=1 items=0 ppid=1 pid=6198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:00.190000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:00.231934 kernel: audit: type=1327 audit(1757723160.190:1668): proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:00.225000 audit[6198]: USER_START pid=6198 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.245036 kernel: audit: type=1105 audit(1757723160.225:1669): pid=6198 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.231000 audit[6200]: CRED_ACQ pid=6200 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.254674 kernel: audit: type=1103 audit(1757723160.231:1670): pid=6200 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.472201 sshd[6198]: pam_unix(sshd:session): session closed for user core Sep 13 00:26:00.474000 audit[6198]: USER_END pid=6198 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.478646 systemd-logind[1734]: Session 27 logged out. Waiting for processes to exit. Sep 13 00:26:00.481257 systemd[1]: session-27.scope: Deactivated successfully. Sep 13 00:26:00.483290 systemd-logind[1734]: Removed session 27. Sep 13 00:26:00.484788 systemd[1]: sshd@26-172.31.25.123:22-139.178.89.65:59420.service: Deactivated successfully. Sep 13 00:26:00.474000 audit[6198]: CRED_DISP pid=6198 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.495728 kernel: audit: type=1106 audit(1757723160.474:1671): pid=6198 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.495829 kernel: audit: type=1104 audit(1757723160.474:1672): pid=6198 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:00.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.123:22-139.178.89.65:59420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:02.200000 audit[6212]: NETFILTER_CFG table=filter:132 family=2 entries=20 op=nft_register_rule pid=6212 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:26:02.200000 audit[6212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc9b22650 a2=0 a3=1 items=0 ppid=2845 pid=6212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:02.200000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:26:02.207000 audit[6212]: NETFILTER_CFG table=nat:133 family=2 entries=110 op=nft_register_chain pid=6212 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 00:26:02.207000 audit[6212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc9b22650 a2=0 a3=1 items=0 ppid=2845 pid=6212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:02.207000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 00:26:05.503478 systemd[1]: Started sshd@27-172.31.25.123:22-139.178.89.65:59428.service. Sep 13 00:26:05.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.123:22-139.178.89.65:59428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:05.508980 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 00:26:05.509129 kernel: audit: type=1130 audit(1757723165.503:1676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.123:22-139.178.89.65:59428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:05.686002 sshd[6223]: Accepted publickey for core from 139.178.89.65 port 59428 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:26:05.684000 audit[6223]: USER_ACCT pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:05.697901 sshd[6223]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:26:05.695000 audit[6223]: CRED_ACQ pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:05.708216 kernel: audit: type=1101 audit(1757723165.684:1677): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:05.708338 kernel: audit: type=1103 audit(1757723165.695:1678): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:05.709737 kernel: audit: type=1006 audit(1757723165.696:1679): pid=6223 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 13 00:26:05.696000 audit[6223]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc39b2a70 a2=3 a3=1 items=0 ppid=1 pid=6223 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:05.725853 kernel: audit: type=1300 audit(1757723165.696:1679): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc39b2a70 a2=3 a3=1 items=0 ppid=1 pid=6223 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:05.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:05.732339 kernel: audit: type=1327 audit(1757723165.696:1679): proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:05.732515 systemd-logind[1734]: New session 28 of user core. Sep 13 00:26:05.733112 systemd[1]: Started session-28.scope. Sep 13 00:26:05.745000 audit[6223]: USER_START pid=6223 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:05.759000 audit[6226]: CRED_ACQ pid=6226 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:05.770698 kernel: audit: type=1105 audit(1757723165.745:1680): pid=6223 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:05.770941 kernel: audit: type=1103 audit(1757723165.759:1681): pid=6226 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:06.030798 sshd[6223]: pam_unix(sshd:session): session closed for user core Sep 13 00:26:06.031000 audit[6223]: USER_END pid=6223 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:06.041328 systemd-logind[1734]: Session 28 logged out. Waiting for processes to exit. Sep 13 00:26:06.043540 systemd[1]: sshd@27-172.31.25.123:22-139.178.89.65:59428.service: Deactivated successfully. Sep 13 00:26:06.037000 audit[6223]: CRED_DISP pid=6223 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:06.046151 systemd[1]: session-28.scope: Deactivated successfully. Sep 13 00:26:06.048062 systemd-logind[1734]: Removed session 28. Sep 13 00:26:06.054682 kernel: audit: type=1106 audit(1757723166.031:1682): pid=6223 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:06.054880 kernel: audit: type=1104 audit(1757723166.037:1683): pid=6223 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:06.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.123:22-139.178.89.65:59428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:11.