Sep 13 01:30:52.071840 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Sep 13 01:30:52.071864 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Sep 12 23:05:37 -00 2025 Sep 13 01:30:52.071872 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Sep 13 01:30:52.071879 kernel: printk: bootconsole [pl11] enabled Sep 13 01:30:52.071884 kernel: efi: EFI v2.70 by EDK II Sep 13 01:30:52.071890 kernel: efi: ACPI 2.0=0x3fd5f018 SMBIOS=0x3e580000 SMBIOS 3.0=0x3e560000 MEMATTR=0x3ead8b98 RNG=0x3fd5f998 MEMRESERVE=0x3761cf98 Sep 13 01:30:52.071896 kernel: random: crng init done Sep 13 01:30:52.071902 kernel: ACPI: Early table checksum verification disabled Sep 13 01:30:52.071907 kernel: ACPI: RSDP 0x000000003FD5F018 000024 (v02 VRTUAL) Sep 13 01:30:52.071913 kernel: ACPI: XSDT 0x000000003FD5FF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071919 kernel: ACPI: FACP 0x000000003FD5FC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071924 kernel: ACPI: DSDT 0x000000003FD41018 01DFCD (v02 MSFTVM DSDT01 00000001 INTL 20230628) Sep 13 01:30:52.071931 kernel: ACPI: DBG2 0x000000003FD5FB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071936 kernel: ACPI: GTDT 0x000000003FD5FD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071943 kernel: ACPI: OEM0 0x000000003FD5F098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071949 kernel: ACPI: SPCR 0x000000003FD5FA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071955 kernel: ACPI: APIC 0x000000003FD5F818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071962 kernel: ACPI: SRAT 0x000000003FD5F198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071967 kernel: ACPI: PPTT 0x000000003FD5F418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Sep 13 01:30:52.071973 kernel: ACPI: BGRT 0x000000003FD5FE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 13 01:30:52.071979 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Sep 13 01:30:52.071985 kernel: NUMA: Failed to initialise from firmware Sep 13 01:30:52.071990 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Sep 13 01:30:52.071996 kernel: NUMA: NODE_DATA [mem 0x1bf7f3900-0x1bf7f8fff] Sep 13 01:30:52.072002 kernel: Zone ranges: Sep 13 01:30:52.072007 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Sep 13 01:30:52.072013 kernel: DMA32 empty Sep 13 01:30:52.072019 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Sep 13 01:30:52.072026 kernel: Movable zone start for each node Sep 13 01:30:52.072031 kernel: Early memory node ranges Sep 13 01:30:52.072037 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Sep 13 01:30:52.072043 kernel: node 0: [mem 0x0000000000824000-0x000000003e54ffff] Sep 13 01:30:52.072048 kernel: node 0: [mem 0x000000003e550000-0x000000003e87ffff] Sep 13 01:30:52.072054 kernel: node 0: [mem 0x000000003e880000-0x000000003fc7ffff] Sep 13 01:30:52.072060 kernel: node 0: [mem 0x000000003fc80000-0x000000003fcfffff] Sep 13 01:30:52.072066 kernel: node 0: [mem 0x000000003fd00000-0x000000003fffffff] Sep 13 01:30:52.072072 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Sep 13 01:30:52.072078 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Sep 13 01:30:52.072083 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Sep 13 01:30:52.072089 kernel: psci: probing for conduit method from ACPI. Sep 13 01:30:52.072098 kernel: psci: PSCIv1.1 detected in firmware. Sep 13 01:30:52.072104 kernel: psci: Using standard PSCI v0.2 function IDs Sep 13 01:30:52.072110 kernel: psci: MIGRATE_INFO_TYPE not supported. Sep 13 01:30:52.072116 kernel: psci: SMC Calling Convention v1.4 Sep 13 01:30:52.072122 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Sep 13 01:30:52.072129 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Sep 13 01:30:52.072135 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Sep 13 01:30:52.072141 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Sep 13 01:30:52.072148 kernel: pcpu-alloc: [0] 0 [0] 1 Sep 13 01:30:52.072154 kernel: Detected PIPT I-cache on CPU0 Sep 13 01:30:52.072160 kernel: CPU features: detected: GIC system register CPU interface Sep 13 01:30:52.072166 kernel: CPU features: detected: Hardware dirty bit management Sep 13 01:30:52.072172 kernel: CPU features: detected: Spectre-BHB Sep 13 01:30:52.072178 kernel: CPU features: kernel page table isolation forced ON by KASLR Sep 13 01:30:52.072184 kernel: CPU features: detected: Kernel page table isolation (KPTI) Sep 13 01:30:52.072190 kernel: CPU features: detected: ARM erratum 1418040 Sep 13 01:30:52.072198 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Sep 13 01:30:52.072203 kernel: CPU features: detected: SSBS not fully self-synchronizing Sep 13 01:30:52.072210 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Sep 13 01:30:52.072216 kernel: Policy zone: Normal Sep 13 01:30:52.072223 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 01:30:52.072230 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Sep 13 01:30:52.072236 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 13 01:30:52.072242 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Sep 13 01:30:52.072248 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 13 01:30:52.072254 kernel: software IO TLB: mapped [mem 0x000000003a550000-0x000000003e550000] (64MB) Sep 13 01:30:52.072260 kernel: Memory: 3986880K/4194160K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 207280K reserved, 0K cma-reserved) Sep 13 01:30:52.072269 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 13 01:30:52.072275 kernel: trace event string verifier disabled Sep 13 01:30:52.072281 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 13 01:30:52.072288 kernel: rcu: RCU event tracing is enabled. Sep 13 01:30:52.072294 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 13 01:30:52.072300 kernel: Trampoline variant of Tasks RCU enabled. Sep 13 01:30:52.072306 kernel: Tracing variant of Tasks RCU enabled. Sep 13 01:30:52.072313 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 13 01:30:52.072319 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 13 01:30:52.072324 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Sep 13 01:30:52.072330 kernel: GICv3: 960 SPIs implemented Sep 13 01:30:52.072338 kernel: GICv3: 0 Extended SPIs implemented Sep 13 01:30:52.072344 kernel: GICv3: Distributor has no Range Selector support Sep 13 01:30:52.072349 kernel: Root IRQ handler: gic_handle_irq Sep 13 01:30:52.072355 kernel: GICv3: 16 PPIs implemented Sep 13 01:30:52.072361 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Sep 13 01:30:52.072367 kernel: ITS: No ITS available, not enabling LPIs Sep 13 01:30:52.072374 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 13 01:30:52.072380 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Sep 13 01:30:52.072386 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Sep 13 01:30:52.072392 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Sep 13 01:30:52.072398 kernel: Console: colour dummy device 80x25 Sep 13 01:30:52.072406 kernel: printk: console [tty1] enabled Sep 13 01:30:52.072413 kernel: ACPI: Core revision 20210730 Sep 13 01:30:52.072419 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Sep 13 01:30:52.072426 kernel: pid_max: default: 32768 minimum: 301 Sep 13 01:30:52.072432 kernel: LSM: Security Framework initializing Sep 13 01:30:52.072438 kernel: SELinux: Initializing. Sep 13 01:30:52.072445 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 01:30:52.072451 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Sep 13 01:30:52.072458 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Sep 13 01:30:52.072465 kernel: Hyper-V: Host Build 10.0.22477.1619-1-0 Sep 13 01:30:52.072472 kernel: rcu: Hierarchical SRCU implementation. Sep 13 01:30:52.072478 kernel: Remapping and enabling EFI services. Sep 13 01:30:52.072484 kernel: smp: Bringing up secondary CPUs ... Sep 13 01:30:52.072490 kernel: Detected PIPT I-cache on CPU1 Sep 13 01:30:52.072497 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Sep 13 01:30:52.072504 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Sep 13 01:30:52.072510 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Sep 13 01:30:52.072516 kernel: smp: Brought up 1 node, 2 CPUs Sep 13 01:30:52.072523 kernel: SMP: Total of 2 processors activated. Sep 13 01:30:52.072530 kernel: CPU features: detected: 32-bit EL0 Support Sep 13 01:30:52.072537 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Sep 13 01:30:52.072543 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Sep 13 01:30:52.072550 kernel: CPU features: detected: CRC32 instructions Sep 13 01:30:52.072556 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Sep 13 01:30:52.072563 kernel: CPU features: detected: LSE atomic instructions Sep 13 01:30:52.072569 kernel: CPU features: detected: Privileged Access Never Sep 13 01:30:52.072575 kernel: CPU: All CPU(s) started at EL1 Sep 13 01:30:52.072581 kernel: alternatives: patching kernel code Sep 13 01:30:52.072589 kernel: devtmpfs: initialized Sep 13 01:30:52.072600 kernel: KASLR enabled Sep 13 01:30:52.072607 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 13 01:30:52.072614 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 13 01:30:52.072621 kernel: pinctrl core: initialized pinctrl subsystem Sep 13 01:30:52.072627 kernel: SMBIOS 3.1.0 present. Sep 13 01:30:52.072634 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Sep 13 01:30:52.072641 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 13 01:30:52.072647 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Sep 13 01:30:52.072655 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Sep 13 01:30:52.072662 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Sep 13 01:30:52.072669 kernel: audit: initializing netlink subsys (disabled) Sep 13 01:30:52.072675 kernel: audit: type=2000 audit(0.087:1): state=initialized audit_enabled=0 res=1 Sep 13 01:30:52.072682 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 13 01:30:52.072688 kernel: cpuidle: using governor menu Sep 13 01:30:52.072694 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Sep 13 01:30:52.072717 kernel: ASID allocator initialised with 32768 entries Sep 13 01:30:52.072724 kernel: ACPI: bus type PCI registered Sep 13 01:30:52.072730 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 13 01:30:52.072737 kernel: Serial: AMBA PL011 UART driver Sep 13 01:30:52.072744 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Sep 13 01:30:52.072751 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Sep 13 01:30:52.072757 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Sep 13 01:30:52.072764 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Sep 13 01:30:52.072770 kernel: cryptd: max_cpu_qlen set to 1000 Sep 13 01:30:52.072778 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Sep 13 01:30:52.072785 kernel: ACPI: Added _OSI(Module Device) Sep 13 01:30:52.072791 kernel: ACPI: Added _OSI(Processor Device) Sep 13 01:30:52.072798 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 13 01:30:52.072805 kernel: ACPI: Added _OSI(Linux-Dell-Video) Sep 13 01:30:52.072811 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Sep 13 01:30:52.072818 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Sep 13 01:30:52.072824 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 13 01:30:52.072831 kernel: ACPI: Interpreter enabled Sep 13 01:30:52.072839 kernel: ACPI: Using GIC for interrupt routing Sep 13 01:30:52.072845 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Sep 13 01:30:52.072852 kernel: printk: console [ttyAMA0] enabled Sep 13 01:30:52.072859 kernel: printk: bootconsole [pl11] disabled Sep 13 01:30:52.072865 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Sep 13 01:30:52.072872 kernel: iommu: Default domain type: Translated Sep 13 01:30:52.072879 kernel: iommu: DMA domain TLB invalidation policy: strict mode Sep 13 01:30:52.072885 kernel: vgaarb: loaded Sep 13 01:30:52.072892 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 13 01:30:52.072898 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 13 01:30:52.072906 kernel: PTP clock support registered Sep 13 01:30:52.072913 kernel: Registered efivars operations Sep 13 01:30:52.072919 kernel: No ACPI PMU IRQ for CPU0 Sep 13 01:30:52.072926 kernel: No ACPI PMU IRQ for CPU1 Sep 13 01:30:52.072932 kernel: clocksource: Switched to clocksource arch_sys_counter Sep 13 01:30:52.072939 kernel: VFS: Disk quotas dquot_6.6.0 Sep 13 01:30:52.072946 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 13 01:30:52.072952 kernel: pnp: PnP ACPI init Sep 13 01:30:52.072958 kernel: pnp: PnP ACPI: found 0 devices Sep 13 01:30:52.072966 kernel: NET: Registered PF_INET protocol family Sep 13 01:30:52.072973 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 13 01:30:52.072980 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Sep 13 01:30:52.072987 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 13 01:30:52.072994 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Sep 13 01:30:52.073000 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Sep 13 01:30:52.073007 kernel: TCP: Hash tables configured (established 32768 bind 32768) Sep 13 01:30:52.073014 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 01:30:52.073022 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Sep 13 01:30:52.073029 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 13 01:30:52.073036 kernel: PCI: CLS 0 bytes, default 64 Sep 13 01:30:52.073043 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Sep 13 01:30:52.073049 kernel: kvm [1]: HYP mode not available Sep 13 01:30:52.073056 kernel: Initialise system trusted keyrings Sep 13 01:30:52.073062 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Sep 13 01:30:52.073069 kernel: Key type asymmetric registered Sep 13 01:30:52.073075 kernel: Asymmetric key parser 'x509' registered Sep 13 01:30:52.073083 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Sep 13 01:30:52.073089 kernel: io scheduler mq-deadline registered Sep 13 01:30:52.073096 kernel: io scheduler kyber registered Sep 13 01:30:52.073102 kernel: io scheduler bfq registered Sep 13 01:30:52.073109 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 13 01:30:52.073116 kernel: thunder_xcv, ver 1.0 Sep 13 01:30:52.073122 kernel: thunder_bgx, ver 1.0 Sep 13 01:30:52.073129 kernel: nicpf, ver 1.0 Sep 13 01:30:52.073135 kernel: nicvf, ver 1.0 Sep 13 01:30:52.073260 kernel: rtc-efi rtc-efi.0: registered as rtc0 Sep 13 01:30:52.073325 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-09-13T01:30:51 UTC (1757727051) Sep 13 01:30:52.073334 kernel: efifb: probing for efifb Sep 13 01:30:52.073341 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Sep 13 01:30:52.073347 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Sep 13 01:30:52.073354 kernel: efifb: scrolling: redraw Sep 13 01:30:52.073361 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 13 01:30:52.073368 kernel: Console: switching to colour frame buffer device 128x48 Sep 13 01:30:52.073376 kernel: fb0: EFI VGA frame buffer device Sep 13 01:30:52.073383 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Sep 13 01:30:52.073389 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 13 01:30:52.073396 kernel: NET: Registered PF_INET6 protocol family Sep 13 01:30:52.073402 kernel: Segment Routing with IPv6 Sep 13 01:30:52.073409 kernel: In-situ OAM (IOAM) with IPv6 Sep 13 01:30:52.073415 kernel: NET: Registered PF_PACKET protocol family Sep 13 01:30:52.073422 kernel: Key type dns_resolver registered Sep 13 01:30:52.073429 kernel: registered taskstats version 1 Sep 13 01:30:52.073435 kernel: Loading compiled-in X.509 certificates Sep 13 01:30:52.073444 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 47ac98e9306f36eebe4291d409359a5a5d0c2b9c' Sep 13 01:30:52.073450 kernel: Key type .fscrypt registered Sep 13 01:30:52.073457 kernel: Key type fscrypt-provisioning registered Sep 13 01:30:52.073463 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 13 01:30:52.073470 kernel: ima: Allocated hash algorithm: sha1 Sep 13 01:30:52.073476 kernel: ima: No architecture policies found Sep 13 01:30:52.073483 kernel: clk: Disabling unused clocks Sep 13 01:30:52.073489 kernel: Freeing unused kernel memory: 36416K Sep 13 01:30:52.073497 kernel: Run /init as init process Sep 13 01:30:52.073504 kernel: with arguments: Sep 13 01:30:52.073510 kernel: /init Sep 13 01:30:52.073517 kernel: with environment: Sep 13 01:30:52.073523 kernel: HOME=/ Sep 13 01:30:52.073529 kernel: TERM=linux Sep 13 01:30:52.073536 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Sep 13 01:30:52.073545 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 01:30:52.073555 systemd[1]: Detected virtualization microsoft. Sep 13 01:30:52.073562 systemd[1]: Detected architecture arm64. Sep 13 01:30:52.073569 systemd[1]: Running in initrd. Sep 13 01:30:52.073576 systemd[1]: No hostname configured, using default hostname. Sep 13 01:30:52.073582 systemd[1]: Hostname set to . Sep 13 01:30:52.073590 systemd[1]: Initializing machine ID from random generator. Sep 13 01:30:52.073597 systemd[1]: Queued start job for default target initrd.target. Sep 13 01:30:52.073604 systemd[1]: Started systemd-ask-password-console.path. Sep 13 01:30:52.073612 systemd[1]: Reached target cryptsetup.target. Sep 13 01:30:52.073619 systemd[1]: Reached target paths.target. Sep 13 01:30:52.073626 systemd[1]: Reached target slices.target. Sep 13 01:30:52.073633 systemd[1]: Reached target swap.target. Sep 13 01:30:52.073639 systemd[1]: Reached target timers.target. Sep 13 01:30:52.073647 systemd[1]: Listening on iscsid.socket. Sep 13 01:30:52.073654 systemd[1]: Listening on iscsiuio.socket. Sep 13 01:30:52.073661 systemd[1]: Listening on systemd-journald-audit.socket. Sep 13 01:30:52.073669 systemd[1]: Listening on systemd-journald-dev-log.socket. Sep 13 01:30:52.073676 systemd[1]: Listening on systemd-journald.socket. Sep 13 01:30:52.073683 systemd[1]: Listening on systemd-networkd.socket. Sep 13 01:30:52.073690 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 01:30:52.073708 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 01:30:52.073715 systemd[1]: Reached target sockets.target. Sep 13 01:30:52.073722 systemd[1]: Starting kmod-static-nodes.service... Sep 13 01:30:52.073730 systemd[1]: Finished network-cleanup.service. Sep 13 01:30:52.073737 systemd[1]: Starting systemd-fsck-usr.service... Sep 13 01:30:52.073745 systemd[1]: Starting systemd-journald.service... Sep 13 01:30:52.073752 systemd[1]: Starting systemd-modules-load.service... Sep 13 01:30:52.073759 systemd[1]: Starting systemd-resolved.service... Sep 13 01:30:52.073771 systemd-journald[276]: Journal started Sep 13 01:30:52.073810 systemd-journald[276]: Runtime Journal (/run/log/journal/57f77bc93427478cbae80e567e04c9dc) is 8.0M, max 78.5M, 70.5M free. Sep 13 01:30:52.069979 systemd-modules-load[277]: Inserted module 'overlay' Sep 13 01:30:52.097032 systemd[1]: Starting systemd-vconsole-setup.service... Sep 13 01:30:52.122408 systemd[1]: Started systemd-journald.service. Sep 13 01:30:52.122463 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 13 01:30:52.111036 systemd-resolved[278]: Positive Trust Anchors: Sep 13 01:30:52.149947 kernel: audit: type=1130 audit(1757727052.127:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.111053 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 01:30:52.185357 kernel: audit: type=1130 audit(1757727052.154:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.185377 kernel: Bridge firewalling registered Sep 13 01:30:52.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.111080 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 01:30:52.253923 kernel: audit: type=1130 audit(1757727052.190:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.113255 systemd-resolved[278]: Defaulting to hostname 'linux'. Sep 13 01:30:52.286949 kernel: SCSI subsystem initialized Sep 13 01:30:52.286972 kernel: audit: type=1130 audit(1757727052.253:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.286982 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 13 01:30:52.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.128015 systemd[1]: Started systemd-resolved.service. Sep 13 01:30:52.339216 kernel: device-mapper: uevent: version 1.0.3 Sep 13 01:30:52.339243 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Sep 13 01:30:52.339257 kernel: audit: type=1130 audit(1757727052.311:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.154995 systemd[1]: Finished kmod-static-nodes.service. Sep 13 01:30:52.190628 systemd[1]: Finished systemd-fsck-usr.service. Sep 13 01:30:52.396859 kernel: audit: type=1130 audit(1757727052.364:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.224362 systemd-modules-load[277]: Inserted module 'br_netfilter' Sep 13 01:30:52.261930 systemd[1]: Finished systemd-vconsole-setup.service. Sep 13 01:30:52.455793 kernel: audit: type=1130 audit(1757727052.407:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.455817 kernel: audit: type=1130 audit(1757727052.434:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.312046 systemd[1]: Reached target nss-lookup.target. Sep 13 01:30:52.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.339198 systemd-modules-load[277]: Inserted module 'dm_multipath' Sep 13 01:30:52.497892 dracut-cmdline[300]: dracut-dracut-053 Sep 13 01:30:52.497892 dracut-cmdline[300]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=t Sep 13 01:30:52.497892 dracut-cmdline[300]: tyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=563df7b8a9b19b8c496587ae06f3c3ec1604a5105c3a3f313c9ccaa21d8055ca Sep 13 01:30:52.542417 kernel: audit: type=1130 audit(1757727052.460:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.340805 systemd[1]: Starting dracut-cmdline-ask.service... Sep 13 01:30:52.349554 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Sep 13 01:30:52.559130 kernel: Loading iSCSI transport class v2.0-870. Sep 13 01:30:52.357777 systemd[1]: Finished systemd-modules-load.service. Sep 13 01:30:52.366156 systemd[1]: Starting systemd-sysctl.service... Sep 13 01:30:52.397401 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Sep 13 01:30:52.408234 systemd[1]: Finished systemd-sysctl.service. Sep 13 01:30:52.435633 systemd[1]: Finished dracut-cmdline-ask.service. Sep 13 01:30:52.587169 kernel: iscsi: registered transport (tcp) Sep 13 01:30:52.462017 systemd[1]: Starting dracut-cmdline.service... Sep 13 01:30:52.606895 kernel: iscsi: registered transport (qla4xxx) Sep 13 01:30:52.606920 kernel: QLogic iSCSI HBA Driver Sep 13 01:30:52.640150 systemd[1]: Finished dracut-cmdline.service. Sep 13 01:30:52.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:52.646273 systemd[1]: Starting dracut-pre-udev.service... Sep 13 01:30:52.702721 kernel: raid6: neonx8 gen() 13756 MB/s Sep 13 01:30:52.719706 kernel: raid6: neonx8 xor() 10796 MB/s Sep 13 01:30:52.739712 kernel: raid6: neonx4 gen() 13541 MB/s Sep 13 01:30:52.761707 kernel: raid6: neonx4 xor() 11206 MB/s Sep 13 01:30:52.781706 kernel: raid6: neonx2 gen() 12968 MB/s Sep 13 01:30:52.801706 kernel: raid6: neonx2 xor() 10263 MB/s Sep 13 01:30:52.823707 kernel: raid6: neonx1 gen() 10647 MB/s Sep 13 01:30:52.843705 kernel: raid6: neonx1 xor() 8793 MB/s Sep 13 01:30:52.864706 kernel: raid6: int64x8 gen() 6273 MB/s Sep 13 01:30:52.886707 kernel: raid6: int64x8 xor() 3543 MB/s Sep 13 01:30:52.907711 kernel: raid6: int64x4 gen() 7202 MB/s Sep 13 01:30:52.928706 kernel: raid6: int64x4 xor() 3855 MB/s Sep 13 01:30:52.949706 kernel: raid6: int64x2 gen() 6153 MB/s Sep 13 01:30:52.970707 kernel: raid6: int64x2 xor() 3322 MB/s Sep 13 01:30:52.991706 kernel: raid6: int64x1 gen() 5043 MB/s Sep 13 01:30:53.018269 kernel: raid6: int64x1 xor() 2645 MB/s Sep 13 01:30:53.018280 kernel: raid6: using algorithm neonx8 gen() 13756 MB/s Sep 13 01:30:53.018288 kernel: raid6: .... xor() 10796 MB/s, rmw enabled Sep 13 01:30:53.023215 kernel: raid6: using neon recovery algorithm Sep 13 01:30:53.045627 kernel: xor: measuring software checksum speed Sep 13 01:30:53.045640 kernel: 8regs : 17163 MB/sec Sep 13 01:30:53.055260 kernel: 32regs : 19783 MB/sec Sep 13 01:30:53.055270 kernel: arm64_neon : 27626 MB/sec Sep 13 01:30:53.055278 kernel: xor: using function: arm64_neon (27626 MB/sec) Sep 13 01:30:53.117713 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Sep 13 01:30:53.126499 systemd[1]: Finished dracut-pre-udev.service. Sep 13 01:30:53.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:53.134000 audit: BPF prog-id=7 op=LOAD Sep 13 01:30:53.134000 audit: BPF prog-id=8 op=LOAD Sep 13 01:30:53.135869 systemd[1]: Starting systemd-udevd.service... Sep 13 01:30:53.150241 systemd-udevd[476]: Using default interface naming scheme 'v252'. Sep 13 01:30:53.156469 systemd[1]: Started systemd-udevd.service. Sep 13 01:30:53.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:53.168319 systemd[1]: Starting dracut-pre-trigger.service... Sep 13 01:30:53.184045 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Sep 13 01:30:53.212432 systemd[1]: Finished dracut-pre-trigger.service. Sep 13 01:30:53.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:53.218641 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 01:30:53.258437 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 01:30:53.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:53.316717 kernel: hv_vmbus: Vmbus version:5.3 Sep 13 01:30:53.323716 kernel: hv_vmbus: registering driver hid_hyperv Sep 13 01:30:53.347507 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Sep 13 01:30:53.347565 kernel: hv_vmbus: registering driver hyperv_keyboard Sep 13 01:30:53.347576 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Sep 13 01:30:53.374004 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Sep 13 01:30:53.374055 kernel: hv_vmbus: registering driver hv_netvsc Sep 13 01:30:53.374065 kernel: hv_vmbus: registering driver hv_storvsc Sep 13 01:30:53.383630 kernel: scsi host0: storvsc_host_t Sep 13 01:30:53.383719 kernel: scsi host1: storvsc_host_t Sep 13 01:30:53.396725 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Sep 13 01:30:53.403771 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Sep 13 01:30:53.422762 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Sep 13 01:30:53.424088 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 13 01:30:53.424100 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Sep 13 01:30:53.440002 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Sep 13 01:30:53.470313 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Sep 13 01:30:53.470435 kernel: sd 0:0:0:0: [sda] Write Protect is off Sep 13 01:30:53.470515 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Sep 13 01:30:53.470594 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Sep 13 01:30:53.470676 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 13 01:30:53.470687 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Sep 13 01:30:53.504088 kernel: hv_netvsc 000d3a06-19c8-000d-3a06-19c8000d3a06 eth0: VF slot 1 added Sep 13 01:30:53.513724 kernel: hv_vmbus: registering driver hv_pci Sep 13 01:30:53.523579 kernel: hv_pci 04538956-66ec-4af3-bd68-18177b5939a0: PCI VMBus probing: Using version 0x10004 Sep 13 01:30:53.810615 kernel: hv_pci 04538956-66ec-4af3-bd68-18177b5939a0: PCI host bridge to bus 66ec:00 Sep 13 01:30:53.810751 kernel: pci_bus 66ec:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Sep 13 01:30:53.810845 kernel: pci_bus 66ec:00: No busn resource found for root bus, will use [bus 00-ff] Sep 13 01:30:53.810915 kernel: pci 66ec:00:02.0: [15b3:1018] type 00 class 0x020000 Sep 13 01:30:53.811003 kernel: pci 66ec:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 13 01:30:53.811080 kernel: pci 66ec:00:02.0: enabling Extended Tags Sep 13 01:30:53.811153 kernel: pci 66ec:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 66ec:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Sep 13 01:30:53.811230 kernel: pci_bus 66ec:00: busn_res: [bus 00-ff] end is updated to 00 Sep 13 01:30:53.811299 kernel: pci 66ec:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Sep 13 01:30:53.849211 kernel: mlx5_core 66ec:00:02.0: enabling device (0000 -> 0002) Sep 13 01:30:54.242145 kernel: mlx5_core 66ec:00:02.0: firmware version: 16.31.2424 Sep 13 01:30:54.242249 kernel: mlx5_core 66ec:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Sep 13 01:30:54.242327 kernel: hv_netvsc 000d3a06-19c8-000d-3a06-19c8000d3a06 eth0: VF registering: eth1 Sep 13 01:30:54.242405 kernel: mlx5_core 66ec:00:02.0 eth1: joined to eth0 Sep 13 01:30:54.242489 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (535) Sep 13 01:30:54.241948 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 01:30:54.263718 kernel: mlx5_core 66ec:00:02.0 enP26348s1: renamed from eth1 Sep 13 01:30:54.283357 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Sep 13 01:30:54.483757 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Sep 13 01:30:54.489688 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Sep 13 01:30:54.504040 systemd[1]: Starting disk-uuid.service... Sep 13 01:30:54.542226 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Sep 13 01:30:55.543715 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Sep 13 01:30:55.543885 disk-uuid[599]: The operation has completed successfully. Sep 13 01:30:55.613728 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 13 01:30:55.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:55.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:55.613822 systemd[1]: Finished disk-uuid.service. Sep 13 01:30:55.622538 systemd[1]: Starting verity-setup.service... Sep 13 01:30:55.670732 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Sep 13 01:30:56.099218 systemd[1]: Found device dev-mapper-usr.device. Sep 13 01:30:56.109689 systemd[1]: Finished verity-setup.service. Sep 13 01:30:56.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.126213 kernel: kauditd_printk_skb: 9 callbacks suppressed Sep 13 01:30:56.126258 kernel: audit: type=1130 audit(1757727056.114:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.123741 systemd[1]: Mounting sysusr-usr.mount... Sep 13 01:30:56.205718 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Sep 13 01:30:56.205886 systemd[1]: Mounted sysusr-usr.mount. Sep 13 01:30:56.210566 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Sep 13 01:30:56.211364 systemd[1]: Starting ignition-setup.service... Sep 13 01:30:56.228775 systemd[1]: Starting parse-ip-for-networkd.service... Sep 13 01:30:56.267797 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 13 01:30:56.267852 kernel: BTRFS info (device sda6): using free space tree Sep 13 01:30:56.272653 kernel: BTRFS info (device sda6): has skinny extents Sep 13 01:30:56.313255 systemd[1]: Finished parse-ip-for-networkd.service. Sep 13 01:30:56.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.341362 systemd[1]: Starting systemd-networkd.service... Sep 13 01:30:56.323000 audit: BPF prog-id=9 op=LOAD Sep 13 01:30:56.358743 kernel: audit: type=1130 audit(1757727056.318:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.358774 kernel: audit: type=1334 audit(1757727056.323:22): prog-id=9 op=LOAD Sep 13 01:30:56.370328 systemd-networkd[840]: lo: Link UP Sep 13 01:30:56.370338 systemd-networkd[840]: lo: Gained carrier Sep 13 01:30:56.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.370764 systemd-networkd[840]: Enumeration completed Sep 13 01:30:56.410347 kernel: audit: type=1130 audit(1757727056.379:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.374066 systemd[1]: Started systemd-networkd.service. Sep 13 01:30:56.374136 systemd-networkd[840]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 01:30:56.379665 systemd[1]: Reached target network.target. Sep 13 01:30:56.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.409621 systemd[1]: Starting iscsiuio.service... Sep 13 01:30:56.484480 kernel: audit: type=1130 audit(1757727056.431:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.484505 kernel: audit: type=1130 audit(1757727056.460:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.418768 systemd[1]: Started iscsiuio.service. Sep 13 01:30:56.450793 systemd[1]: Starting iscsid.service... Sep 13 01:30:56.496303 iscsid[847]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Sep 13 01:30:56.496303 iscsid[847]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Sep 13 01:30:56.496303 iscsid[847]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Sep 13 01:30:56.496303 iscsid[847]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Sep 13 01:30:56.496303 iscsid[847]: If using hardware iscsi like qla4xxx this message can be ignored. Sep 13 01:30:56.496303 iscsid[847]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Sep 13 01:30:56.496303 iscsid[847]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Sep 13 01:30:56.617440 kernel: audit: type=1130 audit(1757727056.530:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.456526 systemd[1]: Started iscsid.service. Sep 13 01:30:56.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.461534 systemd[1]: Starting dracut-initqueue.service... Sep 13 01:30:56.651298 kernel: audit: type=1130 audit(1757727056.621:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.506260 systemd[1]: Finished dracut-initqueue.service. Sep 13 01:30:56.531155 systemd[1]: Reached target remote-fs-pre.target. Sep 13 01:30:56.569227 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 01:30:56.579630 systemd[1]: Reached target remote-fs.target. Sep 13 01:30:56.592009 systemd[1]: Starting dracut-pre-mount.service... Sep 13 01:30:56.602249 systemd[1]: mnt-oem.mount: Deactivated successfully. Sep 13 01:30:56.617561 systemd[1]: Finished dracut-pre-mount.service. Sep 13 01:30:56.723621 kernel: mlx5_core 66ec:00:02.0 enP26348s1: Link up Sep 13 01:30:56.723850 kernel: buffer_size[0]=0 is not enough for lossless buffer Sep 13 01:30:56.782209 systemd[1]: Finished ignition-setup.service. Sep 13 01:30:56.788083 systemd[1]: Starting ignition-fetch-offline.service... Sep 13 01:30:56.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.815712 kernel: audit: type=1130 audit(1757727056.786:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:30:56.829959 kernel: hv_netvsc 000d3a06-19c8-000d-3a06-19c8000d3a06 eth0: Data path switched to VF: enP26348s1 Sep 13 01:30:56.830129 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:30:56.830341 systemd-networkd[840]: enP26348s1: Link UP Sep 13 01:30:56.831940 systemd-networkd[840]: eth0: Link UP Sep 13 01:30:56.832324 systemd-networkd[840]: eth0: Gained carrier Sep 13 01:30:56.843907 systemd-networkd[840]: enP26348s1: Gained carrier Sep 13 01:30:56.851795 systemd-networkd[840]: eth0: DHCPv4 address 10.200.20.14/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 13 01:30:58.725800 systemd-networkd[840]: eth0: Gained IPv6LL Sep 13 01:31:00.842335 ignition[867]: Ignition 2.14.0 Sep 13 01:31:00.842346 ignition[867]: Stage: fetch-offline Sep 13 01:31:00.842416 ignition[867]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:31:00.842439 ignition[867]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 13 01:31:00.955969 ignition[867]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 13 01:31:00.956118 ignition[867]: parsed url from cmdline: "" Sep 13 01:31:00.957318 systemd[1]: Finished ignition-fetch-offline.service. Sep 13 01:31:00.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:00.956121 ignition[867]: no config URL provided Sep 13 01:31:00.956126 ignition[867]: reading system config file "/usr/lib/ignition/user.ign" Sep 13 01:31:01.013851 kernel: audit: type=1130 audit(1757727060.969:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:00.996987 systemd[1]: Starting ignition-fetch.service... Sep 13 01:31:00.956134 ignition[867]: no config at "/usr/lib/ignition/user.ign" Sep 13 01:31:00.956140 ignition[867]: failed to fetch config: resource requires networking Sep 13 01:31:00.956376 ignition[867]: Ignition finished successfully Sep 13 01:31:01.008072 ignition[874]: Ignition 2.14.0 Sep 13 01:31:01.008079 ignition[874]: Stage: fetch Sep 13 01:31:01.008185 ignition[874]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:31:01.008205 ignition[874]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 13 01:31:01.010933 ignition[874]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 13 01:31:01.011044 ignition[874]: parsed url from cmdline: "" Sep 13 01:31:01.011047 ignition[874]: no config URL provided Sep 13 01:31:01.011052 ignition[874]: reading system config file "/usr/lib/ignition/user.ign" Sep 13 01:31:01.011059 ignition[874]: no config at "/usr/lib/ignition/user.ign" Sep 13 01:31:01.011086 ignition[874]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Sep 13 01:31:01.087150 ignition[874]: GET result: OK Sep 13 01:31:01.090324 unknown[874]: fetched base config from "system" Sep 13 01:31:01.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:01.087223 ignition[874]: config has been read from IMDS userdata Sep 13 01:31:01.090331 unknown[874]: fetched base config from "system" Sep 13 01:31:01.087272 ignition[874]: parsing config with SHA512: f4a30722af753c5cfed96fee26b2376c4a9a04f6f29a28acb2e6c5e07d657ffa30f882f326538c9886e62926af369356885c638422767e668b15323696e96ff7 Sep 13 01:31:01.090336 unknown[874]: fetched user config from "azure" Sep 13 01:31:01.090835 ignition[874]: fetch: fetch complete Sep 13 01:31:01.093968 systemd[1]: Finished ignition-fetch.service. Sep 13 01:31:01.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:01.090840 ignition[874]: fetch: fetch passed Sep 13 01:31:01.173403 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:31:01.173425 kernel: audit: type=1130 audit(1757727061.137:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:01.100014 systemd[1]: Starting ignition-kargs.service... Sep 13 01:31:01.090878 ignition[874]: Ignition finished successfully Sep 13 01:31:01.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:01.131801 systemd[1]: Finished ignition-kargs.service. Sep 13 01:31:01.119864 ignition[880]: Ignition 2.14.0 Sep 13 01:31:01.229465 kernel: audit: type=1130 audit(1757727061.187:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:01.148176 systemd[1]: Starting ignition-disks.service... Sep 13 01:31:01.119871 ignition[880]: Stage: kargs Sep 13 01:31:01.177874 systemd[1]: Finished ignition-disks.service. Sep 13 01:31:01.119986 ignition[880]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:31:01.214607 systemd[1]: Reached target initrd-root-device.target. Sep 13 01:31:01.120011 ignition[880]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 13 01:31:01.225839 systemd[1]: Reached target local-fs-pre.target. Sep 13 01:31:01.127553 ignition[880]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 13 01:31:01.234765 systemd[1]: Reached target local-fs.target. Sep 13 01:31:01.128802 ignition[880]: kargs: kargs passed Sep 13 01:31:01.244654 systemd[1]: Reached target sysinit.target. Sep 13 01:31:01.128844 ignition[880]: Ignition finished successfully Sep 13 01:31:01.254148 systemd[1]: Reached target basic.target. Sep 13 01:31:01.155681 ignition[886]: Ignition 2.14.0 Sep 13 01:31:01.272382 systemd[1]: Starting systemd-fsck-root.service... Sep 13 01:31:01.155688 ignition[886]: Stage: disks Sep 13 01:31:01.155834 ignition[886]: reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:31:01.155859 ignition[886]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 13 01:31:01.160093 ignition[886]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 13 01:31:01.162009 ignition[886]: disks: disks passed Sep 13 01:31:01.162087 ignition[886]: Ignition finished successfully Sep 13 01:31:01.413623 systemd-fsck[894]: ROOT: clean, 629/7326000 files, 481083/7359488 blocks Sep 13 01:31:01.425163 systemd[1]: Finished systemd-fsck-root.service. Sep 13 01:31:01.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:01.459472 kernel: audit: type=1130 audit(1757727061.430:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:01.457188 systemd[1]: Mounting sysroot.mount... Sep 13 01:31:01.486535 systemd[1]: Mounted sysroot.mount. Sep 13 01:31:01.495062 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Sep 13 01:31:01.491087 systemd[1]: Reached target initrd-root-fs.target. Sep 13 01:31:01.538856 systemd[1]: Mounting sysroot-usr.mount... Sep 13 01:31:01.544218 systemd[1]: Starting flatcar-metadata-hostname.service... Sep 13 01:31:01.554610 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Sep 13 01:31:01.554644 systemd[1]: Reached target ignition-diskful.target. Sep 13 01:31:01.561880 systemd[1]: Mounted sysroot-usr.mount. Sep 13 01:31:01.656597 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 01:31:01.663102 systemd[1]: Starting initrd-setup-root.service... Sep 13 01:31:01.695722 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (905) Sep 13 01:31:01.696519 initrd-setup-root[910]: cut: /sysroot/etc/passwd: No such file or directory Sep 13 01:31:01.725724 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 13 01:31:01.725791 kernel: BTRFS info (device sda6): using free space tree Sep 13 01:31:01.725810 kernel: BTRFS info (device sda6): has skinny extents Sep 13 01:31:01.734991 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 01:31:01.749640 initrd-setup-root[936]: cut: /sysroot/etc/group: No such file or directory Sep 13 01:31:01.789543 initrd-setup-root[944]: cut: /sysroot/etc/shadow: No such file or directory Sep 13 01:31:01.816594 initrd-setup-root[952]: cut: /sysroot/etc/gshadow: No such file or directory Sep 13 01:31:02.568174 systemd[1]: Finished initrd-setup-root.service. Sep 13 01:31:02.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:02.598308 systemd[1]: Starting ignition-mount.service... Sep 13 01:31:02.611176 kernel: audit: type=1130 audit(1757727062.573:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:02.611820 systemd[1]: Starting sysroot-boot.service... Sep 13 01:31:02.617779 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Sep 13 01:31:02.617906 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Sep 13 01:31:02.659837 systemd[1]: Finished sysroot-boot.service. Sep 13 01:31:02.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:02.691742 kernel: audit: type=1130 audit(1757727062.665:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:02.943984 ignition[975]: INFO : Ignition 2.14.0 Sep 13 01:31:02.943984 ignition[975]: INFO : Stage: mount Sep 13 01:31:02.958765 ignition[975]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:31:02.958765 ignition[975]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 13 01:31:02.958765 ignition[975]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 13 01:31:02.958765 ignition[975]: INFO : mount: mount passed Sep 13 01:31:02.958765 ignition[975]: INFO : Ignition finished successfully Sep 13 01:31:03.019830 kernel: audit: type=1130 audit(1757727062.962:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:02.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:02.957407 systemd[1]: Finished ignition-mount.service. Sep 13 01:31:03.506937 coreos-metadata[904]: Sep 13 01:31:03.506 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Sep 13 01:31:03.518874 coreos-metadata[904]: Sep 13 01:31:03.518 INFO Fetch successful Sep 13 01:31:03.553754 coreos-metadata[904]: Sep 13 01:31:03.553 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Sep 13 01:31:03.566686 coreos-metadata[904]: Sep 13 01:31:03.566 INFO Fetch successful Sep 13 01:31:03.591182 coreos-metadata[904]: Sep 13 01:31:03.591 INFO wrote hostname ci-3510.3.8-n-12daba8686 to /sysroot/etc/hostname Sep 13 01:31:03.600900 systemd[1]: Finished flatcar-metadata-hostname.service. Sep 13 01:31:03.629724 kernel: audit: type=1130 audit(1757727063.605:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:03.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:03.606870 systemd[1]: Starting ignition-files.service... Sep 13 01:31:03.634368 systemd[1]: Mounting sysroot-usr-share-oem.mount... Sep 13 01:31:03.658718 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (983) Sep 13 01:31:03.671786 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Sep 13 01:31:03.671834 kernel: BTRFS info (device sda6): using free space tree Sep 13 01:31:03.671852 kernel: BTRFS info (device sda6): has skinny extents Sep 13 01:31:03.685464 systemd[1]: Mounted sysroot-usr-share-oem.mount. Sep 13 01:31:03.699425 ignition[1002]: INFO : Ignition 2.14.0 Sep 13 01:31:03.699425 ignition[1002]: INFO : Stage: files Sep 13 01:31:03.709743 ignition[1002]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:31:03.709743 ignition[1002]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 13 01:31:03.709743 ignition[1002]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 13 01:31:03.709743 ignition[1002]: DEBUG : files: compiled without relabeling support, skipping Sep 13 01:31:03.747097 ignition[1002]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 13 01:31:03.747097 ignition[1002]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 13 01:31:03.831177 ignition[1002]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 13 01:31:03.839150 ignition[1002]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 13 01:31:03.863027 unknown[1002]: wrote ssh authorized keys file for user: core Sep 13 01:31:03.869484 ignition[1002]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 13 01:31:03.882910 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 13 01:31:03.894289 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Sep 13 01:31:03.952637 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Sep 13 01:31:04.172394 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Sep 13 01:31:04.172394 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 01:31:04.193828 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2936921479" Sep 13 01:31:04.323357 ignition[1002]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2936921479": device or resource busy Sep 13 01:31:04.323357 ignition[1002]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2936921479", trying btrfs: device or resource busy Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2936921479" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2936921479" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem2936921479" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem2936921479" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Sep 13 01:31:04.323357 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3034386993" Sep 13 01:31:04.323357 ignition[1002]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3034386993": device or resource busy Sep 13 01:31:04.238299 systemd[1]: mnt-oem2936921479.mount: Deactivated successfully. Sep 13 01:31:04.505213 ignition[1002]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3034386993", trying btrfs: device or resource busy Sep 13 01:31:04.505213 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3034386993" Sep 13 01:31:04.505213 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3034386993" Sep 13 01:31:04.505213 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem3034386993" Sep 13 01:31:04.505213 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem3034386993" Sep 13 01:31:04.505213 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Sep 13 01:31:04.505213 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 01:31:04.505213 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Sep 13 01:31:04.784438 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Sep 13 01:31:05.028690 ignition[1002]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(13): [started] processing unit "waagent.