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.123:22-139.178.89.65:52300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:11.068179 systemd[1]: Started sshd@28-172.31.25.123:22-139.178.89.65:52300.service. Sep 13 00:26:11.070665 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:26:11.070762 kernel: audit: type=1130 audit(1757723171.067:1685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.123:22-139.178.89.65:52300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:11.199844 systemd[1]: run-containerd-runc-k8s.io-16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713-runc.z04ydM.mount: Deactivated successfully. Sep 13 00:26:11.250000 audit[6256]: USER_ACCT pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.253493 sshd[6256]: Accepted publickey for core from 139.178.89.65 port 52300 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:26:11.255229 sshd[6256]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:26:11.253000 audit[6256]: CRED_ACQ pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.267000 systemd[1]: Started session-29.scope. Sep 13 00:26:11.270137 systemd-logind[1734]: New session 29 of user core. Sep 13 00:26:11.275612 kernel: audit: type=1101 audit(1757723171.250:1686): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.275742 kernel: audit: type=1103 audit(1757723171.253:1687): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.282983 kernel: audit: type=1006 audit(1757723171.253:1688): pid=6256 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Sep 13 00:26:11.253000 audit[6256]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf99a9b0 a2=3 a3=1 items=0 ppid=1 pid=6256 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:11.297069 kernel: audit: type=1300 audit(1757723171.253:1688): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf99a9b0 a2=3 a3=1 items=0 ppid=1 pid=6256 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:11.253000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:11.304047 kernel: audit: type=1327 audit(1757723171.253:1688): proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:11.280000 audit[6256]: USER_START pid=6256 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.317579 kernel: audit: type=1105 audit(1757723171.280:1689): pid=6256 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.284000 audit[6274]: CRED_ACQ pid=6274 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.338626 kernel: audit: type=1103 audit(1757723171.284:1690): pid=6274 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.583673 sshd[6256]: pam_unix(sshd:session): session closed for user core Sep 13 00:26:11.585000 audit[6256]: USER_END pid=6256 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.588473 systemd[1]: session-29.scope: Deactivated successfully. Sep 13 00:26:11.589577 systemd[1]: sshd@28-172.31.25.123:22-139.178.89.65:52300.service: Deactivated successfully. Sep 13 00:26:11.597426 systemd-logind[1734]: Session 29 logged out. Waiting for processes to exit. Sep 13 00:26:11.585000 audit[6256]: CRED_DISP pid=6256 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.602580 systemd-logind[1734]: Removed session 29. Sep 13 00:26:11.608414 kernel: audit: type=1106 audit(1757723171.585:1691): pid=6256 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.608643 kernel: audit: type=1104 audit(1757723171.585:1692): pid=6256 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:11.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.25.123:22-139.178.89.65:52300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:11.788916 systemd[1]: run-containerd-runc-k8s.io-e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be-runc.ZL961Y.mount: Deactivated successfully. Sep 13 00:26:13.926301 systemd[1]: run-containerd-runc-k8s.io-b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618-runc.YTPUhg.mount: Deactivated successfully. Sep 13 00:26:16.620643 systemd[1]: Started sshd@29-172.31.25.123:22-139.178.89.65:52314.service. Sep 13 00:26:16.633977 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:26:16.634151 kernel: audit: type=1130 audit(1757723176.621:1694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.123:22-139.178.89.65:52314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:16.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.123:22-139.178.89.65:52314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:16.822000 audit[6329]: USER_ACCT pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:16.834349 sshd[6329]: Accepted publickey for core from 139.178.89.65 port 52314 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:26:16.838214 sshd[6329]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:26:16.835000 audit[6329]: CRED_ACQ pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:16.848678 kernel: audit: type=1101 audit(1757723176.822:1695): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:16.848833 kernel: audit: type=1103 audit(1757723176.835:1696): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:16.847282 systemd[1]: Started session-30.scope. Sep 13 00:26:16.853337 systemd-logind[1734]: New session 30 of user core. Sep 13 00:26:16.859876 kernel: audit: type=1006 audit(1757723176.836:1697): pid=6329 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Sep 13 00:26:16.836000 audit[6329]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcede5a0 a2=3 a3=1 items=0 ppid=1 pid=6329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:16.873144 kernel: audit: type=1300 audit(1757723176.836:1697): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcede5a0 a2=3 a3=1 items=0 ppid=1 pid=6329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:16.836000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:16.882077 kernel: audit: type=1327 audit(1757723176.836:1697): proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:16.866000 audit[6329]: USER_START pid=6329 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:16.893503 kernel: audit: type=1105 audit(1757723176.866:1698): pid=6329 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:16.873000 audit[6331]: CRED_ACQ pid=6331 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:16.906241 kernel: audit: type=1103 audit(1757723176.873:1699): pid=6331 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:17.177698 sshd[6329]: pam_unix(sshd:session): session closed for user core Sep 13 00:26:17.179000 audit[6329]: USER_END pid=6329 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:17.184239 systemd-logind[1734]: Session 30 logged out. Waiting for processes to exit. Sep 13 00:26:17.185601 systemd[1]: session-30.scope: Deactivated successfully. Sep 13 00:26:17.186781 systemd[1]: sshd@29-172.31.25.123:22-139.178.89.65:52314.service: Deactivated successfully. Sep 13 00:26:17.190772 systemd-logind[1734]: Removed session 30. Sep 13 00:26:17.179000 audit[6329]: CRED_DISP pid=6329 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:17.204200 kernel: audit: type=1106 audit(1757723177.179:1700): pid=6329 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:17.204373 kernel: audit: type=1104 audit(1757723177.179:1701): pid=6329 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:17.