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(13): [finished] processing unit "waagent.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(14): [started] processing unit "nvidia.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(14): [finished] processing unit "nvidia.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 13 01:31:05.046587 ignition[1002]: INFO : files: files passed Sep 13 01:31:05.046587 ignition[1002]: INFO : Ignition finished successfully Sep 13 01:31:05.377491 kernel: audit: type=1130 audit(1757727065.063:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.377518 kernel: audit: type=1130 audit(1757727065.142:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.377529 kernel: audit: type=1131 audit(1757727065.142:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.046992 systemd[1]: Finished ignition-files.service. Sep 13 01:31:05.093251 systemd[1]: Starting initrd-setup-root-after-ignition.service... Sep 13 01:31:05.100236 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Sep 13 01:31:05.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.415376 initrd-setup-root-after-ignition[1027]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 13 01:31:05.101111 systemd[1]: Starting ignition-quench.service... Sep 13 01:31:05.126095 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 13 01:31:05.126212 systemd[1]: Finished ignition-quench.service. Sep 13 01:31:05.143607 systemd[1]: Finished initrd-setup-root-after-ignition.service. Sep 13 01:31:05.208931 systemd[1]: Reached target ignition-complete.target. Sep 13 01:31:05.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.238695 systemd[1]: Starting initrd-parse-etc.service... Sep 13 01:31:05.278211 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 13 01:31:05.278330 systemd[1]: Finished initrd-parse-etc.service. Sep 13 01:31:05.293188 systemd[1]: Reached target initrd-fs.target. Sep 13 01:31:05.310066 systemd[1]: Reached target initrd.target. Sep 13 01:31:05.327210 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Sep 13 01:31:05.328150 systemd[1]: Starting dracut-pre-pivot.service... Sep 13 01:31:05.384324 systemd[1]: Finished dracut-pre-pivot.service. Sep 13 01:31:05.397972 systemd[1]: Starting initrd-cleanup.service... Sep 13 01:31:05.429652 systemd[1]: Stopped target nss-lookup.target. Sep 13 01:31:05.438051 systemd[1]: Stopped target remote-cryptsetup.target. Sep 13 01:31:05.449499 systemd[1]: Stopped target timers.target. Sep 13 01:31:05.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.459148 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 13 01:31:05.459254 systemd[1]: Stopped dracut-pre-pivot.service. Sep 13 01:31:05.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.469917 systemd[1]: Stopped target initrd.target. Sep 13 01:31:05.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.479816 systemd[1]: Stopped target basic.target. Sep 13 01:31:05.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.489483 systemd[1]: Stopped target ignition-complete.target. Sep 13 01:31:05.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.501373 systemd[1]: Stopped target ignition-diskful.target. Sep 13 01:31:05.512646 systemd[1]: Stopped target initrd-root-device.target. Sep 13 01:31:05.524163 systemd[1]: Stopped target remote-fs.target. Sep 13 01:31:05.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.714381 ignition[1040]: INFO : Ignition 2.14.0 Sep 13 01:31:05.714381 ignition[1040]: INFO : Stage: umount Sep 13 01:31:05.714381 ignition[1040]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Sep 13 01:31:05.714381 ignition[1040]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Sep 13 01:31:05.714381 ignition[1040]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 13 01:31:05.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.534905 systemd[1]: Stopped target remote-fs-pre.target. Sep 13 01:31:05.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.805214 ignition[1040]: INFO : umount: umount passed Sep 13 01:31:05.805214 ignition[1040]: INFO : Ignition finished successfully Sep 13 01:31:05.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.552388 systemd[1]: Stopped target sysinit.target. Sep 13 01:31:05.565333 systemd[1]: Stopped target local-fs.target. Sep 13 01:31:05.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.577386 systemd[1]: Stopped target local-fs-pre.target. Sep 13 01:31:05.589487 systemd[1]: Stopped target swap.target. Sep 13 01:31:05.601171 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 13 01:31:05.601286 systemd[1]: Stopped dracut-pre-mount.service. Sep 13 01:31:05.613249 systemd[1]: Stopped target cryptsetup.target. Sep 13 01:31:05.624283 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 13 01:31:05.624384 systemd[1]: Stopped dracut-initqueue.service. Sep 13 01:31:05.637740 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 13 01:31:05.637831 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Sep 13 01:31:05.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.650574 systemd[1]: ignition-files.service: Deactivated successfully. Sep 13 01:31:05.650663 systemd[1]: Stopped ignition-files.service. Sep 13 01:31:05.661202 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 13 01:31:05.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.661298 systemd[1]: Stopped flatcar-metadata-hostname.service. Sep 13 01:31:05.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.674304 systemd[1]: Stopping ignition-mount.service... Sep 13 01:31:05.693556 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 13 01:31:06.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.013000 audit: BPF prog-id=6 op=UNLOAD Sep 13 01:31:05.696843 systemd[1]: Stopped kmod-static-nodes.service. Sep 13 01:31:05.715492 systemd[1]: Stopping sysroot-boot.service... Sep 13 01:31:05.721611 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 13 01:31:05.721776 systemd[1]: Stopped systemd-udev-trigger.service. Sep 13 01:31:06.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.729530 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 13 01:31:06.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.729629 systemd[1]: Stopped dracut-pre-trigger.service. Sep 13 01:31:06.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.761051 systemd[1]: sysroot-boot.mount: Deactivated successfully. Sep 13 01:31:05.761915 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 13 01:31:05.762023 systemd[1]: Stopped ignition-mount.service. Sep 13 01:31:05.783448 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 13 01:31:06.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.783516 systemd[1]: Stopped ignition-disks.service. Sep 13 01:31:05.796826 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 13 01:31:06.171106 kernel: kauditd_printk_skb: 28 callbacks suppressed Sep 13 01:31:06.171136 kernel: audit: type=1131 audit(1757727066.138:69): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.796878 systemd[1]: Stopped ignition-kargs.service. Sep 13 01:31:06.205238 kernel: audit: type=1131 audit(1757727066.175:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.205261 kernel: hv_netvsc 000d3a06-19c8-000d-3a06-19c8000d3a06 eth0: Data path switched from VF: enP26348s1 Sep 13 01:31:06.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.812017 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 13 01:31:06.244449 kernel: audit: type=1131 audit(1757727066.216:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.812058 systemd[1]: Stopped ignition-fetch.service. Sep 13 01:31:05.825539 systemd[1]: Stopped target network.target. Sep 13 01:31:06.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.837730 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 13 01:31:06.327784 kernel: audit: type=1131 audit(1757727066.266:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.327809 kernel: audit: type=1131 audit(1757727066.296:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.837790 systemd[1]: Stopped ignition-fetch-offline.service. Sep 13 01:31:06.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.851321 systemd[1]: Stopped target paths.target. Sep 13 01:31:06.412467 kernel: audit: type=1130 audit(1757727066.330:74): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.412493 kernel: audit: type=1131 audit(1757727066.330:75): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.412503 kernel: audit: type=1131 audit(1757727066.388:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:06.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.863167 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 13 01:31:05.874747 systemd[1]: Stopped systemd-ask-password-console.path. Sep 13 01:31:05.889394 systemd[1]: Stopped target slices.target. Sep 13 01:31:05.900884 systemd[1]: Stopped target sockets.target. Sep 13 01:31:05.913124 systemd[1]: iscsid.socket: Deactivated successfully. Sep 13 01:31:05.913155 systemd[1]: Closed iscsid.socket. Sep 13 01:31:06.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.924120 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 13 01:31:05.924145 systemd[1]: Closed iscsiuio.socket. Sep 13 01:31:06.497653 kernel: audit: type=1131 audit(1757727066.449:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:05.934262 systemd[1]: ignition-setup.service: Deactivated successfully. Sep 13 01:31:05.934307 systemd[1]: Stopped ignition-setup.service. Sep 13 01:31:05.949040 systemd[1]: Stopping systemd-networkd.service... Sep 13 01:31:05.960840 systemd[1]: Stopping systemd-resolved.service... Sep 13 01:31:06.525362 iscsid[847]: iscsid shutting down. Sep 13 01:31:05.972600 systemd-networkd[840]: eth0: DHCPv6 lease lost Sep 13 01:31:06.524000 audit: BPF prog-id=9 op=UNLOAD Sep 13 01:31:05.973788 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 13 01:31:05.973875 systemd[1]: Finished initrd-cleanup.service. Sep 13 01:31:05.983825 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 13 01:31:05.983909 systemd[1]: Stopped systemd-networkd.service. Sep 13 01:31:05.997587 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 13 01:31:05.997673 systemd[1]: Stopped systemd-resolved.service. Sep 13 01:31:06.014415 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 13 01:31:06.014450 systemd[1]: Closed systemd-networkd.socket. Sep 13 01:31:06.027044 systemd[1]: Stopping network-cleanup.service... Sep 13 01:31:06.040875 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 13 01:31:06.040962 systemd[1]: Stopped parse-ip-for-networkd.service. Sep 13 01:31:06.052599 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 13 01:31:06.052659 systemd[1]: Stopped systemd-sysctl.service. Sep 13 01:31:06.071062 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 13 01:31:06.071113 systemd[1]: Stopped systemd-modules-load.service. Sep 13 01:31:06.076457 systemd[1]: Stopping systemd-udevd.service... Sep 13 01:31:06.086680 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Sep 13 01:31:06.098121 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 13 01:31:06.098274 systemd[1]: Stopped systemd-udevd.service. Sep 13 01:31:06.109310 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 13 01:31:06.109350 systemd[1]: Closed systemd-udevd-control.socket. Sep 13 01:31:06.115561 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Sep 13 01:31:06.115595 systemd[1]: Closed systemd-udevd-kernel.socket. Sep 13 01:31:06.127506 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 13 01:31:06.127556 systemd[1]: Stopped dracut-pre-udev.service. Sep 13 01:31:06.138948 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 13 01:31:06.138994 systemd[1]: Stopped dracut-cmdline.service. Sep 13 01:31:06.175499 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 13 01:31:06.175548 systemd[1]: Stopped dracut-cmdline-ask.service. Sep 13 01:31:06.244731 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Sep 13 01:31:06.256236 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 13 01:31:06.256338 systemd[1]: Stopped systemd-vconsole-setup.service. Sep 13 01:31:06.267506 systemd[1]: sysroot-boot.service: Deactivated successfully. Sep 13 01:31:06.267626 systemd[1]: Stopped sysroot-boot.service. Sep 13 01:31:06.296954 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 13 01:31:06.297047 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Sep 13 01:31:06.331803 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 13 01:31:06.331860 systemd[1]: Stopped initrd-setup-root.service. Sep 13 01:31:06.443631 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 13 01:31:06.443736 systemd[1]: Stopped network-cleanup.service. Sep 13 01:31:06.475367 systemd[1]: Reached target initrd-switch-root.target. Sep 13 01:31:06.487393 systemd[1]: Starting initrd-switch-root.service... Sep 13 01:31:06.498332 systemd[1]: Switching root. Sep 13 01:31:06.528844 systemd-journald[276]: Journal stopped Sep 13 01:31:24.809476 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Sep 13 01:31:24.809498 kernel: audit: type=1334 audit(1757727066.524:78): prog-id=9 op=UNLOAD Sep 13 01:31:24.809510 kernel: SELinux: Class mctp_socket not defined in policy. Sep 13 01:31:24.809520 kernel: SELinux: Class anon_inode not defined in policy. Sep 13 01:31:24.809528 kernel: SELinux: the above unknown classes and permissions will be allowed Sep 13 01:31:24.809535 kernel: SELinux: policy capability network_peer_controls=1 Sep 13 01:31:24.809544 kernel: SELinux: policy capability open_perms=1 Sep 13 01:31:24.809552 kernel: SELinux: policy capability extended_socket_class=1 Sep 13 01:31:24.809560 kernel: SELinux: policy capability always_check_network=0 Sep 13 01:31:24.809568 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 13 01:31:24.809577 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 13 01:31:24.809585 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 13 01:31:24.809593 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 13 01:31:24.809601 systemd[1]: Successfully loaded SELinux policy in 357.917ms. Sep 13 01:31:24.809613 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 26.420ms. Sep 13 01:31:24.809625 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Sep 13 01:31:24.809634 systemd[1]: Detected virtualization microsoft. Sep 13 01:31:24.809643 systemd[1]: Detected architecture arm64. Sep 13 01:31:24.809652 systemd[1]: Detected first boot. Sep 13 01:31:24.809661 systemd[1]: Hostname set to . Sep 13 01:31:24.809670 systemd[1]: Initializing machine ID from random generator. Sep 13 01:31:24.809678 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Sep 13 01:31:24.809687 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 01:31:24.809707 kernel: audit: type=1400 audit(1757727072.605:86): avc: denied { associate } for pid=1073 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 01:31:24.809718 kernel: audit: type=1300 audit(1757727072.605:86): arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458a4 a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1056 pid=1073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:31:24.809727 kernel: audit: type=1327 audit(1757727072.605:86): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 01:31:24.809736 kernel: audit: type=1400 audit(1757727072.624:87): avc: denied { associate } for pid=1073 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 13 01:31:24.809746 kernel: audit: type=1300 audit(1757727072.624:87): arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145979 a2=1ed a3=0 items=2 ppid=1056 pid=1073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:31:24.809755 kernel: audit: type=1307 audit(1757727072.624:87): cwd="/" Sep 13 01:31:24.809764 kernel: audit: type=1302 audit(1757727072.624:87): item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:24.809773 kernel: audit: type=1302 audit(1757727072.624:87): item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:24.809782 kernel: audit: type=1327 audit(1757727072.624:87): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 01:31:24.809791 systemd[1]: Populated /etc with preset unit settings. Sep 13 01:31:24.809800 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:31:24.809810 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:31:24.809821 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:31:24.809830 kernel: audit: type=1334 audit(1757727083.897:88): prog-id=12 op=LOAD Sep 13 01:31:24.809839 systemd[1]: iscsiuio.service: Deactivated successfully. Sep 13 01:31:24.809848 kernel: audit: type=1334 audit(1757727083.897:89): prog-id=3 op=UNLOAD Sep 13 01:31:24.809857 systemd[1]: Stopped iscsiuio.service. Sep 13 01:31:24.809869 kernel: audit: type=1334 audit(1757727083.897:90): prog-id=13 op=LOAD Sep 13 01:31:24.809879 kernel: audit: type=1334 audit(1757727083.897:91): prog-id=14 op=LOAD Sep 13 01:31:24.809887 kernel: audit: type=1334 audit(1757727083.897:92): prog-id=4 op=UNLOAD Sep 13 01:31:24.809896 systemd[1]: iscsid.service: Deactivated successfully. Sep 13 01:31:24.809904 kernel: audit: type=1334 audit(1757727083.897:93): prog-id=5 op=UNLOAD Sep 13 01:31:24.809913 systemd[1]: Stopped iscsid.service. Sep 13 01:31:24.809922 kernel: audit: type=1334 audit(1757727083.898:94): prog-id=15 op=LOAD Sep 13 01:31:24.809930 kernel: audit: type=1334 audit(1757727083.898:95): prog-id=12 op=UNLOAD Sep 13 01:31:24.809939 kernel: audit: type=1334 audit(1757727083.899:96): prog-id=16 op=LOAD Sep 13 01:31:24.809949 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 13 01:31:24.809957 kernel: audit: type=1334 audit(1757727083.899:97): prog-id=17 op=LOAD Sep 13 01:31:24.809966 systemd[1]: Stopped initrd-switch-root.service. Sep 13 01:31:24.809975 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 13 01:31:24.809984 systemd[1]: Created slice system-addon\x2dconfig.slice. Sep 13 01:31:24.809994 systemd[1]: Created slice system-addon\x2drun.slice. Sep 13 01:31:24.810002 systemd[1]: Created slice system-getty.slice. Sep 13 01:31:24.810012 systemd[1]: Created slice system-modprobe.slice. Sep 13 01:31:24.810022 systemd[1]: Created slice system-serial\x2dgetty.slice. Sep 13 01:31:24.810032 systemd[1]: Created slice system-system\x2dcloudinit.slice. Sep 13 01:31:24.810042 systemd[1]: Created slice system-systemd\x2dfsck.slice. Sep 13 01:31:24.810051 systemd[1]: Created slice user.slice. Sep 13 01:31:24.810060 systemd[1]: Started systemd-ask-password-console.path. Sep 13 01:31:24.810069 systemd[1]: Started systemd-ask-password-wall.path. Sep 13 01:31:24.810078 systemd[1]: Set up automount boot.automount. Sep 13 01:31:24.810087 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Sep 13 01:31:24.810096 systemd[1]: Stopped target initrd-switch-root.target. Sep 13 01:31:24.810107 systemd[1]: Stopped target initrd-fs.target. Sep 13 01:31:24.810116 systemd[1]: Stopped target initrd-root-fs.target. Sep 13 01:31:24.810125 systemd[1]: Reached target integritysetup.target. Sep 13 01:31:24.810134 systemd[1]: Reached target remote-cryptsetup.target. Sep 13 01:31:24.810143 systemd[1]: Reached target remote-fs.target. Sep 13 01:31:24.810152 systemd[1]: Reached target slices.target. Sep 13 01:31:24.810161 systemd[1]: Reached target swap.target. Sep 13 01:31:24.810170 systemd[1]: Reached target torcx.target. Sep 13 01:31:24.810181 systemd[1]: Reached target veritysetup.target. Sep 13 01:31:24.810190 systemd[1]: Listening on systemd-coredump.socket. Sep 13 01:31:24.810199 systemd[1]: Listening on systemd-initctl.socket. Sep 13 01:31:24.810209 systemd[1]: Listening on systemd-networkd.socket. Sep 13 01:31:24.810219 systemd[1]: Listening on systemd-udevd-control.socket. Sep 13 01:31:24.810229 systemd[1]: Listening on systemd-udevd-kernel.socket. Sep 13 01:31:24.810238 systemd[1]: Listening on systemd-userdbd.socket. Sep 13 01:31:24.810248 systemd[1]: Mounting dev-hugepages.mount... Sep 13 01:31:24.810257 systemd[1]: Mounting dev-mqueue.mount... Sep 13 01:31:24.810266 systemd[1]: Mounting media.mount... Sep 13 01:31:24.810275 systemd[1]: Mounting sys-kernel-debug.mount... Sep 13 01:31:24.810284 systemd[1]: Mounting sys-kernel-tracing.mount... Sep 13 01:31:24.810294 systemd[1]: Mounting tmp.mount... Sep 13 01:31:24.810303 systemd[1]: Starting flatcar-tmpfiles.service... Sep 13 01:31:24.810313 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:31:24.810322 systemd[1]: Starting kmod-static-nodes.service... Sep 13 01:31:24.810332 systemd[1]: Starting modprobe@configfs.service... Sep 13 01:31:24.810341 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:31:24.810350 systemd[1]: Starting modprobe@drm.service... Sep 13 01:31:24.810359 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:31:24.810368 systemd[1]: Starting modprobe@fuse.service... Sep 13 01:31:24.810377 systemd[1]: Starting modprobe@loop.service... Sep 13 01:31:24.810387 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Sep 13 01:31:24.810397 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 13 01:31:24.810408 systemd[1]: Stopped systemd-fsck-root.service. Sep 13 01:31:24.810418 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Sep 13 01:31:24.810427 systemd[1]: Stopped systemd-fsck-usr.service. Sep 13 01:31:24.810436 systemd[1]: Stopped systemd-journald.service. Sep 13 01:31:24.810445 systemd[1]: systemd-journald.service: Consumed 3.509s CPU time. Sep 13 01:31:24.810455 systemd[1]: Starting systemd-journald.service... Sep 13 01:31:24.810464 kernel: loop: module loaded Sep 13 01:31:24.810472 systemd[1]: Starting systemd-modules-load.service... Sep 13 01:31:24.810483 kernel: fuse: init (API version 7.34) Sep 13 01:31:24.810492 systemd[1]: Starting systemd-network-generator.service... Sep 13 01:31:24.810501 systemd[1]: Starting systemd-remount-fs.service... Sep 13 01:31:24.810510 systemd[1]: Starting systemd-udev-trigger.service... Sep 13 01:31:24.810519 systemd[1]: verity-setup.service: Deactivated successfully. Sep 13 01:31:24.810528 systemd[1]: Stopped verity-setup.service. Sep 13 01:31:24.810537 systemd[1]: Mounted dev-hugepages.mount. Sep 13 01:31:24.810547 systemd[1]: Mounted dev-mqueue.mount. Sep 13 01:31:24.810556 systemd[1]: Mounted media.mount. Sep 13 01:31:24.810570 systemd-journald[1179]: Journal started Sep 13 01:31:24.810609 systemd-journald[1179]: Runtime Journal (/run/log/journal/e0ce3a69d6bb4d00b7474b766f44d066) is 8.0M, max 78.5M, 70.5M free. Sep 13 01:31:09.502000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Sep 13 01:31:10.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 01:31:10.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Sep 13 01:31:10.590000 audit: BPF prog-id=10 op=LOAD Sep 13 01:31:10.590000 audit: BPF prog-id=10 op=UNLOAD Sep 13 01:31:10.590000 audit: BPF prog-id=11 op=LOAD Sep 13 01:31:10.590000 audit: BPF prog-id=11 op=UNLOAD Sep 13 01:31:12.605000 audit[1073]: AVC avc: denied { associate } for pid=1073 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Sep 13 01:31:12.605000 audit[1073]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458a4 a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1056 pid=1073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:31:12.605000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 01:31:12.624000 audit[1073]: AVC avc: denied { associate } for pid=1073 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Sep 13 01:31:12.624000 audit[1073]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145979 a2=1ed a3=0 items=2 ppid=1056 pid=1073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:31:12.624000 audit: CWD cwd="/" Sep 13 01:31:12.624000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:12.624000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:12.624000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Sep 13 01:31:23.897000 audit: BPF prog-id=12 op=LOAD Sep 13 01:31:23.897000 audit: BPF prog-id=3 op=UNLOAD Sep 13 01:31:23.897000 audit: BPF prog-id=13 op=LOAD Sep 13 01:31:23.897000 audit: BPF prog-id=14 op=LOAD Sep 13 01:31:23.897000 audit: BPF prog-id=4 op=UNLOAD Sep 13 01:31:23.897000 audit: BPF prog-id=5 op=UNLOAD Sep 13 01:31:23.898000 audit: BPF prog-id=15 op=LOAD Sep 13 01:31:23.898000 audit: BPF prog-id=12 op=UNLOAD Sep 13 01:31:23.899000 audit: BPF prog-id=16 op=LOAD Sep 13 01:31:23.899000 audit: BPF prog-id=17 op=LOAD Sep 13 01:31:23.899000 audit: BPF prog-id=13 op=UNLOAD Sep 13 01:31:23.899000 audit: BPF prog-id=14 op=UNLOAD Sep 13 01:31:23.899000 audit: BPF prog-id=18 op=LOAD Sep 13 01:31:23.899000 audit: BPF prog-id=15 op=UNLOAD Sep 13 01:31:23.899000 audit: BPF prog-id=19 op=LOAD Sep 13 01:31:23.899000 audit: BPF prog-id=20 op=LOAD Sep 13 01:31:23.899000 audit: BPF prog-id=16 op=UNLOAD Sep 13 01:31:23.899000 audit: BPF prog-id=17 op=UNLOAD Sep 13 01:31:23.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:23.938000 audit: BPF prog-id=18 op=UNLOAD Sep 13 01:31:23.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:23.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.649000 audit: BPF prog-id=21 op=LOAD Sep 13 01:31:24.649000 audit: BPF prog-id=22 op=LOAD Sep 13 01:31:24.649000 audit: BPF prog-id=23 op=LOAD Sep 13 01:31:24.649000 audit: BPF prog-id=19 op=UNLOAD Sep 13 01:31:24.649000 audit: BPF prog-id=20 op=UNLOAD Sep 13 01:31:24.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.807000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 13 01:31:24.807000 audit[1179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffffb0e250 a2=4000 a3=1 items=0 ppid=1 pid=1179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:31:24.807000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 13 01:31:23.896956 systemd[1]: Queued start job for default target multi-user.target. Sep 13 01:31:12.503875 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:31:23.896969 systemd[1]: Unnecessary job was removed for dev-sda6.device. Sep 13 01:31:12.538030 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 01:31:23.901040 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 13 01:31:12.538048 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 01:31:23.901380 systemd[1]: systemd-journald.service: Consumed 3.509s CPU time. Sep 13 01:31:12.538085 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Sep 13 01:31:12.538095 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="skipped missing lower profile" missing profile=oem Sep 13 01:31:12.538127 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Sep 13 01:31:12.538139 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Sep 13 01:31:12.538338 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Sep 13 01:31:12.538369 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Sep 13 01:31:12.538381 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Sep 13 01:31:12.588694 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Sep 13 01:31:12.588771 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Sep 13 01:31:12.588801 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Sep 13 01:31:12.588815 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Sep 13 01:31:12.588836 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Sep 13 01:31:12.588849 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Sep 13 01:31:19.420489 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:19Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:31:19.420765 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:19Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:31:19.420879 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:19Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:31:19.421040 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:19Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Sep 13 01:31:19.421089 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:19Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Sep 13 01:31:19.421143 /usr/lib/systemd/system-generators/torcx-generator[1073]: time="2025-09-13T01:31:19Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Sep 13 01:31:24.822880 systemd[1]: Started systemd-journald.service. Sep 13 01:31:24.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.823548 systemd[1]: Mounted sys-kernel-debug.mount. Sep 13 01:31:24.829104 systemd[1]: Mounted sys-kernel-tracing.mount. Sep 13 01:31:24.834620 systemd[1]: Mounted tmp.mount. Sep 13 01:31:24.839334 systemd[1]: Finished flatcar-tmpfiles.service. Sep 13 01:31:24.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.845500 systemd[1]: Finished kmod-static-nodes.service. Sep 13 01:31:24.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.851990 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 13 01:31:24.852129 systemd[1]: Finished modprobe@configfs.service. Sep 13 01:31:24.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.858136 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:31:24.858259 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:31:24.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.864171 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 01:31:24.864290 systemd[1]: Finished modprobe@drm.service. Sep 13 01:31:24.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.869885 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:31:24.870002 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:31:24.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.875881 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 13 01:31:24.876007 systemd[1]: Finished modprobe@fuse.service. Sep 13 01:31:24.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.882183 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:31:24.882308 systemd[1]: Finished modprobe@loop.service. Sep 13 01:31:24.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.887446 systemd[1]: Finished systemd-network-generator.service. Sep 13 01:31:24.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.893439 systemd[1]: Finished systemd-remount-fs.service. Sep 13 01:31:24.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.900173 systemd[1]: Reached target network-pre.target. Sep 13 01:31:24.907086 systemd[1]: Mounting sys-fs-fuse-connections.mount... Sep 13 01:31:24.913466 systemd[1]: Mounting sys-kernel-config.mount... Sep 13 01:31:24.918320 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Sep 13 01:31:24.966100 systemd[1]: Starting systemd-hwdb-update.service... Sep 13 01:31:24.972613 systemd[1]: Starting systemd-journal-flush.service... Sep 13 01:31:24.978352 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 01:31:24.979656 systemd[1]: Starting systemd-random-seed.service... Sep 13 01:31:24.984875 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 01:31:24.986057 systemd[1]: Starting systemd-sysusers.service... Sep 13 01:31:24.992639 systemd[1]: Finished systemd-modules-load.service. Sep 13 01:31:24.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:24.998389 systemd[1]: Finished systemd-udev-trigger.service. Sep 13 01:31:25.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:25.004631 systemd[1]: Mounted sys-fs-fuse-connections.mount. Sep 13 01:31:25.011176 systemd[1]: Mounted sys-kernel-config.mount. Sep 13 01:31:25.017343 systemd[1]: Starting systemd-sysctl.service... Sep 13 01:31:25.023383 systemd[1]: Starting systemd-udev-settle.service... Sep 13 01:31:25.034728 udevadm[1193]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Sep 13 01:31:25.067714 systemd-journald[1179]: Time spent on flushing to /var/log/journal/e0ce3a69d6bb4d00b7474b766f44d066 is 13.749ms for 1113 entries. Sep 13 01:31:25.067714 systemd-journald[1179]: System Journal (/var/log/journal/e0ce3a69d6bb4d00b7474b766f44d066) is 8.0M, max 2.6G, 2.6G free. Sep 13 01:31:25.154876 systemd-journald[1179]: Received client request to flush runtime journal. Sep 13 01:31:25.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:25.081857 systemd[1]: Finished systemd-random-seed.service. Sep 13 01:31:25.089148 systemd[1]: Reached target first-boot-complete.target. Sep 13 01:31:25.155917 systemd[1]: Finished systemd-journal-flush.service. Sep 13 01:31:25.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:25.350452 systemd[1]: Finished systemd-sysctl.service. Sep 13 01:31:25.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:26.050570 systemd[1]: Finished systemd-sysusers.service. Sep 13 01:31:26.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:26.804024 systemd[1]: Finished systemd-hwdb-update.service. Sep 13 01:31:26.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:26.809000 audit: BPF prog-id=24 op=LOAD Sep 13 01:31:26.809000 audit: BPF prog-id=25 op=LOAD Sep 13 01:31:26.809000 audit: BPF prog-id=7 op=UNLOAD Sep 13 01:31:26.809000 audit: BPF prog-id=8 op=UNLOAD Sep 13 01:31:26.811283 systemd[1]: Starting systemd-udevd.service... Sep 13 01:31:26.830310 systemd-udevd[1196]: Using default interface naming scheme 'v252'. Sep 13 01:31:28.270012 systemd[1]: Started systemd-udevd.service. Sep 13 01:31:28.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:28.280000 audit: BPF prog-id=26 op=LOAD Sep 13 01:31:28.284373 systemd[1]: Starting systemd-networkd.service... Sep 13 01:31:28.308087 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Sep 13 01:31:28.399000 audit: BPF prog-id=27 op=LOAD Sep 13 01:31:28.399000 audit: BPF prog-id=28 op=LOAD Sep 13 01:31:28.400000 audit: BPF prog-id=29 op=LOAD Sep 13 01:31:28.401446 systemd[1]: Starting systemd-userdbd.service... Sep 13 01:31:28.409000 audit[1213]: AVC avc: denied { confidentiality } for pid=1213 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Sep 13 01:31:28.425558 kernel: hv_vmbus: registering driver hv_balloon Sep 13 01:31:28.425636 kernel: mousedev: PS/2 mouse device common for all mice Sep 13 01:31:28.436069 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Sep 13 01:31:28.436146 kernel: hv_balloon: Memory hot add disabled on ARM64 Sep 13 01:31:28.442719 kernel: hv_vmbus: registering driver hyperv_fb Sep 13 01:31:28.449723 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Sep 13 01:31:28.451719 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Sep 13 01:31:28.463370 kernel: Console: switching to colour dummy device 80x25 Sep 13 01:31:28.467816 kernel: Console: switching to colour frame buffer device 128x48 Sep 13 01:31:28.409000 audit[1213]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaac80e3a40 a1=aa2c a2=ffffa5e224b0 a3=aaaac803d010 items=12 ppid=1196 pid=1213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:31:28.409000 audit: CWD cwd="/" Sep 13 01:31:28.409000 audit: PATH item=0 name=(null) inode=6517 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=1 name=(null) inode=11214 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=2 name=(null) inode=11214 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=3 name=(null) inode=11215 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=4 name=(null) inode=11214 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=5 name=(null) inode=11216 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=6 name=(null) inode=11214 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=7 name=(null) inode=11217 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=8 name=(null) inode=11214 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=9 name=(null) inode=11218 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=10 name=(null) inode=11214 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PATH item=11 name=(null) inode=11219 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:31:28.409000 audit: PROCTITLE proctitle="(udev-worker)" Sep 13 01:31:28.516656 systemd[1]: Started systemd-userdbd.service. Sep 13 01:31:28.525432 kernel: hv_utils: Registering HyperV Utility Driver Sep 13 01:31:28.525531 kernel: hv_vmbus: registering driver hv_utils Sep 13 01:31:28.533483 kernel: hv_utils: Heartbeat IC version 3.0 Sep 13 01:31:28.533569 kernel: hv_utils: Shutdown IC version 3.2 Sep 13 01:31:28.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:28.538717 kernel: hv_utils: TimeSync IC version 4.0 Sep 13 01:31:29.344790 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Sep 13 01:31:29.351149 systemd[1]: Finished systemd-udev-settle.service. Sep 13 01:31:29.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.357829 systemd[1]: Starting lvm2-activation-early.service... Sep 13 01:31:29.360512 kernel: kauditd_printk_skb: 77 callbacks suppressed Sep 13 01:31:29.360546 kernel: audit: type=1130 audit(1757727089.355:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.786632 lvm[1274]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 01:31:29.805296 systemd-networkd[1216]: lo: Link UP Sep 13 01:31:29.805560 systemd-networkd[1216]: lo: Gained carrier Sep 13 01:31:29.806072 systemd-networkd[1216]: Enumeration completed Sep 13 01:31:29.806233 systemd[1]: Started systemd-networkd.service. Sep 13 01:31:29.813271 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 13 01:31:29.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.839676 kernel: audit: type=1130 audit(1757727089.811:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.856362 systemd-networkd[1216]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 01:31:29.874023 systemd[1]: Finished lvm2-activation-early.service. Sep 13 01:31:29.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.880325 systemd[1]: Reached target cryptsetup.target. Sep 13 01:31:29.904926 kernel: audit: type=1130 audit(1757727089.879:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.906782 systemd[1]: Starting lvm2-activation.service... Sep 13 01:31:29.911175 lvm[1276]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Sep 13 01:31:29.933534 systemd[1]: Finished lvm2-activation.service. Sep 13 01:31:29.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.942336 systemd[1]: Reached target local-fs-pre.target. Sep 13 01:31:29.960673 kernel: audit: type=1130 audit(1757727089.937:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:29.960746 kernel: mlx5_core 66ec:00:02.0 enP26348s1: Link up Sep 13 01:31:29.965494 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Sep 13 01:31:29.965532 systemd[1]: Reached target local-fs.target. Sep 13 01:31:29.974638 systemd[1]: Reached target machines.target. Sep 13 01:31:29.974760 kernel: buffer_size[0]=0 is not enough for lossless buffer Sep 13 01:31:29.980961 systemd[1]: Starting ldconfig.service... Sep 13 01:31:30.022675 kernel: hv_netvsc 000d3a06-19c8-000d-3a06-19c8000d3a06 eth0: Data path switched to VF: enP26348s1 Sep 13 01:31:30.024164 systemd-networkd[1216]: enP26348s1: Link UP Sep 13 01:31:30.024566 systemd-networkd[1216]: eth0: Link UP Sep 13 01:31:30.024624 systemd-networkd[1216]: eth0: Gained carrier Sep 13 01:31:30.026226 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:31:30.026297 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:31:30.027585 systemd[1]: Starting systemd-boot-update.service... Sep 13 01:31:30.033813 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Sep 13 01:31:30.035196 systemd-networkd[1216]: enP26348s1: Gained carrier Sep 13 01:31:30.040756 systemd[1]: Starting systemd-machine-id-commit.service... Sep 13 01:31:30.047210 systemd[1]: Starting systemd-sysext.service... Sep 13 01:31:30.051810 systemd-networkd[1216]: eth0: DHCPv4 address 10.200.20.14/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 13 01:31:30.103419 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1278 (bootctl) Sep 13 01:31:30.104757 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Sep 13 01:31:30.356314 systemd[1]: Unmounting usr-share-oem.mount... Sep 13 01:31:30.406495 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Sep 13 01:31:30.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.434680 kernel: audit: type=1130 audit(1757727090.412:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.472917 systemd[1]: usr-share-oem.mount: Deactivated successfully. Sep 13 01:31:30.473119 systemd[1]: Unmounted usr-share-oem.mount. Sep 13 01:31:30.544687 kernel: loop0: detected capacity change from 0 to 207008 Sep 13 01:31:30.551739 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 13 01:31:30.552337 systemd[1]: Finished systemd-machine-id-commit.service. Sep 13 01:31:30.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.578798 kernel: audit: type=1130 audit(1757727090.557:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.643675 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 13 01:31:30.672680 kernel: loop1: detected capacity change from 0 to 207008 Sep 13 01:31:30.691297 (sd-sysext)[1290]: Using extensions 'kubernetes'. Sep 13 01:31:30.693099 (sd-sysext)[1290]: Merged extensions into '/usr'. Sep 13 01:31:30.699716 systemd-fsck[1286]: fsck.fat 4.2 (2021-01-31) Sep 13 01:31:30.699716 systemd-fsck[1286]: /dev/sda1: 236 files, 117310/258078 clusters Sep 13 01:31:30.699225 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Sep 13 01:31:30.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.710060 systemd[1]: Mounting boot.mount... Sep 13 01:31:30.734727 kernel: audit: type=1130 audit(1757727090.706:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.748162 systemd[1]: Mounting usr-share-oem.mount... Sep 13 01:31:30.752975 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:31:30.754602 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:31:30.760961 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:31:30.767418 systemd[1]: Starting modprobe@loop.service... Sep 13 01:31:30.771961 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:31:30.772236 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:31:30.775643 systemd[1]: Mounted boot.mount. Sep 13 01:31:30.780375 systemd[1]: Mounted usr-share-oem.mount. Sep 13 01:31:30.785964 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:31:30.786239 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:31:30.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.792552 systemd[1]: Finished systemd-sysext.service. Sep 13 01:31:30.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.836881 systemd[1]: Finished systemd-boot-update.service. Sep 13 01:31:30.837564 kernel: audit: type=1130 audit(1757727090.791:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.837616 kernel: audit: type=1131 audit(1757727090.791:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.861353 kernel: audit: type=1130 audit(1757727090.835:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.862311 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:31:30.862546 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:31:30.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.869262 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:31:30.869469 systemd[1]: Finished modprobe@loop.service. Sep 13 01:31:30.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:30.877158 systemd[1]: Starting ensure-sysext.service... Sep 13 01:31:30.881757 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 01:31:30.881944 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 01:31:30.883341 systemd[1]: Starting systemd-tmpfiles-setup.service... Sep 13 01:31:30.892127 systemd[1]: Reloading. Sep 13 01:31:30.952946 /usr/lib/systemd/system-generators/torcx-generator[1323]: time="2025-09-13T01:31:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:31:30.952982 /usr/lib/systemd/system-generators/torcx-generator[1323]: time="2025-09-13T01:31:30Z" level=info msg="torcx already run" Sep 13 01:31:31.026819 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:31:31.027019 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:31:31.042494 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:31:31.105000 audit: BPF prog-id=30 op=LOAD Sep 13 01:31:31.105000 audit: BPF prog-id=27 op=UNLOAD Sep 13 01:31:31.105000 audit: BPF prog-id=31 op=LOAD Sep 13 01:31:31.105000 audit: BPF prog-id=32 op=LOAD Sep 13 01:31:31.106000 audit: BPF prog-id=28 op=UNLOAD Sep 13 01:31:31.106000 audit: BPF prog-id=29 op=UNLOAD Sep 13 01:31:31.107000 audit: BPF prog-id=33 op=LOAD Sep 13 01:31:31.107000 audit: BPF prog-id=34 op=LOAD Sep 13 01:31:31.107000 audit: BPF prog-id=24 op=UNLOAD Sep 13 01:31:31.107000 audit: BPF prog-id=25 op=UNLOAD Sep 13 01:31:31.108000 audit: BPF prog-id=35 op=LOAD Sep 13 01:31:31.108000 audit: BPF prog-id=26 op=UNLOAD Sep 13 01:31:31.109000 audit: BPF prog-id=36 op=LOAD Sep 13 01:31:31.109000 audit: BPF prog-id=21 op=UNLOAD Sep 13 01:31:31.109000 audit: BPF prog-id=37 op=LOAD Sep 13 01:31:31.109000 audit: BPF prog-id=38 op=LOAD Sep 13 01:31:31.109000 audit: BPF prog-id=22 op=UNLOAD Sep 13 01:31:31.109000 audit: BPF prog-id=23 op=UNLOAD Sep 13 01:31:31.121779 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:31:31.123468 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:31:31.129598 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:31:31.135862 systemd[1]: Starting modprobe@loop.service... Sep 13 01:31:31.140766 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:31:31.141039 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:31:31.141915 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:31:31.142147 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:31:31.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.148084 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:31:31.148307 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:31:31.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.154117 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:31:31.154324 systemd[1]: Finished modprobe@loop.service. Sep 13 01:31:31.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.161083 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:31:31.162613 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:31:31.168561 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:31:31.175583 systemd[1]: Starting modprobe@loop.service... Sep 13 01:31:31.180944 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:31:31.181221 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:31:31.182205 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:31:31.182450 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:31:31.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.188064 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:31:31.188285 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:31:31.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.194323 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:31:31.194533 systemd[1]: Finished modprobe@loop.service. Sep 13 01:31:31.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.202090 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Sep 13 01:31:31.203860 systemd[1]: Starting modprobe@dm_mod.service... Sep 13 01:31:31.209921 systemd[1]: Starting modprobe@drm.service... Sep 13 01:31:31.215924 systemd[1]: Starting modprobe@efi_pstore.service... Sep 13 01:31:31.222385 systemd[1]: Starting modprobe@loop.service... Sep 13 01:31:31.227143 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Sep 13 01:31:31.227396 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:31:31.228515 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Sep 13 01:31:31.228812 systemd[1]: Finished modprobe@dm_mod.service. Sep 13 01:31:31.