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.25.123:22-139.178.89.65:52314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:22.214687 systemd[1]: Started sshd@30-172.31.25.123:22-139.178.89.65:43912.service. Sep 13 00:26:22.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.25.123:22-139.178.89.65:43912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:22.216990 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:26:22.217128 kernel: audit: type=1130 audit(1757723182.214:1703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.25.123:22-139.178.89.65:43912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:22.397000 audit[6341]: USER_ACCT pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.401012 sshd[6341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:26:22.409011 sshd[6341]: Accepted publickey for core from 139.178.89.65 port 43912 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:26:22.410401 systemd[1]: Started session-31.scope. Sep 13 00:26:22.399000 audit[6341]: CRED_ACQ pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.421433 kernel: audit: type=1101 audit(1757723182.397:1704): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.421551 kernel: audit: type=1103 audit(1757723182.399:1705): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.413227 systemd-logind[1734]: New session 31 of user core. Sep 13 00:26:22.436640 kernel: audit: type=1006 audit(1757723182.399:1706): pid=6341 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 Sep 13 00:26:22.399000 audit[6341]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7d21100 a2=3 a3=1 items=0 ppid=1 pid=6341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:22.450512 kernel: audit: type=1300 audit(1757723182.399:1706): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7d21100 a2=3 a3=1 items=0 ppid=1 pid=6341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:22.399000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:22.457544 kernel: audit: type=1327 audit(1757723182.399:1706): proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:22.423000 audit[6341]: USER_START pid=6341 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.471515 kernel: audit: type=1105 audit(1757723182.423:1707): pid=6341 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.434000 audit[6343]: CRED_ACQ pid=6343 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.484532 kernel: audit: type=1103 audit(1757723182.434:1708): pid=6343 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.694410 sshd[6341]: pam_unix(sshd:session): session closed for user core Sep 13 00:26:22.695000 audit[6341]: USER_END pid=6341 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.695000 audit[6341]: CRED_DISP pid=6341 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.717823 kernel: audit: type=1106 audit(1757723182.695:1709): pid=6341 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.718063 kernel: audit: type=1104 audit(1757723182.695:1710): pid=6341 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:22.710544 systemd-logind[1734]: Session 31 logged out. Waiting for processes to exit. Sep 13 00:26:22.712278 systemd[1]: sshd@30-172.31.25.123:22-139.178.89.65:43912.service: Deactivated successfully. Sep 13 00:26:22.713663 systemd[1]: session-31.scope: Deactivated successfully. Sep 13 00:26:22.716037 systemd-logind[1734]: Removed session 31. Sep 13 00:26:22.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.31.25.123:22-139.178.89.65:43912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:23.101865 systemd[1]: run-containerd-runc-k8s.io-b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618-runc.iPScdC.mount: Deactivated successfully. Sep 13 00:26:23.209102 systemd[1]: run-containerd-runc-k8s.io-e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be-runc.Ixp3YJ.mount: Deactivated successfully. Sep 13 00:26:27.726505 systemd[1]: Started sshd@31-172.31.25.123:22-139.178.89.65:43926.service. Sep 13 00:26:27.739401 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:26:27.739570 kernel: audit: type=1130 audit(1757723187.727:1712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-172.31.25.123:22-139.178.89.65:43926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:27.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-172.31.25.123:22-139.178.89.65:43926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:27.924000 audit[6393]: USER_ACCT pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:27.926225 sshd[6393]: Accepted publickey for core from 139.178.89.65 port 43926 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:26:27.937020 kernel: audit: type=1101 audit(1757723187.924:1713): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:27.936000 audit[6393]: CRED_ACQ pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:27.938231 sshd[6393]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:26:27.947600 systemd[1]: Started session-32.scope. Sep 13 00:26:27.948985 kernel: audit: type=1103 audit(1757723187.936:1714): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:27.949126 systemd-logind[1734]: New session 32 of user core. Sep 13 00:26:27.936000 audit[6393]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4179740 a2=3 a3=1 items=0 ppid=1 pid=6393 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:27.968763 kernel: audit: type=1006 audit(1757723187.936:1715): pid=6393 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Sep 13 00:26:27.968885 kernel: audit: type=1300 audit(1757723187.936:1715): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4179740 a2=3 a3=1 items=0 ppid=1 pid=6393 