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.236293 systemd[1]: modprobe@drm.service: Deactivated successfully. Sep 13 01:31:31.236519 systemd[1]: Finished modprobe@drm.service. Sep 13 01:31:31.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.241865 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Sep 13 01:31:31.242095 systemd[1]: Finished modprobe@efi_pstore.service. Sep 13 01:31:31.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.248408 systemd[1]: modprobe@loop.service: Deactivated successfully. Sep 13 01:31:31.248619 systemd[1]: Finished modprobe@loop.service. Sep 13 01:31:31.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.253917 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Sep 13 01:31:31.254082 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Sep 13 01:31:31.255261 systemd[1]: Finished ensure-sysext.service. Sep 13 01:31:31.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.322989 systemd-tmpfiles[1301]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Sep 13 01:31:31.592358 systemd-tmpfiles[1301]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 13 01:31:31.849830 systemd-networkd[1216]: eth0: Gained IPv6LL Sep 13 01:31:31.854527 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 13 01:31:31.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:31.995603 systemd-tmpfiles[1301]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Sep 13 01:31:35.685828 systemd[1]: Finished systemd-tmpfiles-setup.service. Sep 13 01:31:35.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.697343 kernel: kauditd_printk_skb: 45 callbacks suppressed Sep 13 01:31:35.697401 kernel: audit: type=1130 audit(1757727095.691:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.698726 systemd[1]: Starting audit-rules.service... Sep 13 01:31:35.723244 systemd[1]: Starting clean-ca-certificates.service... Sep 13 01:31:35.730297 systemd[1]: Starting systemd-journal-catalog-update.service... Sep 13 01:31:35.736000 audit: BPF prog-id=39 op=LOAD Sep 13 01:31:35.738144 systemd[1]: Starting systemd-resolved.service... Sep 13 01:31:35.747973 kernel: audit: type=1334 audit(1757727095.736:214): prog-id=39 op=LOAD Sep 13 01:31:35.748000 audit: BPF prog-id=40 op=LOAD Sep 13 01:31:35.756078 systemd[1]: Starting systemd-timesyncd.service... Sep 13 01:31:35.760595 kernel: audit: type=1334 audit(1757727095.748:215): prog-id=40 op=LOAD Sep 13 01:31:35.762227 systemd[1]: Starting systemd-update-utmp.service... Sep 13 01:31:35.843000 audit[1397]: SYSTEM_BOOT pid=1397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.847051 systemd[1]: Finished systemd-update-utmp.service. Sep 13 01:31:35.868792 kernel: audit: type=1127 audit(1757727095.843:216): pid=1397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.868886 kernel: audit: type=1130 audit(1757727095.868:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.892605 systemd[1]: Finished clean-ca-certificates.service. Sep 13 01:31:35.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.898025 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Sep 13 01:31:35.916542 systemd[1]: Started systemd-timesyncd.service. Sep 13 01:31:35.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.922263 systemd[1]: Reached target time-set.target. Sep 13 01:31:35.941959 kernel: audit: type=1130 audit(1757727095.897:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.942037 kernel: audit: type=1130 audit(1757727095.921:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:35.996919 systemd-resolved[1395]: Positive Trust Anchors: Sep 13 01:31:35.996934 systemd-resolved[1395]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 13 01:31:35.996961 systemd-resolved[1395]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Sep 13 01:31:36.110711 systemd-resolved[1395]: Using system hostname 'ci-3510.3.8-n-12daba8686'. Sep 13 01:31:36.112154 systemd[1]: Started systemd-resolved.service. Sep 13 01:31:36.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:36.117604 systemd[1]: Reached target network.target. Sep 13 01:31:36.141159 kernel: audit: type=1130 audit(1757727096.116:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:36.141620 systemd[1]: Reached target network-online.target. Sep 13 01:31:36.146522 systemd[1]: Reached target nss-lookup.target. Sep 13 01:31:36.222754 systemd[1]: Finished systemd-journal-catalog-update.service. Sep 13 01:31:36.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:36.252679 kernel: audit: type=1130 audit(1757727096.228:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:31:36.274507 systemd-timesyncd[1396]: Contacted time server 69.164.213.136:123 (0.flatcar.pool.ntp.org). Sep 13 01:31:36.274686 systemd-timesyncd[1396]: Initial clock synchronization to Sat 2025-09-13 01:31:36.272698 UTC. Sep 13 01:31:36.371003 augenrules[1412]: No rules Sep 13 01:31:36.370000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 13 01:31:36.385692 systemd[1]: Finished audit-rules.service. Sep 13 01:31:36.370000 audit[1412]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff7bd25a0 a2=420 a3=0 items=0 ppid=1391 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:31:36.370000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 13 01:31:36.387666 kernel: audit: type=1305 audit(1757727096.370:222): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 13 01:31:43.743824 ldconfig[1277]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 13 01:31:43.744228 ldconfig[1277]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 13 01:31:43.763426 systemd[1]: Finished ldconfig.service. Sep 13 01:31:43.769602 systemd[1]: Starting systemd-update-done.service... Sep 13 01:31:43.826700 systemd[1]: Finished systemd-update-done.service. Sep 13 01:31:43.832095 systemd[1]: Reached target sysinit.target. Sep 13 01:31:43.836893 systemd[1]: Started motdgen.path. Sep 13 01:31:43.841107 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Sep 13 01:31:43.848192 systemd[1]: Started logrotate.timer. Sep 13 01:31:43.852546 systemd[1]: Started mdadm.timer. Sep 13 01:31:43.856342 systemd[1]: Started systemd-tmpfiles-clean.timer. Sep 13 01:31:43.861416 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Sep 13 01:31:43.861450 systemd[1]: Reached target paths.target. Sep 13 01:31:43.865921 systemd[1]: Reached target timers.target. Sep 13 01:31:43.871186 systemd[1]: Listening on dbus.socket. Sep 13 01:31:43.876846 systemd[1]: Starting docker.socket... Sep 13 01:31:43.915152 systemd[1]: Listening on sshd.socket. Sep 13 01:31:43.919335 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:31:43.919859 systemd[1]: Listening on docker.socket. Sep 13 01:31:43.924034 systemd[1]: Reached target sockets.target. Sep 13 01:31:43.928864 systemd[1]: Reached target basic.target. Sep 13 01:31:43.933559 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 01:31:43.933587 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Sep 13 01:31:43.934721 systemd[1]: Starting containerd.service... Sep 13 01:31:43.939851 systemd[1]: Starting dbus.service... Sep 13 01:31:43.944482 systemd[1]: Starting enable-oem-cloudinit.service... Sep 13 01:31:43.950288 systemd[1]: Starting extend-filesystems.service... Sep 13 01:31:43.954870 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Sep 13 01:31:43.972957 systemd[1]: Starting kubelet.service... Sep 13 01:31:43.978149 systemd[1]: Starting motdgen.service... Sep 13 01:31:43.983081 systemd[1]: Started nvidia.service. Sep 13 01:31:44.017712 systemd[1]: Starting prepare-helm.service... Sep 13 01:31:44.023345 systemd[1]: Starting ssh-key-proc-cmdline.service... Sep 13 01:31:44.028690 systemd[1]: Starting sshd-keygen.service... Sep 13 01:31:44.034926 systemd[1]: Starting systemd-logind.service... Sep 13 01:31:44.039171 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Sep 13 01:31:44.039249 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Sep 13 01:31:44.039726 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Sep 13 01:31:44.040354 systemd[1]: Starting update-engine.service... Sep 13 01:31:44.045490 systemd[1]: Starting update-ssh-keys-after-ignition.service... Sep 13 01:31:44.055192 jq[1422]: false Sep 13 01:31:44.055417 jq[1437]: true Sep 13 01:31:44.055612 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 13 01:31:44.056785 systemd[1]: Finished ssh-key-proc-cmdline.service. Sep 13 01:31:44.093302 extend-filesystems[1423]: Found loop1 Sep 13 01:31:44.093302 extend-filesystems[1423]: Found sda Sep 13 01:31:44.101369 extend-filesystems[1423]: Found sda1 Sep 13 01:31:44.101369 extend-filesystems[1423]: Found sda2 Sep 13 01:31:44.101369 extend-filesystems[1423]: Found sda3 Sep 13 01:31:44.101369 extend-filesystems[1423]: Found usr Sep 13 01:31:44.101369 extend-filesystems[1423]: Found sda4 Sep 13 01:31:44.101369 extend-filesystems[1423]: Found sda6 Sep 13 01:31:44.101369 extend-filesystems[1423]: Found sda7 Sep 13 01:31:44.101369 extend-filesystems[1423]: Found sda9 Sep 13 01:31:44.101369 extend-filesystems[1423]: Checking size of /dev/sda9 Sep 13 01:31:44.106841 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 13 01:31:44.107022 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Sep 13 01:31:44.112396 systemd[1]: motdgen.service: Deactivated successfully. Sep 13 01:31:44.112597 systemd[1]: Finished motdgen.service. Sep 13 01:31:44.157269 jq[1451]: true Sep 13 01:31:44.188510 env[1447]: time="2025-09-13T01:31:44.188453095Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Sep 13 01:31:44.218512 env[1447]: time="2025-09-13T01:31:44.218466194Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Sep 13 01:31:44.219019 env[1447]: time="2025-09-13T01:31:44.218999598Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.220817516Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.220850313Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221063779Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221080138Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221093657Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221103496Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221166812Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221383598Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221497390Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Sep 13 01:31:44.223531 env[1447]: time="2025-09-13T01:31:44.221511469Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Sep 13 01:31:44.223438 systemd-logind[1434]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 13 01:31:44.224023 env[1447]: time="2025-09-13T01:31:44.221563705Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Sep 13 01:31:44.224023 env[1447]: time="2025-09-13T01:31:44.221573985Z" level=info msg="metadata content store policy set" policy=shared Sep 13 01:31:44.227911 systemd-logind[1434]: New seat seat0. Sep 13 01:31:44.265028 extend-filesystems[1423]: Old size kept for /dev/sda9 Sep 13 01:31:44.265028 extend-filesystems[1423]: Found sr0 Sep 13 01:31:44.270268 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 13 01:31:44.275866 systemd[1]: Finished extend-filesystems.service. Sep 13 01:31:44.294883 tar[1440]: linux-arm64/LICENSE Sep 13 01:31:44.294883 tar[1440]: linux-arm64/helm Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.280988383Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281029021Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281042100Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281080897Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281101176Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281117975Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281131214Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281472711Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281488910Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281503909Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281517228Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281530267Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281696216Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Sep 13 01:31:44.295096 env[1447]: time="2025-09-13T01:31:44.281777250Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Sep 13 01:31:44.290116 systemd[1]: Started containerd.service. Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.281990876Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282013554Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282025594Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282069871Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282082670Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282094309Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282104988Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282116267Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282128867Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282139386Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282150545Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282163384Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282270257Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282284576Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295395 env[1447]: time="2025-09-13T01:31:44.282298295Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295673 env[1447]: time="2025-09-13T01:31:44.282309934Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Sep 13 01:31:44.295673 env[1447]: time="2025-09-13T01:31:44.282323294Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Sep 13 01:31:44.295673 env[1447]: time="2025-09-13T01:31:44.282333053Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Sep 13 01:31:44.295673 env[1447]: time="2025-09-13T01:31:44.282351292Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Sep 13 01:31:44.295673 env[1447]: time="2025-09-13T01:31:44.282384329Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.282571437Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.282650271Z" level=info msg="Connect containerd service" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.288312570Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289305023Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289424215Z" level=info msg="Start subscribing containerd event" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289463093Z" level=info msg="Start recovering state" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289522569Z" level=info msg="Start event monitor" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289541287Z" level=info msg="Start snapshots syncer" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289550047Z" level=info msg="Start cni network conf syncer for default" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289557686Z" level=info msg="Start streaming server" Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289913622Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.289955020Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 13 01:31:44.295784 env[1447]: time="2025-09-13T01:31:44.294710139Z" level=info msg="containerd successfully booted in 0.107502s" Sep 13 01:31:44.339679 bash[1473]: Updated "/home/core/.ssh/authorized_keys" Sep 13 01:31:44.340579 systemd[1]: Finished update-ssh-keys-after-ignition.service. Sep 13 01:31:44.474321 systemd[1]: nvidia.service: Deactivated successfully. Sep 13 01:31:44.806886 tar[1440]: linux-arm64/README.md Sep 13 01:31:44.811130 systemd[1]: Finished prepare-helm.service. Sep 13 01:31:44.872585 dbus-daemon[1421]: [system] SELinux support is enabled Sep 13 01:31:44.872771 systemd[1]: Started dbus.service. Sep 13 01:31:44.878424 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Sep 13 01:31:44.878955 dbus-daemon[1421]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 13 01:31:44.878451 systemd[1]: Reached target system-config.target. Sep 13 01:31:44.884127 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Sep 13 01:31:44.884148 systemd[1]: Reached target user-config.target. Sep 13 01:31:44.889314 systemd[1]: Started systemd-logind.service. Sep 13 01:31:45.019309 update_engine[1435]: I0913 01:31:44.983458 1435 main.cc:92] Flatcar Update Engine starting Sep 13 01:31:45.093178 systemd[1]: Started update-engine.service. Sep 13 01:31:45.093507 update_engine[1435]: I0913 01:31:45.093230 1435 update_check_scheduler.cc:74] Next update check in 6m11s Sep 13 01:31:45.100533 systemd[1]: Started locksmithd.service. Sep 13 01:31:45.131878 systemd[1]: Started kubelet.service. Sep 13 01:31:45.619014 kubelet[1523]: E0913 01:31:45.618959 1523 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:31:45.620691 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:31:45.620811 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:31:47.014902 locksmithd[1520]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 13 01:31:48.076110 sshd_keygen[1444]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Sep 13 01:31:48.100879 systemd[1]: Finished sshd-keygen.service. Sep 13 01:31:48.107714 systemd[1]: Starting issuegen.service... Sep 13 01:31:48.112683 systemd[1]: Started waagent.service. Sep 13 01:31:48.117967 systemd[1]: issuegen.service: Deactivated successfully. Sep 13 01:31:48.118138 systemd[1]: Finished issuegen.service. Sep 13 01:31:48.124288 systemd[1]: Starting systemd-user-sessions.service... Sep 13 01:31:48.194778 systemd[1]: Finished systemd-user-sessions.service. Sep 13 01:31:48.201748 systemd[1]: Started getty@tty1.service. Sep 13 01:31:48.209889 systemd[1]: Started serial-getty@ttyAMA0.service. Sep 13 01:31:48.214937 systemd[1]: Reached target getty.target. Sep 13 01:31:48.219219 systemd[1]: Reached target multi-user.target. Sep 13 01:31:48.224966 systemd[1]: Starting systemd-update-utmp-runlevel.service... Sep 13 01:31:48.234345 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Sep 13 01:31:48.234510 systemd[1]: Finished systemd-update-utmp-runlevel.service. Sep 13 01:31:48.240905 systemd[1]: Startup finished in 775ms (kernel) + 17.247s (initrd) + 38.911s (userspace) = 56.934s. Sep 13 01:31:49.916575 login[1546]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Sep 13 01:31:49.992350 login[1547]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 13 01:31:50.265527 systemd[1]: Created slice user-500.slice. Sep 13 01:31:50.266591 systemd[1]: Starting user-runtime-dir@500.service... Sep 13 01:31:50.268877 systemd-logind[1434]: New session 1 of user core. Sep 13 01:31:50.330823 systemd[1]: Finished user-runtime-dir@500.service. Sep 13 01:31:50.333027 systemd[1]: Starting user@500.service... Sep 13 01:31:50.407689 (systemd)[1550]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:31:50.886823 systemd[1550]: Queued start job for default target default.target. Sep 13 01:31:50.887697 systemd[1550]: Reached target paths.target. Sep 13 01:31:50.887722 systemd[1550]: Reached target sockets.target. Sep 13 01:31:50.887733 systemd[1550]: Reached target timers.target. Sep 13 01:31:50.887743 systemd[1550]: Reached target basic.target. Sep 13 01:31:50.887851 systemd[1]: Started user@500.service. Sep 13 01:31:50.888684 systemd[1]: Started session-1.scope. Sep 13 01:31:50.888796 systemd[1550]: Reached target default.target. Sep 13 01:31:50.888840 systemd[1550]: Startup finished in 475ms. Sep 13 01:31:50.917252 login[1546]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 13 01:31:50.922296 systemd[1]: Started session-2.scope. Sep 13 01:31:50.922767 systemd-logind[1434]: New session 2 of user core. Sep 13 01:31:55.718898 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Sep 13 01:31:55.719060 systemd[1]: Stopped kubelet.service. Sep 13 01:31:55.720383 systemd[1]: Starting kubelet.service... Sep 13 01:31:55.826865 systemd[1]: Started kubelet.service. Sep 13 01:31:55.961702 kubelet[1574]: E0913 01:31:55.961632 1574 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:31:55.964497 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:31:55.964618 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:32:00.030717 waagent[1543]: 2025-09-13T01:32:00.030568Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Sep 13 01:32:00.082104 waagent[1543]: 2025-09-13T01:32:00.082002Z INFO Daemon Daemon OS: flatcar 3510.3.8 Sep 13 01:32:00.088703 waagent[1543]: 2025-09-13T01:32:00.088608Z INFO Daemon Daemon Python: 3.9.16 Sep 13 01:32:00.096085 waagent[1543]: 2025-09-13T01:32:00.095999Z INFO Daemon Daemon Run daemon Sep 13 01:32:00.101195 waagent[1543]: 2025-09-13T01:32:00.101125Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Sep 13 01:32:00.137245 waagent[1543]: 2025-09-13T01:32:00.137088Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 13 01:32:00.156008 waagent[1543]: 2025-09-13T01:32:00.155855Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 13 01:32:00.169333 waagent[1543]: 2025-09-13T01:32:00.169244Z INFO Daemon Daemon cloud-init is enabled: False Sep 13 01:32:00.176593 waagent[1543]: 2025-09-13T01:32:00.176509Z INFO Daemon Daemon Using waagent for provisioning Sep 13 01:32:00.184685 waagent[1543]: 2025-09-13T01:32:00.184594Z INFO Daemon Daemon Activate resource disk Sep 13 01:32:00.191195 waagent[1543]: 2025-09-13T01:32:00.191117Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Sep 13 01:32:00.208436 waagent[1543]: 2025-09-13T01:32:00.208350Z INFO Daemon Daemon Found device: None Sep 13 01:32:00.214011 waagent[1543]: 2025-09-13T01:32:00.213934Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Sep 13 01:32:00.224979 waagent[1543]: 2025-09-13T01:32:00.224898Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Sep 13 01:32:00.239182 waagent[1543]: 2025-09-13T01:32:00.239110Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 13 01:32:00.246427 waagent[1543]: 2025-09-13T01:32:00.246348Z INFO Daemon Daemon Running default provisioning handler Sep 13 01:32:00.260285 waagent[1543]: 2025-09-13T01:32:00.260127Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Sep 13 01:32:00.277346 waagent[1543]: 2025-09-13T01:32:00.277181Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 13 01:32:00.288290 waagent[1543]: 2025-09-13T01:32:00.288156Z INFO Daemon Daemon cloud-init is enabled: False Sep 13 01:32:00.294034 waagent[1543]: 2025-09-13T01:32:00.293945Z INFO Daemon Daemon Copying ovf-env.xml Sep 13 01:32:00.495259 waagent[1543]: 2025-09-13T01:32:00.495104Z INFO Daemon Daemon Successfully mounted dvd Sep 13 01:32:00.661776 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Sep 13 01:32:00.766693 waagent[1543]: 2025-09-13T01:32:00.766535Z INFO Daemon Daemon Detect protocol endpoint Sep 13 01:32:00.772403 waagent[1543]: 2025-09-13T01:32:00.772310Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 13 01:32:00.778865 waagent[1543]: 2025-09-13T01:32:00.778773Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Sep 13 01:32:00.786741 waagent[1543]: 2025-09-13T01:32:00.786632Z INFO Daemon Daemon Test for route to 168.63.129.16 Sep 13 01:32:00.792979 waagent[1543]: 2025-09-13T01:32:00.792891Z INFO Daemon Daemon Route to 168.63.129.16 exists Sep 13 01:32:00.798783 waagent[1543]: 2025-09-13T01:32:00.798696Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Sep 13 01:32:01.002396 waagent[1543]: 2025-09-13T01:32:01.002324Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Sep 13 01:32:01.009998 waagent[1543]: 2025-09-13T01:32:01.009950Z INFO Daemon Daemon Wire protocol version:2012-11-30 Sep 13 01:32:01.015699 waagent[1543]: 2025-09-13T01:32:01.015623Z INFO Daemon Daemon Server preferred version:2015-04-05 Sep 13 01:32:01.713581 waagent[1543]: 2025-09-13T01:32:01.713441Z INFO Daemon Daemon Initializing goal state during protocol detection