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:27.936000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:27.977221 kernel: audit: type=1327 audit(1757723187.936:1715): proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:27.977365 kernel: audit: type=1105 audit(1757723187.967:1716): pid=6393 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:27.967000 audit[6393]: USER_START pid=6393 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:27.970000 audit[6395]: CRED_ACQ pid=6395 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:27.998933 kernel: audit: type=1103 audit(1757723187.970:1717): pid=6395 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:28.286046 sshd[6393]: pam_unix(sshd:session): session closed for user core Sep 13 00:26:28.287000 audit[6393]: USER_END pid=6393 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:28.296000 audit[6393]: CRED_DISP pid=6393 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:28.300660 systemd[1]: sshd@31-172.31.25.123:22-139.178.89.65:43926.service: Deactivated successfully. Sep 13 00:26:28.303129 systemd[1]: session-32.scope: Deactivated successfully. Sep 13 00:26:28.304807 systemd-logind[1734]: Session 32 logged out. Waiting for processes to exit. Sep 13 00:26:28.306684 systemd-logind[1734]: Removed session 32. Sep 13 00:26:28.309596 kernel: audit: type=1106 audit(1757723188.287:1718): pid=6393 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:28.309750 kernel: audit: type=1104 audit(1757723188.296:1719): pid=6393 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:28.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-172.31.25.123:22-139.178.89.65:43926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:33.258000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:33.261457 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 00:26:33.261578 kernel: audit: type=1400 audit(1757723193.258:1721): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:33.258000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c3b080 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:33.258000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:33.300404 kernel: audit: type=1300 audit(1757723193.258:1721): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c3b080 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:33.300533 kernel: audit: type=1327 audit(1757723193.258:1721): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:33.323001 kernel: audit: type=1400 audit(1757723193.258:1722): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:33.258000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:33.324583 systemd[1]: Started sshd@32-172.31.25.123:22-139.178.89.65:46606.service. Sep 13 00:26:33.258000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee5240 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:33.341292 kernel: audit: type=1300 audit(1757723193.258:1722): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee5240 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:33.258000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:33.351881 kernel: audit: type=1327 audit(1757723193.258:1722): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:33.362727 kernel: audit: type=1130 audit(1757723193.324:1723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-172.31.25.123:22-139.178.89.65:46606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:33.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-172.31.25.123:22-139.178.89.65:46606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:33.504888 sshd[6404]: Accepted publickey for core from 139.178.89.65 port 46606 ssh2: RSA SHA256:UwEWMHPIiY0JWRoNDVbebEOPypC7B+efyco4MjsCg+8 Sep 13 00:26:33.503000 audit[6404]: USER_ACCT pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.516939 sshd[6404]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 00:26:33.515000 audit[6404]: CRED_ACQ pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.518039 kernel: audit: type=1101 audit(1757723193.503:1724): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.536592 kernel: audit: type=1103 audit(1757723193.515:1725): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.536727 kernel: audit: type=1006 audit(1757723193.515:1726): pid=6404 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=33 res=1 Sep 13 00:26:33.542599 systemd-logind[1734]: New session 33 of user core. Sep 13 00:26:33.544941 systemd[1]: Started session-33.scope. Sep 13 00:26:33.515000 audit[6404]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd5b99b0 a2=3 a3=1 items=0 ppid=1 pid=6404 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:33.515000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 00:26:33.556000 audit[6404]: USER_START pid=6404 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.558000 audit[6406]: CRED_ACQ pid=6406 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.830622 sshd[6404]: pam_unix(sshd:session): session closed for user core Sep 13 00:26:33.832000 audit[6404]: USER_END pid=6404 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.832000 audit[6404]: CRED_DISP pid=6404 uid=0 auid=500 ses=33 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Sep 13 00:26:33.836541 systemd[1]: sshd@32-172.31.25.123:22-139.178.89.65:46606.service: Deactivated successfully. Sep 13 00:26:33.