Sep 13 01:32:01.731252 waagent[1543]: 2025-09-13T01:32:01.731165Z INFO Daemon Daemon Forcing an update of the goal state.. Sep 13 01:32:01.738168 waagent[1543]: 2025-09-13T01:32:01.738078Z INFO Daemon Daemon Fetching goal state [incarnation 1] Sep 13 01:32:01.839720 waagent[1543]: 2025-09-13T01:32:01.839562Z INFO Daemon Daemon Found private key matching thumbprint 09C445AF7E8A17FCE61E07902CAC0086C961690D Sep 13 01:32:01.849593 waagent[1543]: 2025-09-13T01:32:01.849501Z INFO Daemon Daemon Fetch goal state completed Sep 13 01:32:01.899557 waagent[1543]: 2025-09-13T01:32:01.899499Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 30de485c-c4e0-4977-a0c1-a7c6d5b90c33 New eTag: 8751373825894672567] Sep 13 01:32:01.911688 waagent[1543]: 2025-09-13T01:32:01.911577Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Sep 13 01:32:01.928251 waagent[1543]: 2025-09-13T01:32:01.928187Z INFO Daemon Daemon Starting provisioning Sep 13 01:32:01.933711 waagent[1543]: 2025-09-13T01:32:01.933618Z INFO Daemon Daemon Handle ovf-env.xml. Sep 13 01:32:01.939171 waagent[1543]: 2025-09-13T01:32:01.939100Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-12daba8686] Sep 13 01:32:02.022176 waagent[1543]: 2025-09-13T01:32:02.022027Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-12daba8686] Sep 13 01:32:02.029819 waagent[1543]: 2025-09-13T01:32:02.029721Z INFO Daemon Daemon Examine /proc/net/route for primary interface Sep 13 01:32:02.038823 waagent[1543]: 2025-09-13T01:32:02.038742Z INFO Daemon Daemon Primary interface is [eth0] Sep 13 01:32:02.055787 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Sep 13 01:32:02.055965 systemd[1]: Stopped systemd-networkd-wait-online.service. Sep 13 01:32:02.056022 systemd[1]: Stopping systemd-networkd-wait-online.service... Sep 13 01:32:02.056262 systemd[1]: Stopping systemd-networkd.service... Sep 13 01:32:02.061701 systemd-networkd[1216]: eth0: DHCPv6 lease lost Sep 13 01:32:02.063616 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 13 01:32:02.063802 systemd[1]: Stopped systemd-networkd.service. Sep 13 01:32:02.065896 systemd[1]: Starting systemd-networkd.service... Sep 13 01:32:02.095280 systemd-networkd[1601]: enP26348s1: Link UP Sep 13 01:32:02.095292 systemd-networkd[1601]: enP26348s1: Gained carrier Sep 13 01:32:02.096343 systemd-networkd[1601]: eth0: Link UP Sep 13 01:32:02.096353 systemd-networkd[1601]: eth0: Gained carrier Sep 13 01:32:02.096826 systemd-networkd[1601]: lo: Link UP Sep 13 01:32:02.096835 systemd-networkd[1601]: lo: Gained carrier Sep 13 01:32:02.097084 systemd-networkd[1601]: eth0: Gained IPv6LL Sep 13 01:32:02.097297 systemd-networkd[1601]: Enumeration completed Sep 13 01:32:02.097408 systemd[1]: Started systemd-networkd.service. Sep 13 01:32:02.099218 systemd[1]: Starting systemd-networkd-wait-online.service... Sep 13 01:32:02.100622 systemd-networkd[1601]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 13 01:32:02.105644 waagent[1543]: 2025-09-13T01:32:02.101994Z INFO Daemon Daemon Create user account if not exists Sep 13 01:32:02.108505 waagent[1543]: 2025-09-13T01:32:02.108421Z INFO Daemon Daemon User core already exists, skip useradd Sep 13 01:32:02.115275 waagent[1543]: 2025-09-13T01:32:02.115191Z INFO Daemon Daemon Configure sudoer Sep 13 01:32:02.128751 systemd-networkd[1601]: eth0: DHCPv4 address 10.200.20.14/24, gateway 10.200.20.1 acquired from 168.63.129.16 Sep 13 01:32:02.130799 systemd[1]: Finished systemd-networkd-wait-online.service. Sep 13 01:32:02.167528 waagent[1543]: 2025-09-13T01:32:02.167426Z INFO Daemon Daemon Configure sshd Sep 13 01:32:02.172427 waagent[1543]: 2025-09-13T01:32:02.172328Z INFO Daemon Daemon Deploy ssh public key. Sep 13 01:32:03.573038 waagent[1543]: 2025-09-13T01:32:03.572948Z INFO Daemon Daemon Provisioning complete Sep 13 01:32:03.595610 waagent[1543]: 2025-09-13T01:32:03.595543Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Sep 13 01:32:03.602703 waagent[1543]: 2025-09-13T01:32:03.602613Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Sep 13 01:32:03.614857 waagent[1543]: 2025-09-13T01:32:03.614778Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Sep 13 01:32:03.912724 waagent[1607]: 2025-09-13T01:32:03.912574Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Sep 13 01:32:03.913438 waagent[1607]: 2025-09-13T01:32:03.913372Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 13 01:32:03.913561 waagent[1607]: 2025-09-13T01:32:03.913517Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 13 01:32:03.925620 waagent[1607]: 2025-09-13T01:32:03.925549Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Sep 13 01:32:03.925804 waagent[1607]: 2025-09-13T01:32:03.925756Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Sep 13 01:32:03.985686 waagent[1607]: 2025-09-13T01:32:03.985532Z INFO ExtHandler ExtHandler Found private key matching thumbprint 09C445AF7E8A17FCE61E07902CAC0086C961690D Sep 13 01:32:03.986014 waagent[1607]: 2025-09-13T01:32:03.985960Z INFO ExtHandler ExtHandler Fetch goal state completed Sep 13 01:32:04.000635 waagent[1607]: 2025-09-13T01:32:04.000580Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 95df49be-ef6e-4d6f-8575-554c8b28c035 New eTag: 8751373825894672567] Sep 13 01:32:04.001239 waagent[1607]: 2025-09-13T01:32:04.001180Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Sep 13 01:32:04.147555 waagent[1607]: 2025-09-13T01:32:04.147408Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 13 01:32:04.181720 waagent[1607]: 2025-09-13T01:32:04.181583Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1607 Sep 13 01:32:04.185498 waagent[1607]: 2025-09-13T01:32:04.185431Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 13 01:32:04.186775 waagent[1607]: 2025-09-13T01:32:04.186718Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Sep 13 01:32:04.396608 waagent[1607]: 2025-09-13T01:32:04.396531Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 13 01:32:04.397076 waagent[1607]: 2025-09-13T01:32:04.397015Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 13 01:32:04.404839 waagent[1607]: 2025-09-13T01:32:04.404779Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 13 01:32:04.405353 waagent[1607]: 2025-09-13T01:32:04.405295Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 13 01:32:04.406529 waagent[1607]: 2025-09-13T01:32:04.406462Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Sep 13 01:32:04.407907 waagent[1607]: 2025-09-13T01:32:04.407837Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 13 01:32:04.408535 waagent[1607]: 2025-09-13T01:32:04.408476Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 13 01:32:04.408824 waagent[1607]: 2025-09-13T01:32:04.408772Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 13 01:32:04.409479 waagent[1607]: 2025-09-13T01:32:04.409420Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 13 01:32:04.409882 waagent[1607]: 2025-09-13T01:32:04.409828Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 13 01:32:04.409882 waagent[1607]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 13 01:32:04.409882 waagent[1607]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 13 01:32:04.409882 waagent[1607]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 13 01:32:04.409882 waagent[1607]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 13 01:32:04.409882 waagent[1607]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 13 01:32:04.409882 waagent[1607]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 13 01:32:04.412305 waagent[1607]: 2025-09-13T01:32:04.412147Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 13 01:32:04.413094 waagent[1607]: 2025-09-13T01:32:04.413036Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 13 01:32:04.413350 waagent[1607]: 2025-09-13T01:32:04.413302Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 13 01:32:04.413999 waagent[1607]: 2025-09-13T01:32:04.413942Z INFO EnvHandler ExtHandler Configure routes Sep 13 01:32:04.414223 waagent[1607]: 2025-09-13T01:32:04.414176Z INFO EnvHandler ExtHandler Gateway:None Sep 13 01:32:04.414422 waagent[1607]: 2025-09-13T01:32:04.414379Z INFO EnvHandler ExtHandler Routes:None Sep 13 01:32:04.415406 waagent[1607]: 2025-09-13T01:32:04.415349Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 13 01:32:04.415498 waagent[1607]: 2025-09-13T01:32:04.415431Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 13 01:32:04.416334 waagent[1607]: 2025-09-13T01:32:04.416247Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 13 01:32:04.416407 waagent[1607]: 2025-09-13T01:32:04.416353Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 13 01:32:04.416949 waagent[1607]: 2025-09-13T01:32:04.416880Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 13 01:32:04.428023 waagent[1607]: 2025-09-13T01:32:04.427945Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Sep 13 01:32:04.428719 waagent[1607]: 2025-09-13T01:32:04.428641Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 13 01:32:04.430570 waagent[1607]: 2025-09-13T01:32:04.430504Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Sep 13 01:32:04.453096 waagent[1607]: 2025-09-13T01:32:04.452990Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Sep 13 01:32:04.476218 waagent[1607]: 2025-09-13T01:32:04.476074Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1601' Sep 13 01:32:04.641538 waagent[1607]: 2025-09-13T01:32:04.641417Z INFO MonitorHandler ExtHandler Network interfaces: Sep 13 01:32:04.641538 waagent[1607]: Executing ['ip', '-a', '-o', 'link']: Sep 13 01:32:04.641538 waagent[1607]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 13 01:32:04.641538 waagent[1607]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:19:c8 brd ff:ff:ff:ff:ff:ff Sep 13 01:32:04.641538 waagent[1607]: 3: enP26348s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:19:c8 brd ff:ff:ff:ff:ff:ff\ altname enP26348p0s2 Sep 13 01:32:04.641538 waagent[1607]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 13 01:32:04.641538 waagent[1607]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 13 01:32:04.641538 waagent[1607]: 2: eth0 inet 10.200.20.14/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 13 01:32:04.641538 waagent[1607]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 13 01:32:04.641538 waagent[1607]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 13 01:32:04.641538 waagent[1607]: 2: eth0 inet6 fe80::20d:3aff:fe06:19c8/64 scope link \ valid_lft forever preferred_lft forever Sep 13 01:32:04.837180 waagent[1607]: 2025-09-13T01:32:04.837110Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.14.0.1 -- exiting Sep 13 01:32:05.619077 waagent[1543]: 2025-09-13T01:32:05.618936Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Sep 13 01:32:05.624820 waagent[1543]: 2025-09-13T01:32:05.624757Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.14.0.1 to be the latest agent Sep 13 01:32:05.968955 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Sep 13 01:32:05.969121 systemd[1]: Stopped kubelet.service. Sep 13 01:32:05.970493 systemd[1]: Starting kubelet.service... Sep 13 01:32:06.061965 systemd[1]: Started kubelet.service. Sep 13 01:32:06.205243 kubelet[1643]: E0913 01:32:06.205175 1643 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:32:06.207262 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:32:06.207388 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:32:07.282584 waagent[1636]: 2025-09-13T01:32:07.282483Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.14.0.1) Sep 13 01:32:07.283326 waagent[1636]: 2025-09-13T01:32:07.283258Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Sep 13 01:32:07.283468 waagent[1636]: 2025-09-13T01:32:07.283421Z INFO ExtHandler ExtHandler Python: 3.9.16 Sep 13 01:32:07.283609 waagent[1636]: 2025-09-13T01:32:07.283564Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Sep 13 01:32:07.297864 waagent[1636]: 2025-09-13T01:32:07.297728Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Sep 13 01:32:07.298332 waagent[1636]: 2025-09-13T01:32:07.298273Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 13 01:32:07.298495 waagent[1636]: 2025-09-13T01:32:07.298448Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 13 01:32:07.298747 waagent[1636]: 2025-09-13T01:32:07.298697Z INFO ExtHandler ExtHandler Initializing the goal state... Sep 13 01:32:07.312509 waagent[1636]: 2025-09-13T01:32:07.312434Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Sep 13 01:32:07.327364 waagent[1636]: 2025-09-13T01:32:07.327299Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.175 Sep 13 01:32:07.328484 waagent[1636]: 2025-09-13T01:32:07.328427Z INFO ExtHandler Sep 13 01:32:07.328650 waagent[1636]: 2025-09-13T01:32:07.328602Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 3ec82452-c029-419a-a398-768c52a4d84f eTag: 8751373825894672567 source: Fabric] Sep 13 01:32:07.329436 waagent[1636]: 2025-09-13T01:32:07.329380Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Sep 13 01:32:07.330679 waagent[1636]: 2025-09-13T01:32:07.330609Z INFO ExtHandler Sep 13 01:32:07.330835 waagent[1636]: 2025-09-13T01:32:07.330788Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Sep 13 01:32:07.338417 waagent[1636]: 2025-09-13T01:32:07.338365Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Sep 13 01:32:07.338993 waagent[1636]: 2025-09-13T01:32:07.338944Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Sep 13 01:32:07.360637 waagent[1636]: 2025-09-13T01:32:07.360573Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Sep 13 01:32:07.427382 waagent[1636]: 2025-09-13T01:32:07.427241Z INFO ExtHandler Downloaded certificate {'thumbprint': '09C445AF7E8A17FCE61E07902CAC0086C961690D', 'hasPrivateKey': True} Sep 13 01:32:07.428851 waagent[1636]: 2025-09-13T01:32:07.428790Z INFO ExtHandler Fetch goal state from WireServer completed Sep 13 01:32:07.429795 waagent[1636]: 2025-09-13T01:32:07.429738Z INFO ExtHandler ExtHandler Goal state initialization completed. Sep 13 01:32:07.451363 waagent[1636]: 2025-09-13T01:32:07.451230Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Sep 13 01:32:07.459686 waagent[1636]: 2025-09-13T01:32:07.459561Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 13 01:32:07.463360 waagent[1636]: 2025-09-13T01:32:07.463244Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Sep 13 01:32:07.463589 waagent[1636]: 2025-09-13T01:32:07.463537Z INFO ExtHandler ExtHandler Checking state of the firewall Sep 13 01:32:07.693608 waagent[1636]: 2025-09-13T01:32:07.693419Z INFO ExtHandler ExtHandler Created firewall rules for Azure Fabric: Sep 13 01:32:07.693608 waagent[1636]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 13 01:32:07.693608 waagent[1636]: pkts bytes target prot opt in out source destination Sep 13 01:32:07.693608 waagent[1636]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 13 01:32:07.693608 waagent[1636]: pkts bytes target prot opt in out source destination Sep 13 01:32:07.693608 waagent[1636]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 13 01:32:07.693608 waagent[1636]: pkts bytes target prot opt in out source destination Sep 13 01:32:07.693608 waagent[1636]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Sep 13 01:32:07.693608 waagent[1636]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 13 01:32:07.693608 waagent[1636]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 13 01:32:07.694732 waagent[1636]: 2025-09-13T01:32:07.694643Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Sep 13 01:32:07.697560 waagent[1636]: 2025-09-13T01:32:07.697435Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Sep 13 01:32:07.697870 waagent[1636]: 2025-09-13T01:32:07.697816Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 13 01:32:07.698250 waagent[1636]: 2025-09-13T01:32:07.698194Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 13 01:32:07.706570 waagent[1636]: 2025-09-13T01:32:07.706500Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 13 01:32:07.707152 waagent[1636]: 2025-09-13T01:32:07.707095Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Sep 13 01:32:07.715535 waagent[1636]: 2025-09-13T01:32:07.715453Z INFO ExtHandler ExtHandler WALinuxAgent-2.14.0.1 running as process 1636 Sep 13 01:32:07.718952 waagent[1636]: 2025-09-13T01:32:07.718882Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Sep 13 01:32:07.719826 waagent[1636]: 2025-09-13T01:32:07.719770Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Sep 13 01:32:07.720745 waagent[1636]: 2025-09-13T01:32:07.720691Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Sep 13 01:32:07.723500 waagent[1636]: 2025-09-13T01:32:07.723441Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Sep 13 01:32:07.723902 waagent[1636]: 2025-09-13T01:32:07.723848Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Sep 13 01:32:07.725266 waagent[1636]: 2025-09-13T01:32:07.725200Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 13 01:32:07.725787 waagent[1636]: 2025-09-13T01:32:07.725730Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 13 01:32:07.726058 waagent[1636]: 2025-09-13T01:32:07.726011Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 13 01:32:07.726702 waagent[1636]: 2025-09-13T01:32:07.726633Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 13 01:32:07.727143 waagent[1636]: 2025-09-13T01:32:07.727092Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 13 01:32:07.727143 waagent[1636]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 13 01:32:07.727143 waagent[1636]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Sep 13 01:32:07.727143 waagent[1636]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 13 01:32:07.727143 waagent[1636]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 13 01:32:07.727143 waagent[1636]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 13 01:32:07.727143 waagent[1636]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 13 01:32:07.730265 waagent[1636]: 2025-09-13T01:32:07.730130Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 13 01:32:07.730527 waagent[1636]: 2025-09-13T01:32:07.730461Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 13 01:32:07.731259 waagent[1636]: 2025-09-13T01:32:07.731185Z INFO EnvHandler ExtHandler Configure routes Sep 13 01:32:07.731419 waagent[1636]: 2025-09-13T01:32:07.731366Z INFO EnvHandler ExtHandler Gateway:None Sep 13 01:32:07.731551 waagent[1636]: 2025-09-13T01:32:07.731503Z INFO EnvHandler ExtHandler Routes:None Sep 13 01:32:07.732002 waagent[1636]: 2025-09-13T01:32:07.731938Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 13 01:32:07.733033 waagent[1636]: 2025-09-13T01:32:07.732952Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 13 01:32:07.733127 waagent[1636]: 2025-09-13T01:32:07.733071Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 13 01:32:07.736395 waagent[1636]: 2025-09-13T01:32:07.736254Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 13 01:32:07.736523 waagent[1636]: 2025-09-13T01:32:07.736452Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 13 01:32:07.738216 waagent[1636]: 2025-09-13T01:32:07.738147Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 13 01:32:07.744512 waagent[1636]: 2025-09-13T01:32:07.744442Z INFO MonitorHandler ExtHandler Network interfaces: Sep 13 01:32:07.744512 waagent[1636]: Executing ['ip', '-a', '-o', 'link']: Sep 13 01:32:07.744512 waagent[1636]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 13 01:32:07.744512 waagent[1636]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:19:c8 brd ff:ff:ff:ff:ff:ff Sep 13 01:32:07.744512 waagent[1636]: 3: enP26348s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:19:c8 brd ff:ff:ff:ff:ff:ff\ altname enP26348p0s2 Sep 13 01:32:07.744512 waagent[1636]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 13 01:32:07.744512 waagent[1636]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 13 01:32:07.744512 waagent[1636]: 2: eth0 inet 10.200.20.14/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 13 01:32:07.744512 waagent[1636]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 13 01:32:07.744512 waagent[1636]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Sep 13 01:32:07.744512 waagent[1636]: 2: eth0 inet6 fe80::20d:3aff:fe06:19c8/64 scope link \ valid_lft forever preferred_lft forever Sep 13 01:32:07.762268 waagent[1636]: 2025-09-13T01:32:07.762168Z INFO ExtHandler ExtHandler Downloading agent manifest Sep 13 01:32:07.778369 waagent[1636]: 2025-09-13T01:32:07.778292Z INFO ExtHandler ExtHandler Sep 13 01:32:07.779397 waagent[1636]: 2025-09-13T01:32:07.779331Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: ae2d9494-15d9-4683-916c-7c17bd1f884a correlation 697efb93-5f00-4e22-ad6e-60ae55399856 created: 2025-09-13T01:29:57.118813Z] Sep 13 01:32:07.783377 waagent[1636]: 2025-09-13T01:32:07.783301Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Sep 13 01:32:07.788564 waagent[1636]: 2025-09-13T01:32:07.788498Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 10 ms] Sep 13 01:32:07.810972 waagent[1636]: 2025-09-13T01:32:07.810907Z INFO ExtHandler ExtHandler Looking for existing remote access users. Sep 13 01:32:07.813606 waagent[1636]: 2025-09-13T01:32:07.813551Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 2A9AE2DD-E8A2-47CE-9310-3D33F011ABCB;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Sep 13 01:32:07.848395 waagent[1636]: 2025-09-13T01:32:07.848278Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Sep 13 01:32:07.858901 waagent[1636]: 2025-09-13T01:32:07.858825Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Sep 13 01:32:13.997150 systemd[1]: Created slice system-sshd.slice. Sep 13 01:32:13.998697 systemd[1]: Started sshd@0-10.200.20.14:22-10.200.16.10:43756.service. Sep 13 01:32:14.712385 sshd[1688]: Accepted publickey for core from 10.200.16.10 port 43756 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:32:14.733208 sshd[1688]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:32:14.737725 systemd-logind[1434]: New session 3 of user core. Sep 13 01:32:14.738143 systemd[1]: Started session-3.scope. Sep 13 01:32:15.088080 systemd[1]: Started sshd@1-10.200.20.14:22-10.200.16.10:43758.service. Sep 13 01:32:15.504549 sshd[1693]: Accepted publickey for core from 10.200.16.10 port 43758 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:32:15.505887 sshd[1693]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:32:15.509714 systemd-logind[1434]: New session 4 of user core. Sep 13 01:32:15.510138 systemd[1]: Started session-4.scope. Sep 13 01:32:15.813168 sshd[1693]: pam_unix(sshd:session): session closed for user core Sep 13 01:32:15.815574 systemd[1]: sshd@1-10.200.20.14:22-10.200.16.10:43758.service: Deactivated successfully. Sep 13 01:32:15.816269 systemd[1]: session-4.scope: Deactivated successfully. Sep 13 01:32:15.816801 systemd-logind[1434]: Session 4 logged out. Waiting for processes to exit. Sep 13 01:32:15.817854 systemd-logind[1434]: Removed session 4. Sep 13 01:32:15.881354 systemd[1]: Started sshd@2-10.200.20.14:22-10.200.16.10:43770.service. Sep 13 01:32:16.218951 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Sep 13 01:32:16.219116 systemd[1]: Stopped kubelet.service. Sep 13 01:32:16.220479 systemd[1]: Starting kubelet.service... Sep 13 01:32:16.298166 sshd[1699]: Accepted publickey for core from 10.200.16.10 port 43770 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:32:16.299924 sshd[1699]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:32:16.304404 systemd[1]: Started session-5.scope. Sep 13 01:32:16.305726 systemd-logind[1434]: New session 5 of user core. Sep 13 01:32:16.315085 systemd[1]: Started kubelet.service. Sep 13 01:32:16.455977 kubelet[1706]: E0913 01:32:16.455923 1706 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:32:16.457686 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:32:16.457812 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:32:16.620823 sshd[1699]: pam_unix(sshd:session): session closed for user core Sep 13 01:32:16.624132 systemd[1]: session-5.scope: Deactivated successfully. Sep 13 01:32:16.624732 systemd[1]: sshd@2-10.200.20.14:22-10.200.16.10:43770.service: Deactivated successfully. Sep 13 01:32:16.625560 systemd-logind[1434]: Session 5 logged out. Waiting for processes to exit. Sep 13 01:32:16.626282 systemd-logind[1434]: Removed session 5. Sep 13 01:32:16.689183 systemd[1]: Started sshd@3-10.200.20.14:22-10.200.16.10:43772.service. Sep 13 01:32:16.953838 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Sep 13 01:32:17.100954 sshd[1714]: Accepted publickey for core from 10.200.16.10 port 43772 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:32:17.102474 sshd[1714]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:32:17.106537 systemd[1]: Started session-6.scope. Sep 13 01:32:17.107719 systemd-logind[1434]: New session 6 of user core. Sep 13 01:32:17.434253 sshd[1714]: pam_unix(sshd:session): session closed for user core Sep 13 01:32:17.436972 systemd[1]: sshd@3-10.200.20.14:22-10.200.16.10:43772.service: Deactivated successfully. Sep 13 01:32:17.437633 systemd[1]: session-6.scope: Deactivated successfully. Sep 13 01:32:17.438162 systemd-logind[1434]: Session 6 logged out. Waiting for processes to exit. Sep 13 01:32:17.438981 systemd-logind[1434]: Removed session 6. Sep 13 01:32:17.502757 systemd[1]: Started sshd@4-10.200.20.14:22-10.200.16.10:43778.service. Sep 13 01:32:17.916726 sshd[1720]: Accepted publickey for core from 10.200.16.10 port 43778 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:32:17.918013 sshd[1720]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:32:17.921773 systemd-logind[1434]: New session 7 of user core. Sep 13 01:32:17.922181 systemd[1]: Started session-7.scope. Sep 13 01:32:18.638839 sudo[1723]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 13 01:32:18.639382 sudo[1723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:32:18.697845 dbus-daemon[1421]: avc: received setenforce notice (enforcing=1) Sep 13 01:32:18.699629 sudo[1723]: pam_unix(sudo:session): session closed for user root Sep 13 01:32:18.799046 sshd[1720]: pam_unix(sshd:session): session closed for user core Sep 13 01:32:18.802185 systemd-logind[1434]: Session 7 logged out. Waiting for processes to exit. Sep 13 01:32:18.802311 systemd[1]: session-7.scope: Deactivated successfully. Sep 13 01:32:18.802875 systemd[1]: sshd@4-10.200.20.14:22-10.200.16.10:43778.service: Deactivated successfully. Sep 13 01:32:18.804022 systemd-logind[1434]: Removed session 7. Sep 13 01:32:18.879482 systemd[1]: Started sshd@5-10.200.20.14:22-10.200.16.10:43794.service. Sep 13 01:32:19.295329 sshd[1727]: Accepted publickey for core from 10.200.16.10 port 43794 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:32:19.297067 sshd[1727]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:32:19.300874 systemd-logind[1434]: New session 8 of user core. Sep 13 01:32:19.301289 systemd[1]: Started session-8.scope. Sep 13 01:32:19.532438 sudo[1731]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 13 01:32:19.532986 sudo[1731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:32:19.535891 sudo[1731]: pam_unix(sudo:session): session closed for user root Sep 13 01:32:19.540577 sudo[1730]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Sep 13 01:32:19.540815 sudo[1730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:32:19.549348 systemd[1]: Stopping audit-rules.service... Sep 13 01:32:19.549000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 01:32:19.555714 kernel: kauditd_printk_skb: 2 callbacks suppressed Sep 13 01:32:19.555794 kernel: audit: type=1305 audit(1757727139.549:223): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 13 01:32:19.557843 auditctl[1734]: No rules Sep 13 01:32:19.558308 systemd[1]: audit-rules.service: Deactivated successfully. Sep 13 01:32:19.549000 audit[1734]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff7851ec0 a2=420 a3=0 items=0 ppid=1 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:19.558474 systemd[1]: Stopped audit-rules.service. Sep 13 01:32:19.570522 systemd[1]: Starting audit-rules.service... Sep 13 01:32:19.598321 kernel: audit: type=1300 audit(1757727139.549:223): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff7851ec0 a2=420 a3=0 items=0 ppid=1 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:19.549000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Sep 13 01:32:19.606435 kernel: audit: type=1327 audit(1757727139.549:223): proctitle=2F7362696E2F617564697463746C002D44 Sep 13 01:32:19.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.628353 kernel: audit: type=1131 audit(1757727139.554:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.633638 augenrules[1751]: No rules Sep 13 01:32:19.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.634501 systemd[1]: Finished audit-rules.service. Sep 13 01:32:19.636902 sudo[1730]: pam_unix(sudo:session): session closed for user root Sep 13 01:32:19.633000 audit[1730]: USER_END pid=1730 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.674843 kernel: audit: type=1130 audit(1757727139.633:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.674932 kernel: audit: type=1106 audit(1757727139.633:226): pid=1730 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.674962 kernel: audit: type=1104 audit(1757727139.633:227): pid=1730 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.633000 audit[1730]: CRED_DISP pid=1730 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.743478 sshd[1727]: pam_unix(sshd:session): session closed for user core Sep 13 01:32:19.742000 audit[1727]: USER_END pid=1727 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:19.745891 systemd[1]: session-8.scope: Deactivated successfully. Sep 13 01:32:19.746485 systemd[1]: sshd@5-10.200.20.14:22-10.200.16.10:43794.service: Deactivated successfully. Sep 13 01:32:19.748215 systemd-logind[1434]: Session 8 logged out. Waiting for processes to exit. Sep 13 01:32:19.749041 systemd-logind[1434]: Removed session 8. Sep 13 01:32:19.742000 audit[1727]: CRED_DISP pid=1727 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:19.795115 kernel: audit: type=1106 audit(1757727139.742:228): pid=1727 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:19.795200 kernel: audit: type=1104 audit(1757727139.742:229): pid=1727 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:19.795233 kernel: audit: type=1131 audit(1757727139.742:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.14:22-10.200.16.10:43794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.14:22-10.200.16.10:43794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:19.819375 systemd[1]: Started sshd@6-10.200.20.14:22-10.200.16.10:43808.service. Sep 13 01:32:19.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.14:22-10.200.16.10:43808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:20.234000 audit[1757]: USER_ACCT pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:20.236622 sshd[1757]: Accepted publickey for core from 10.200.16.10 port 43808 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:32:20.236000 audit[1757]: CRED_ACQ pid=1757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:20.236000 audit[1757]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe43d7f40 a2=3 a3=1 items=0 ppid=1 pid=1757 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.236000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:32:20.238251 sshd[1757]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:32:20.242346 systemd[1]: Started session-9.scope. Sep 13 01:32:20.243452 systemd-logind[1434]: New session 9 of user core. Sep 13 01:32:20.245000 audit[1757]: USER_START pid=1757 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:20.247000 audit[1759]: CRED_ACQ pid=1759 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:32:20.472000 audit[1760]: USER_ACCT pid=1760 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:32:20.474319 sudo[1760]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Sep 13 01:32:20.472000 audit[1760]: CRED_REFR pid=1760 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:32:20.474536 sudo[1760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Sep 13 01:32:20.474000 audit[1760]: USER_START pid=1760 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:32:20.512234 systemd[1]: Starting docker.service... Sep 13 01:32:20.565629 env[1770]: time="2025-09-13T01:32:20.565584313Z" level=info msg="Starting up" Sep 13 01:32:20.575769 env[1770]: time="2025-09-13T01:32:20.575732166Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 01:32:20.575769 env[1770]: time="2025-09-13T01:32:20.575761726Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 01:32:20.575878 env[1770]: time="2025-09-13T01:32:20.575784126Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 01:32:20.575878 env[1770]: time="2025-09-13T01:32:20.575803246Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 01:32:20.577606 env[1770]: time="2025-09-13T01:32:20.577575754Z" level=info msg="parsed scheme: \"unix\"" module=grpc Sep 13 01:32:20.577606 env[1770]: time="2025-09-13T01:32:20.577602394Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Sep 13 01:32:20.577726 env[1770]: time="2025-09-13T01:32:20.577617594Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Sep 13 01:32:20.577726 env[1770]: time="2025-09-13T01:32:20.577626034Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Sep 13 01:32:20.584388 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3067847020-merged.mount: Deactivated successfully. Sep 13 01:32:20.691174 env[1770]: time="2025-09-13T01:32:20.691140245Z" level=info msg="Loading containers: start." Sep 13 01:32:20.794000 audit[1797]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.794000 audit[1797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd8d46d80 a2=0 a3=1 items=0 ppid=1770 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.794000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 13 01:32:20.797000 audit[1799]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.797000 audit[1799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffeb004e10 a2=0 a3=1 items=0 ppid=1770 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.797000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 13 01:32:20.798000 audit[1801]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1801 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.798000 audit[1801]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd287aba0 a2=0 a3=1 items=0 ppid=1770 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.798000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 01:32:20.800000 audit[1803]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.800000 audit[1803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc42f94e0 a2=0 a3=1 items=0 ppid=1770 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.800000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 01:32:20.802000 audit[1805]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.802000 audit[1805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff62a6ff0 a2=0 a3=1 items=0 ppid=1770 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.802000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Sep 13 01:32:20.803000 audit[1807]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1807 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.803000 audit[1807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcfdd6f30 a2=0 a3=1 items=0 ppid=1770 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.803000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Sep 13 01:32:20.826000 audit[1809]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1809 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.826000 audit[1809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe9720600 a2=0 a3=1 items=0 ppid=1770 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.826000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 13 01:32:20.828000 audit[1811]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.828000 audit[1811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd4715560 a2=0 a3=1 items=0 ppid=1770 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.828000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Sep 13 01:32:20.829000 audit[1813]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1813 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.829000 audit[1813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffffa9798f0 a2=0 a3=1 items=0 ppid=1770 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.829000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:32:20.850000 audit[1817]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.850000 audit[1817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdb5ac260 a2=0 a3=1 items=0 ppid=1770 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.850000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:32:20.852000 audit[1818]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:20.852000 audit[1818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc1249b70 a2=0 a3=1 items=0 ppid=1770 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:20.852000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:32:21.004677 kernel: Initializing XFRM netlink socket Sep 13 01:32:21.047056 env[1770]: time="2025-09-13T01:32:21.047001796Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Sep 13 01:32:21.243000 audit[1826]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1826 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.243000 audit[1826]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff5069f90 a2=0 a3=1 items=0 ppid=1770 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.243000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 13 01:32:21.294000 audit[1829]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1829 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.294000 audit[1829]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc5c46380 a2=0 a3=1 items=0 ppid=1770 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Sep 13 01:32:21.297000 audit[1832]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1832 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.297000 audit[1832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe7beb200 a2=0 a3=1 items=0 ppid=1770 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.297000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Sep 13 01:32:21.299000 audit[1834]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1834 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.299000 audit[1834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd5e8a4d0 a2=0 a3=1 items=0 ppid=1770 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.299000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Sep 13 01:32:21.301000 audit[1836]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1836 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.301000 audit[1836]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffffaba97a0 a2=0 a3=1 items=0 ppid=1770 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.301000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 13 01:32:21.303000 audit[1838]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1838 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.303000 audit[1838]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe752ee40 a2=0 a3=1 items=0 ppid=1770 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.303000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 13 01:32:21.304000 audit[1840]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1840 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.304000 audit[1840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdf5adfa0 a2=0 a3=1 items=0 ppid=1770 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.304000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Sep 13 01:32:21.306000 audit[1842]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1842 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.306000 audit[1842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe0e50a80 a2=0 a3=1 items=0 ppid=1770 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.306000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 13 01:32:21.308000 audit[1844]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1844 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.308000 audit[1844]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffce7e03b0 a2=0 a3=1 items=0 ppid=1770 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.308000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Sep 13 01:32:21.310000 audit[1846]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1846 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.310000 audit[1846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc88b0cc0 a2=0 a3=1 items=0 ppid=1770 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.310000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Sep 13 01:32:21.312000 audit[1848]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1848 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.312000 audit[1848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc813b8a0 a2=0 a3=1 items=0 ppid=1770 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.312000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Sep 13 01:32:21.314475 systemd-networkd[1601]: docker0: Link UP Sep 13 01:32:21.336000 audit[1852]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1852 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.336000 audit[1852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc9c99ca0 a2=0 a3=1 items=0 ppid=1770 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.336000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:32:21.343000 audit[1853]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1853 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:21.343000 audit[1853]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffde927ee0 a2=0 a3=1 items=0 ppid=1770 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:21.343000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 13 01:32:21.345924 env[1770]: time="2025-09-13T01:32:21.345897108Z" level=info msg="Loading containers: done." Sep 13 01:32:21.356083 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1839318732-merged.mount: Deactivated successfully. Sep 13 01:32:21.384794 env[1770]: time="2025-09-13T01:32:21.384745788Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Sep 13 01:32:21.384972 env[1770]: time="2025-09-13T01:32:21.384929666Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Sep 13 01:32:21.385052 env[1770]: time="2025-09-13T01:32:21.385030066Z" level=info msg="Daemon has completed initialization" Sep 13 01:32:21.418845 systemd[1]: Started docker.service. Sep 13 01:32:21.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:21.427258 env[1770]: time="2025-09-13T01:32:21.427206285Z" level=info msg="API listen on /run/docker.sock" Sep 13 01:32:25.934646 env[1447]: time="2025-09-13T01:32:25.934599223Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Sep 13 01:32:26.468910 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Sep 13 01:32:26.469071 systemd[1]: Stopped kubelet.service. Sep 13 01:32:26.491605 kernel: kauditd_printk_skb: 84 callbacks suppressed Sep 13 01:32:26.491750 kernel: audit: type=1130 audit(1757727146.467:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:26.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:26.470498 systemd[1]: Starting kubelet.service... Sep 13 01:32:26.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:26.511723 kernel: audit: type=1131 audit(1757727146.467:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:26.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:26.562175 systemd[1]: Started kubelet.service. Sep 13 01:32:26.579727 kernel: audit: type=1130 audit(1757727146.560:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:26.694350 kubelet[1889]: E0913 01:32:26.694308 1889 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:32:26.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:32:26.695998 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:32:26.696117 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:32:26.716685 kernel: audit: type=1131 audit(1757727146.694:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:32:27.166073 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2539648220.mount: Deactivated successfully. Sep 13 01:32:28.887114 env[1447]: time="2025-09-13T01:32:28.887056650Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:28.894549 env[1447]: time="2025-09-13T01:32:28.894493701Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:28.899065 env[1447]: time="2025-09-13T01:32:28.899021643Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:28.904330 env[1447]: time="2025-09-13T01:32:28.904291183Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:28.905170 env[1447]: time="2025-09-13T01:32:28.905141619Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002\"" Sep 13 01:32:28.906235 env[1447]: time="2025-09-13T01:32:28.906200175Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Sep 13 01:32:30.313886 update_engine[1435]: I0913 01:32:30.313308 1435 update_attempter.cc:509] Updating boot flags... Sep 13 01:32:30.472791 env[1447]: time="2025-09-13T01:32:30.472746120Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:30.481689 env[1447]: time="2025-09-13T01:32:30.481640850Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:30.485553 env[1447]: time="2025-09-13T01:32:30.485519196Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:30.489303 env[1447]: time="2025-09-13T01:32:30.489270943Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:30.489965 env[1447]: time="2025-09-13T01:32:30.489936181Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b\"" Sep 13 01:32:30.490469 env[1447]: time="2025-09-13T01:32:30.490445019Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Sep 13 01:32:32.056781 env[1447]: time="2025-09-13T01:32:32.056724560Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:32.064793 env[1447]: time="2025-09-13T01:32:32.064748295Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:32.069299 env[1447]: time="2025-09-13T01:32:32.069257321Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:32.073995 env[1447]: time="2025-09-13T01:32:32.073955307Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:32.074848 env[1447]: time="2025-09-13T01:32:32.074819705Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27\"" Sep 13 01:32:32.075515 env[1447]: time="2025-09-13T01:32:32.075489583Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Sep 13 01:32:33.239086 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount593288672.mount: Deactivated successfully. Sep 13 01:32:33.736127 env[1447]: time="2025-09-13T01:32:33.736088434Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:33.743618 env[1447]: time="2025-09-13T01:32:33.743576172Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:33.747350 env[1447]: time="2025-09-13T01:32:33.747317842Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:33.750736 env[1447]: time="2025-09-13T01:32:33.750704952Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:33.751071 env[1447]: time="2025-09-13T01:32:33.751043671Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4\"" Sep 13 01:32:33.751766 env[1447]: time="2025-09-13T01:32:33.751740229Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Sep 13 01:32:34.399750 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount578878667.mount: Deactivated successfully. Sep 13 01:32:35.852194 env[1447]: time="2025-09-13T01:32:35.852138034Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:35.860031 env[1447]: time="2025-09-13T01:32:35.859985694Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:35.864727 env[1447]: time="2025-09-13T01:32:35.864693443Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:35.871199 env[1447]: time="2025-09-13T01:32:35.871159066Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:35.871528 env[1447]: time="2025-09-13T01:32:35.871500426Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Sep 13 01:32:35.872925 env[1447]: time="2025-09-13T01:32:35.872896022Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Sep 13 01:32:36.440832 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1386423162.mount: Deactivated successfully. Sep 13 01:32:36.461909 env[1447]: time="2025-09-13T01:32:36.461869739Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:36.470262 env[1447]: time="2025-09-13T01:32:36.470225239Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:36.475690 env[1447]: time="2025-09-13T01:32:36.475633346Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:36.480601 env[1447]: time="2025-09-13T01:32:36.480567015Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:36.481720 env[1447]: time="2025-09-13T01:32:36.481325733Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Sep 13 01:32:36.482242 env[1447]: time="2025-09-13T01:32:36.482212971Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Sep 13 01:32:36.718939 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Sep 13 01:32:36.