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-172.31.25.123:22-139.178.89.65:46606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 00:26:33.838611 systemd[1]: session-33.scope: Deactivated successfully. Sep 13 00:26:33.840407 systemd-logind[1734]: Session 33 logged out. Waiting for processes to exit. Sep 13 00:26:33.842811 systemd-logind[1734]: Removed session 33. Sep 13 00:26:34.106000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7375 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:34.106000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=400692cb40 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:26:34.106000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:26:34.108000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:34.108000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=400692cb70 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:26:34.108000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:26:34.128000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7381 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:34.128000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4009e53560 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:26:34.128000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:26:34.140000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:34.140000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4004967ec0 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:26:34.140000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:26:34.395000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:34.395000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=40133c3680 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:26:34.395000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:26:34.397000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:34.397000 audit[2620]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4012ecff20 a2=fc6 a3=0 items=0 ppid=2372 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c951 key=(null) Sep 13 00:26:34.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313233002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Sep 13 00:26:41.183376 systemd[1]: run-containerd-runc-k8s.io-16e8a978be82517e35ac508b7f86266973960e5cabc941ee8a9f3958fc296713-runc.Zbjhza.mount: Deactivated successfully. Sep 13 00:26:42.223000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.225667 kernel: kauditd_printk_skb: 25 callbacks suppressed Sep 13 00:26:42.225808 kernel: audit: type=1400 audit(1757723202.223:1738): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.223000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee53c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:42.247294 kernel: audit: type=1300 audit(1757723202.223:1738): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee53c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:42.223000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:42.261541 kernel: audit: type=1327 audit(1757723202.223:1738): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:42.223000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.271593 kernel: audit: type=1400 audit(1757723202.223:1739): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.271722 kernel: audit: type=1300 audit(1757723202.223:1739): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee53e0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:42.223000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee53e0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:42.223000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:42.294254 kernel: audit: type=1327 audit(1757723202.223:1739): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:42.294326 kernel: audit: type=1400 audit(1757723202.223:1740): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.223000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.223000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee5580 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:42.316053 kernel: audit: type=1300 audit(1757723202.223:1740): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ee5580 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:42.316217 kernel: audit: type=1327 audit(1757723202.223:1740): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:42.223000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:42.226000 audit[2574]: AVC avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.336038 kernel: audit: type=1400 audit(1757723202.226:1741): avc: denied { watch } for pid=2574 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:42.226000 audit[2574]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40030689c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:42.226000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:47.194287 systemd[1]: cri-containerd-18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad.scope: Deactivated successfully. Sep 13 00:26:47.194853 systemd[1]: cri-containerd-18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad.scope: Consumed 5.567s CPU time. Sep 13 00:26:47.198000 audit: BPF prog-id=76 op=UNLOAD Sep 13 00:26:47.198000 audit: BPF prog-id=89 op=UNLOAD Sep 13 00:26:47.246712 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad-rootfs.mount: Deactivated successfully. Sep 13 00:26:47.249198 env[1742]: time="2025-09-13T00:26:47.249128158Z" level=info msg="shim disconnected" id=18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad Sep 13 00:26:47.249817 env[1742]: time="2025-09-13T00:26:47.249202702Z" level=warning msg="cleaning up after shim disconnected" id=18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad namespace=k8s.io Sep 13 00:26:47.249817 env[1742]: time="2025-09-13T00:26:47.249230555Z" level=info msg="cleaning up dead shim" Sep 13 00:26:47.264605 env[1742]: time="2025-09-13T00:26:47.264528141Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:26:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6449 runtime=io.containerd.runc.v2\n" Sep 13 00:26:47.353443 kubelet[2740]: I0913 00:26:47.353372 2740 scope.go:117] "RemoveContainer" containerID="18acd0dbc05df05d117b1e398b56d926a5a24a2a87807b598d5ab4790dbb10ad" Sep 13 00:26:47.358489 env[1742]: time="2025-09-13T00:26:47.358408930Z" level=info msg="CreateContainer within sandbox \"7cb56062791121d49fa96cc8e882251b94ef9c0f90a35808138d924e3d0b2670\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Sep 13 00:26:47.388394 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3548745360.mount: Deactivated successfully. Sep 13 00:26:47.394713 env[1742]: time="2025-09-13T00:26:47.394651672Z" level=info msg="CreateContainer within sandbox \"7cb56062791121d49fa96cc8e882251b94ef9c0f90a35808138d924e3d0b2670\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"cacbc7c56606829daba387bef5670c44337d4ab916c599c346d987de612b37e5\"" Sep 13 00:26:47.395683 env[1742]: time="2025-09-13T00:26:47.395609510Z" level=info msg="StartContainer for \"cacbc7c56606829daba387bef5670c44337d4ab916c599c346d987de612b37e5\"" Sep 13 00:26:47.436807 systemd[1]: Started cri-containerd-cacbc7c56606829daba387bef5670c44337d4ab916c599c346d987de612b37e5.scope. Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501491 kernel: kauditd_printk_skb: 4 callbacks suppressed Sep 13 00:26:47.501623 kernel: audit: type=1400 audit(1757723207.489:1744): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.517008 kernel: audit: type=1400 audit(1757723207.489:1745): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.517117 kernel: audit: type=1400 audit(1757723207.489:1746): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.525025 kernel: audit: type=1400 audit(1757723207.489:1747): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.538433 kernel: audit: type=1400 audit(1757723207.489:1748): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.551477 kernel: audit: type=1400 audit(1757723207.489:1749): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.561174 kernel: audit: type=1400 audit(1757723207.489:1750): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.569302 kernel: audit: type=1400 audit(1757723207.489:1751): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.577068 kernel: audit: type=1400 audit(1757723207.489:1752): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.584880 kernel: audit: type=1400 audit(1757723207.501:1753): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit: BPF prog-id=234 op=LOAD Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2379 pid=6471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:47.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361636263376335363630363832396461626133383762656635363730 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2379 pid=6471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:47.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361636263376335363630363832396461626133383762656635363730 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.501000 audit: BPF prog-id=235 op=LOAD Sep 13 00:26:47.501000 audit[6471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2379 pid=6471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:47.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361636263376335363630363832396461626133383762656635363730 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.509000 audit: BPF prog-id=236 op=LOAD Sep 13 00:26:47.509000 audit[6471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2379 pid=6471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:47.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361636263376335363630363832396461626133383762656635363730 Sep 13 00:26:47.516000 audit: BPF prog-id=236 op=UNLOAD Sep 13 00:26:47.516000 audit: BPF prog-id=235 op=UNLOAD Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { perfmon } for pid=6471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit[6471]: AVC avc: denied { bpf } for pid=6471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:47.516000 audit: BPF prog-id=237 op=LOAD Sep 13 00:26:47.516000 audit[6471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2379 pid=6471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:47.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361636263376335363630363832396461626133383762656635363730 Sep 13 00:26:47.610158 env[1742]: time="2025-09-13T00:26:47.609610961Z" level=info msg="StartContainer for \"cacbc7c56606829daba387bef5670c44337d4ab916c599c346d987de612b37e5\" returns successfully" Sep 13 00:26:48.250249 systemd[1]: run-containerd-runc-k8s.io-cacbc7c56606829daba387bef5670c44337d4ab916c599c346d987de612b37e5-runc.0sysOk.mount: Deactivated successfully. Sep 13 00:26:48.591252 systemd[1]: cri-containerd-4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193.scope: Deactivated successfully. Sep 13 00:26:48.591870 systemd[1]: cri-containerd-4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193.scope: Consumed 30.045s CPU time. Sep 13 00:26:48.590000 audit: BPF prog-id=117 op=UNLOAD Sep 13 00:26:48.595000 audit: BPF prog-id=120 op=UNLOAD Sep 13 00:26:48.627645 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193-rootfs.mount: Deactivated successfully. Sep 13 00:26:48.631071 env[1742]: time="2025-09-13T00:26:48.630884358Z" level=info msg="shim disconnected" id=4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193 Sep 13 00:26:48.631071 env[1742]: time="2025-09-13T00:26:48.630977767Z" level=warning msg="cleaning up after shim disconnected" id=4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193 namespace=k8s.io Sep 13 00:26:48.631071 env[1742]: time="2025-09-13T00:26:48.631003039Z" level=info msg="cleaning up dead shim" Sep 13 00:26:48.648099 env[1742]: time="2025-09-13T00:26:48.648029541Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:26:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6509 runtime=io.containerd.runc.v2\n" Sep 13 00:26:49.363624 kubelet[2740]: I0913 00:26:49.363568 2740 scope.go:117] "RemoveContainer" containerID="4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193" Sep 13 00:26:49.366917 env[1742]: time="2025-09-13T00:26:49.366863640Z" level=info msg="CreateContainer within sandbox \"b0b3322b9e987e71599154e55070fceb86e314913358fee1abe302e1558ede84\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Sep 13 00:26:49.395460 env[1742]: time="2025-09-13T00:26:49.395397366Z" level=info msg="CreateContainer within sandbox \"b0b3322b9e987e71599154e55070fceb86e314913358fee1abe302e1558ede84\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238\"" Sep 13 00:26:49.396656 env[1742]: time="2025-09-13T00:26:49.396587574Z" level=info msg="StartContainer for \"d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238\"" Sep 13 00:26:49.407442 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount974544738.mount: Deactivated successfully. Sep 13 00:26:49.472486 systemd[1]: run-containerd-runc-k8s.io-d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238-runc.LVBFhF.mount: Deactivated successfully. Sep 13 00:26:49.478581 systemd[1]: Started cri-containerd-d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238.scope. Sep 13 00:26:49.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.522000 audit: BPF prog-id=238 op=LOAD Sep 13 00:26:49.523000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.523000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2853 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:49.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436323437333563663336386539343337396538643737633733643864 Sep 13 00:26:49.523000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.523000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2853 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:49.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436323437333563663336386539343337396538643737633733643864 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.524000 audit: BPF prog-id=239 op=LOAD Sep 13 00:26:49.524000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2853 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:49.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436323437333563663336386539343337396538643737633733643864 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.526000 audit: BPF prog-id=240 op=LOAD Sep 13 00:26:49.526000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2853 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:49.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436323437333563663336386539343337396538643737633733643864 Sep 13 00:26:49.527000 audit: BPF prog-id=240 op=UNLOAD Sep 13 00:26:49.527000 audit: BPF prog-id=239 op=UNLOAD Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:49.527000 audit: BPF prog-id=241 op=LOAD Sep 13 00:26:49.527000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2853 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:49.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436323437333563663336386539343337396538643737633733643864 Sep 13 00:26:49.559497 env[1742]: time="2025-09-13T00:26:49.559431188Z" level=info msg="StartContainer for \"d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238\" returns successfully" Sep 13 00:26:50.894000 audit[6480]: AVC avc: denied { watch } for pid=6480 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7379 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:50.894000 audit[6480]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40000547b0 a2=fc6 a3=0 items=0 ppid=2379 pid=6480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:50.894000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:50.895000 audit[6480]: AVC avc: denied { watch } for pid=6480 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 00:26:50.895000 audit[6480]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40009bc040 a2=fc6 a3=0 items=0 ppid=2379 pid=6480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c83,c894 key=(null) Sep 13 00:26:50.895000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 00:26:52.247748 kubelet[2740]: E0913 00:26:52.247115 2740 controller.go:195] "Failed to update lease" err="Put \"https://172.31.25.123:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-123?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Sep 13 00:26:53.091360 systemd[1]: run-containerd-runc-k8s.io-b58fb4094b60e04c61793113caa55563d6df216fb7d1d3db0542de452b76e618-runc.HLXCRj.mount: Deactivated successfully. Sep 13 00:26:53.193524 systemd[1]: run-containerd-runc-k8s.io-e6d0455ea73a2dc40b88ae47a112a0b209f1f9e1e2da2181c765e305a0b897be-runc.0NfUg2.mount: Deactivated successfully. Sep 13 00:26:54.057491 systemd[1]: cri-containerd-f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c.scope: Deactivated successfully. Sep 13 00:26:54.058096 systemd[1]: cri-containerd-f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c.scope: Consumed 3.710s CPU time. Sep 13 00:26:54.066327 kernel: kauditd_printk_skb: 112 callbacks suppressed Sep 13 00:26:54.066516 kernel: audit: type=1334 audit(1757723214.060:1784): prog-id=80 op=UNLOAD Sep 13 00:26:54.060000 audit: BPF prog-id=80 op=UNLOAD Sep 13 00:26:54.069740 kernel: audit: type=1334 audit(1757723214.060:1785): prog-id=91 op=UNLOAD Sep 13 00:26:54.060000 audit: BPF prog-id=91 op=UNLOAD Sep 13 00:26:54.102921 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c-rootfs.mount: Deactivated successfully. Sep 13 00:26:54.104788 env[1742]: time="2025-09-13T00:26:54.104542657Z" level=info msg="shim disconnected" id=f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c Sep 13 00:26:54.104788 env[1742]: time="2025-09-13T00:26:54.104608274Z" level=warning msg="cleaning up after shim disconnected" id=f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c namespace=k8s.io Sep 13 00:26:54.104788 env[1742]: time="2025-09-13T00:26:54.104629178Z" level=info msg="cleaning up dead shim" Sep 13 00:26:54.120572 env[1742]: time="2025-09-13T00:26:54.120481770Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:26:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6609 runtime=io.containerd.runc.v2\n" Sep 13 00:26:54.384101 kubelet[2740]: I0913 00:26:54.383110 2740 scope.go:117] "RemoveContainer" containerID="f2d4f3fd4ef865993cd95c64289ede9777b224856712f0c7a75738dd3cd1360c" Sep 13 00:26:54.387832 env[1742]: time="2025-09-13T00:26:54.387775275Z" level=info msg="CreateContainer within sandbox \"a02de03e7e3ad016cd75d9d37b247ae30cbfd66d5a870fa6e8538ee36c806c35\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Sep 13 00:26:54.421833 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2663502067.mount: Deactivated successfully. Sep 13 00:26:54.428043 env[1742]: time="2025-09-13T00:26:54.427926763Z" level=info msg="CreateContainer within sandbox \"a02de03e7e3ad016cd75d9d37b247ae30cbfd66d5a870fa6e8538ee36c806c35\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"7deee4a6e4daad7fddc7c9c9b23c570e4f82dcb0ba6595da87b79635b3370e0b\"" Sep 13 00:26:54.428805 env[1742]: time="2025-09-13T00:26:54.428755347Z" level=info msg="StartContainer for \"7deee4a6e4daad7fddc7c9c9b23c570e4f82dcb0ba6595da87b79635b3370e0b\"" Sep 13 00:26:54.478344 systemd[1]: Started cri-containerd-7deee4a6e4daad7fddc7c9c9b23c570e4f82dcb0ba6595da87b79635b3370e0b.scope. Sep 13 00:26:54.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529554 kernel: audit: type=1400 audit(1757723214.512:1786): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529680 kernel: audit: type=1400 audit(1757723214.518:1787): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529746 kernel: audit: type=1400 audit(1757723214.518:1788): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.545549 kernel: audit: type=1400 audit(1757723214.518:1789): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.553566 kernel: audit: type=1400 audit(1757723214.518:1790): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.553696 kernel: audit: type=1400 audit(1757723214.518:1791): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.569551 kernel: audit: type=1400 audit(1757723214.518:1792): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.577316 kernel: audit: type=1400 audit(1757723214.518:1793): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.520000 audit: BPF prog-id=242 op=LOAD Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2388 pid=6631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:54.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656565346136653464616164376664646337633963396232336335 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2388 pid=6631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:54.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656565346136653464616164376664646337633963396232336335 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.521000 audit: BPF prog-id=243 op=LOAD Sep 13 00:26:54.521000 audit[6631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2388 pid=6631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:54.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656565346136653464616164376664646337633963396232336335 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.529000 audit: BPF prog-id=244 op=LOAD Sep 13 00:26:54.529000 audit[6631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2388 pid=6631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:54.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656565346136653464616164376664646337633963396232336335 Sep 13 00:26:54.536000 audit: BPF prog-id=244 op=UNLOAD Sep 13 00:26:54.536000 audit: BPF prog-id=243 op=UNLOAD Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { perfmon } for pid=6631 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit[6631]: AVC avc: denied { bpf } for pid=6631 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 00:26:54.536000 audit: BPF prog-id=245 op=LOAD Sep 13 00:26:54.536000 audit[6631]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2388 pid=6631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 00:26:54.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764656565346136653464616164376664646337633963396232336335 Sep 13 00:26:54.631940 env[1742]: time="2025-09-13T00:26:54.631872358Z" level=info msg="StartContainer for \"7deee4a6e4daad7fddc7c9c9b23c570e4f82dcb0ba6595da87b79635b3370e0b\" returns successfully" Sep 13 00:26:57.436000 audit[5393]: AVC avc: denied { watch } for pid=5393 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_24_23.874072406/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c220,c431 tclass=file permissive=0 Sep 13 00:26:57.436000 audit[5393]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40020515e0 a2=fc6 a3=0 items=0 ppid=4988 pid=5393 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c431 key=(null) Sep 13 00:26:57.436000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:26:57.881000 audit[5343]: AVC avc: denied { watch } for pid=5343 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_24_23.3876893614/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c289,c779 tclass=file permissive=0 Sep 13 00:26:57.881000 audit[5343]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000fce000 a2=fc6 a3=0 items=0 ppid=4695 pid=5343 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c779 key=(null) Sep 13 00:26:57.881000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 00:27:01.009538 systemd[1]: cri-containerd-d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238.scope: Deactivated successfully. Sep 13 00:27:01.009000 audit: BPF prog-id=238 op=UNLOAD Sep 13 00:27:01.012325 kernel: kauditd_printk_skb: 55 callbacks suppressed Sep 13 00:27:01.012420 kernel: audit: type=1334 audit(1757723221.009:1806): prog-id=238 op=UNLOAD Sep 13 00:27:01.016632 kernel: audit: type=1334 audit(1757723221.015:1807): prog-id=241 op=UNLOAD Sep 13 00:27:01.015000 audit: BPF prog-id=241 op=UNLOAD Sep 13 00:27:01.054753 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238-rootfs.mount: Deactivated successfully. Sep 13 00:27:01.085302 env[1742]: time="2025-09-13T00:27:01.085217850Z" level=info msg="shim disconnected" id=d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238 Sep 13 00:27:01.085302 env[1742]: time="2025-09-13T00:27:01.085289562Z" level=warning msg="cleaning up after shim disconnected" id=d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238 namespace=k8s.io Sep 13 00:27:01.086129 env[1742]: time="2025-09-13T00:27:01.085312147Z" level=info msg="cleaning up dead shim" Sep 13 00:27:01.099416 env[1742]: time="2025-09-13T00:27:01.099332481Z" level=warning msg="cleanup warnings time=\"2025-09-13T00:27:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6675 runtime=io.containerd.runc.v2\n" Sep 13 00:27:01.410855 kubelet[2740]: I0913 00:27:01.409280 2740 scope.go:117] "RemoveContainer" containerID="4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193" Sep 13 00:27:01.410855 kubelet[2740]: I0913 00:27:01.409664 2740 scope.go:117] "RemoveContainer" containerID="d624735cf368e94379e8d77c73d8d34dff61214b1571342afb9e53e767cc0238" Sep 13 00:27:01.412184 env[1742]: time="2025-09-13T00:27:01.411661385Z" level=info msg="RemoveContainer for \"4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193\"" Sep 13 00:27:01.413185 kubelet[2740]: E0913 00:27:01.413101 2740 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-58fc44c59b-24njx_tigera-operator(81c750dc-cb87-44fa-8346-4c3b5e36f6d4)\"" pod="tigera-operator/tigera-operator-58fc44c59b-24njx" podUID="81c750dc-cb87-44fa-8346-4c3b5e36f6d4" Sep 13 00:27:01.419457 env[1742]: time="2025-09-13T00:27:01.419376900Z" level=info msg="RemoveContainer for \"4f65c6696b9b8156a763f0d8285338926480de069801b8443644b1db021dc193\" returns successfully" Sep 13 00:27:02.248427 kubelet[2740]: E0913 00:27:02.248344 2740 controller.go:195] "Failed to update lease" err="Put \"https://172.31.25.123:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-123?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)"