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:36.719109 systemd[1]: Stopped kubelet.service. Sep 13 01:32:36.720498 systemd[1]: Starting kubelet.service... Sep 13 01:32:36.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:36.758184 kernel: audit: type=1130 audit(1757727156.717:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:36.758296 kernel: audit: type=1131 audit(1757727156.717:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:36.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:36.944167 systemd[1]: Started kubelet.service. Sep 13 01:32:36.964696 kernel: audit: type=1130 audit(1757727156.942:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:36.994055 kubelet[1940]: E0913 01:32:36.993942 1940 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Sep 13 01:32:36.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:32:36.996061 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Sep 13 01:32:36.996177 systemd[1]: kubelet.service: Failed with result 'exit-code'. Sep 13 01:32:37.015813 kernel: audit: type=1131 audit(1757727156.994:272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Sep 13 01:32:37.659036 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3087700530.mount: Deactivated successfully. Sep 13 01:32:41.011024 env[1447]: time="2025-09-13T01:32:41.010978864Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:41.017676 env[1447]: time="2025-09-13T01:32:41.017623719Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:41.023562 env[1447]: time="2025-09-13T01:32:41.023529496Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:41.030498 env[1447]: time="2025-09-13T01:32:41.030465110Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:41.031507 env[1447]: time="2025-09-13T01:32:41.031480386Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Sep 13 01:32:46.698952 systemd[1]: Stopped kubelet.service. Sep 13 01:32:46.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:46.702847 systemd[1]: Starting kubelet.service... Sep 13 01:32:46.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:46.747260 kernel: audit: type=1130 audit(1757727166.697:273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:46.747401 kernel: audit: type=1131 audit(1757727166.697:274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:46.763266 systemd[1]: Reloading. Sep 13 01:32:46.830317 /usr/lib/systemd/system-generators/torcx-generator[1989]: time="2025-09-13T01:32:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:32:46.830344 /usr/lib/systemd/system-generators/torcx-generator[1989]: time="2025-09-13T01:32:46Z" level=info msg="torcx already run" Sep 13 01:32:46.910576 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:32:46.910597 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:32:46.926205 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.041240 kernel: audit: type=1400 audit(1757727166.999:275): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.041367 kernel: audit: type=1400 audit(1757727166.999:276): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.041399 kernel: audit: type=1400 audit(1757727166.999:277): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.085436 kernel: audit: type=1400 audit(1757727166.999:278): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.108612 kernel: audit: type=1400 audit(1757727166.999:279): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.139111 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Sep 13 01:32:47.139204 kernel: audit: type=1400 audit(1757727166.999:280): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.139233 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:46.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit: BPF prog-id=47 op=LOAD Sep 13 01:32:47.020000 audit: BPF prog-id=30 op=UNLOAD Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit: BPF prog-id=48 op=LOAD Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit: BPF prog-id=49 op=LOAD Sep 13 01:32:47.059000 audit: BPF prog-id=31 op=UNLOAD Sep 13 01:32:47.059000 audit: BPF prog-id=32 op=UNLOAD Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit: BPF prog-id=50 op=LOAD Sep 13 01:32:47.084000 audit: BPF prog-id=41 op=UNLOAD Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit: BPF prog-id=51 op=LOAD Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit: BPF prog-id=52 op=LOAD Sep 13 01:32:47.107000 audit: BPF prog-id=42 op=UNLOAD Sep 13 01:32:47.107000 audit: BPF prog-id=43 op=UNLOAD Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit: BPF prog-id=53 op=LOAD Sep 13 01:32:47.145000 audit: BPF prog-id=40 op=UNLOAD Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit: BPF prog-id=54 op=LOAD Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit: BPF prog-id=55 op=LOAD Sep 13 01:32:47.145000 audit: BPF prog-id=33 op=UNLOAD Sep 13 01:32:47.145000 audit: BPF prog-id=34 op=UNLOAD Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.145000 audit: BPF prog-id=56 op=LOAD Sep 13 01:32:47.145000 audit: BPF prog-id=46 op=UNLOAD Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit: BPF prog-id=57 op=LOAD Sep 13 01:32:47.146000 audit: BPF prog-id=44 op=UNLOAD Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.146000 audit: BPF prog-id=58 op=LOAD Sep 13 01:32:47.146000 audit: BPF prog-id=39 op=UNLOAD Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit: BPF prog-id=59 op=LOAD Sep 13 01:32:47.147000 audit: BPF prog-id=36 op=UNLOAD Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit: BPF prog-id=60 op=LOAD Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:47.147000 audit: BPF prog-id=61 op=LOAD Sep 13 01:32:47.147000 audit: BPF prog-id=37 op=UNLOAD Sep 13 01:32:47.147000 audit: BPF prog-id=38 op=UNLOAD Sep 13 01:32:47.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:47.177644 systemd[1]: Stopping kubelet.service... Sep 13 01:32:47.177937 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 01:32:47.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:47.178529 systemd[1]: Stopped kubelet.service. Sep 13 01:32:47.180405 systemd[1]: Starting kubelet.service... Sep 13 01:32:47.268366 systemd[1]: Started kubelet.service. Sep 13 01:32:47.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:47.388709 kubelet[2056]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:32:47.389422 kubelet[2056]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 01:32:47.389545 kubelet[2056]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:32:47.389787 kubelet[2056]: I0913 01:32:47.389756 2056 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 01:32:48.396805 kubelet[2056]: I0913 01:32:48.396766 2056 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 13 01:32:48.396805 kubelet[2056]: I0913 01:32:48.396797 2056 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 01:32:48.397130 kubelet[2056]: I0913 01:32:48.397049 2056 server.go:954] "Client rotation is on, will bootstrap in background" Sep 13 01:32:48.442702 kubelet[2056]: E0913 01:32:48.442638 2056 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.20.14:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:48.444859 kubelet[2056]: I0913 01:32:48.444839 2056 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 01:32:48.456634 kubelet[2056]: E0913 01:32:48.456555 2056 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 01:32:48.456634 kubelet[2056]: I0913 01:32:48.456631 2056 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 01:32:48.459741 kubelet[2056]: I0913 01:32:48.459721 2056 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 01:32:48.460852 kubelet[2056]: I0913 01:32:48.460816 2056 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 01:32:48.461016 kubelet[2056]: I0913 01:32:48.460854 2056 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-12daba8686","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 01:32:48.461112 kubelet[2056]: I0913 01:32:48.461024 2056 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 01:32:48.461112 kubelet[2056]: I0913 01:32:48.461033 2056 container_manager_linux.go:304] "Creating device plugin manager" Sep 13 01:32:48.461159 kubelet[2056]: I0913 01:32:48.461149 2056 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:32:48.464501 kubelet[2056]: I0913 01:32:48.464480 2056 kubelet.go:446] "Attempting to sync node with API server" Sep 13 01:32:48.464547 kubelet[2056]: I0913 01:32:48.464506 2056 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 01:32:48.464614 kubelet[2056]: I0913 01:32:48.464599 2056 kubelet.go:352] "Adding apiserver pod source" Sep 13 01:32:48.464647 kubelet[2056]: I0913 01:32:48.464617 2056 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 01:32:48.466861 kubelet[2056]: W0913 01:32:48.466821 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-12daba8686&limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:48.466910 kubelet[2056]: E0913 01:32:48.466875 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-12daba8686&limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:48.469976 kubelet[2056]: W0913 01:32:48.469923 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.14:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:48.470176 kubelet[2056]: E0913 01:32:48.470157 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.14:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:48.470335 kubelet[2056]: I0913 01:32:48.470322 2056 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 01:32:48.470913 kubelet[2056]: I0913 01:32:48.470896 2056 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 01:32:48.471041 kubelet[2056]: W0913 01:32:48.471031 2056 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Sep 13 01:32:48.472728 kubelet[2056]: I0913 01:32:48.472708 2056 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 01:32:48.472838 kubelet[2056]: I0913 01:32:48.472827 2056 server.go:1287] "Started kubelet" Sep 13 01:32:48.477868 kubelet[2056]: I0913 01:32:48.477815 2056 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 01:32:48.478592 kubelet[2056]: I0913 01:32:48.478547 2056 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 01:32:48.479034 kubelet[2056]: I0913 01:32:48.479013 2056 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 01:32:48.479151 kubelet[2056]: I0913 01:32:48.478601 2056 server.go:479] "Adding debug handlers to kubelet server" Sep 13 01:32:48.478000 audit[2056]: AVC avc: denied { mac_admin } for pid=2056 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:48.478000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:32:48.478000 audit[2056]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000963740 a1=4000aaaa50 a2=4000963710 a3=25 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.478000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:32:48.478000 audit[2056]: AVC avc: denied { mac_admin } for pid=2056 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:48.478000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:32:48.478000 audit[2056]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000aa1aa0 a1=4000aaaa68 a2=40009637d0 a3=25 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.478000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:32:48.480218 kubelet[2056]: I0913 01:32:48.479920 2056 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 01:32:48.480218 kubelet[2056]: I0913 01:32:48.479964 2056 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 01:32:48.480218 kubelet[2056]: I0913 01:32:48.480036 2056 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 01:32:48.480804 kubelet[2056]: E0913 01:32:48.480670 2056 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.14:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.14:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-12daba8686.1864b38c00dff8be default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-12daba8686,UID:ci-3510.3.8-n-12daba8686,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-12daba8686,},FirstTimestamp:2025-09-13 01:32:48.472807614 +0000 UTC m=+1.199737981,LastTimestamp:2025-09-13 01:32:48.472807614 +0000 UTC m=+1.199737981,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-12daba8686,}" Sep 13 01:32:48.481064 kubelet[2056]: I0913 01:32:48.481044 2056 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 01:32:48.483100 kubelet[2056]: E0913 01:32:48.483064 2056 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-12daba8686\" not found" Sep 13 01:32:48.483246 kubelet[2056]: I0913 01:32:48.483233 2056 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 01:32:48.483510 kubelet[2056]: I0913 01:32:48.483493 2056 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 01:32:48.483637 kubelet[2056]: I0913 01:32:48.483626 2056 reconciler.go:26] "Reconciler: start to sync state" Sep 13 01:32:48.482000 audit[2068]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.482000 audit[2068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffebf7c250 a2=0 a3=1 items=0 ppid=2056 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 01:32:48.484327 kubelet[2056]: W0913 01:32:48.484275 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:48.484471 kubelet[2056]: E0913 01:32:48.484446 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:48.484742 kubelet[2056]: I0913 01:32:48.484724 2056 factory.go:221] Registration of the systemd container factory successfully Sep 13 01:32:48.483000 audit[2069]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.483000 audit[2069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcdc0c5e0 a2=0 a3=1 items=0 ppid=2056 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.483000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 01:32:48.485047 kubelet[2056]: I0913 01:32:48.484862 2056 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 01:32:48.487267 kubelet[2056]: E0913 01:32:48.487240 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-12daba8686?timeout=10s\": dial tcp 10.200.20.14:6443: connect: connection refused" interval="200ms" Sep 13 01:32:48.487467 kubelet[2056]: I0913 01:32:48.487452 2056 factory.go:221] Registration of the containerd container factory successfully Sep 13 01:32:48.486000 audit[2071]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.486000 audit[2071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdc4e46a0 a2=0 a3=1 items=0 ppid=2056 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.486000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:32:48.488000 audit[2073]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.488000 audit[2073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcdb055d0 a2=0 a3=1 items=0 ppid=2056 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.488000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:32:48.502499 kubelet[2056]: E0913 01:32:48.502461 2056 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 01:32:48.568000 audit[2079]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.568000 audit[2079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff36593d0 a2=0 a3=1 items=0 ppid=2056 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Sep 13 01:32:48.570505 kubelet[2056]: I0913 01:32:48.570474 2056 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 01:32:48.569000 audit[2080]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=2080 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:32:48.569000 audit[2080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc76b5b50 a2=0 a3=1 items=0 ppid=2056 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Sep 13 01:32:48.569000 audit[2081]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.569000 audit[2081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffebc32490 a2=0 a3=1 items=0 ppid=2056 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.569000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 01:32:48.571842 kubelet[2056]: I0913 01:32:48.571819 2056 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 01:32:48.571842 kubelet[2056]: I0913 01:32:48.571844 2056 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 13 01:32:48.571933 kubelet[2056]: I0913 01:32:48.571869 2056 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 01:32:48.571933 kubelet[2056]: I0913 01:32:48.571887 2056 kubelet.go:2382] "Starting kubelet main sync loop" Sep 13 01:32:48.571981 kubelet[2056]: E0913 01:32:48.571925 2056 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 01:32:48.572842 kubelet[2056]: W0913 01:32:48.572820 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:48.572968 kubelet[2056]: E0913 01:32:48.572950 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:48.572000 audit[2083]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2083 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:32:48.572000 audit[2083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffced318c0 a2=0 a3=1 items=0 ppid=2056 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.572000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Sep 13 01:32:48.572000 audit[2082]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.572000 audit[2082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc209ebf0 a2=0 a3=1 items=0 ppid=2056 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 01:32:48.573000 audit[2086]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:32:48.573000 audit[2086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd61210b0 a2=0 a3=1 items=0 ppid=2056 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.573000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 01:32:48.573000 audit[2085]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:32:48.573000 audit[2085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff3bdb7d0 a2=0 a3=1 items=0 ppid=2056 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.573000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Sep 13 01:32:48.574000 audit[2087]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:32:48.574000 audit[2087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd1caa4b0 a2=0 a3=1 items=0 ppid=2056 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.574000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Sep 13 01:32:48.583736 kubelet[2056]: E0913 01:32:48.583703 2056 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-12daba8686\" not found" Sep 13 01:32:48.672114 kubelet[2056]: E0913 01:32:48.672003 2056 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Sep 13 01:32:48.684264 kubelet[2056]: E0913 01:32:48.684225 2056 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-12daba8686\" not found" Sep 13 01:32:48.687794 kubelet[2056]: E0913 01:32:48.687767 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-12daba8686?timeout=10s\": dial tcp 10.200.20.14:6443: connect: connection refused" interval="400ms" Sep 13 01:32:48.785025 kubelet[2056]: E0913 01:32:48.784994 2056 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-12daba8686\" not found" Sep 13 01:32:48.810944 kubelet[2056]: I0913 01:32:48.810925 2056 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 01:32:48.811065 kubelet[2056]: I0913 01:32:48.811053 2056 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 01:32:48.811183 kubelet[2056]: I0913 01:32:48.811173 2056 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:32:48.817225 kubelet[2056]: I0913 01:32:48.817196 2056 policy_none.go:49] "None policy: Start" Sep 13 01:32:48.817383 kubelet[2056]: I0913 01:32:48.817371 2056 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 01:32:48.817444 kubelet[2056]: I0913 01:32:48.817435 2056 state_mem.go:35] "Initializing new in-memory state store" Sep 13 01:32:48.827089 systemd[1]: Created slice kubepods.slice. Sep 13 01:32:48.833287 systemd[1]: Created slice kubepods-burstable.slice. Sep 13 01:32:48.837875 systemd[1]: Created slice kubepods-besteffort.slice. Sep 13 01:32:48.847583 kubelet[2056]: I0913 01:32:48.847550 2056 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 01:32:48.846000 audit[2056]: AVC avc: denied { mac_admin } for pid=2056 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:48.846000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:32:48.846000 audit[2056]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cea900 a1=4000539a70 a2=4000cea8d0 a3=25 items=0 ppid=1 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:48.846000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:32:48.848086 kubelet[2056]: I0913 01:32:48.848063 2056 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 01:32:48.848268 kubelet[2056]: I0913 01:32:48.848253 2056 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 01:32:48.848368 kubelet[2056]: I0913 01:32:48.848333 2056 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 01:32:48.850954 kubelet[2056]: I0913 01:32:48.849775 2056 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 01:32:48.855079 kubelet[2056]: E0913 01:32:48.855051 2056 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 01:32:48.855190 kubelet[2056]: E0913 01:32:48.855093 2056 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-12daba8686\" not found" Sep 13 01:32:48.880243 systemd[1]: Created slice kubepods-burstable-pod9556d2dbf8c4f60d156dd0a589753125.slice. Sep 13 01:32:48.885351 kubelet[2056]: I0913 01:32:48.885314 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.885581 kubelet[2056]: I0913 01:32:48.885543 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.885718 kubelet[2056]: I0913 01:32:48.885702 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9556d2dbf8c4f60d156dd0a589753125-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-12daba8686\" (UID: \"9556d2dbf8c4f60d156dd0a589753125\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.885840 kubelet[2056]: I0913 01:32:48.885827 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.885957 kubelet[2056]: I0913 01:32:48.885942 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d5c726a9ca7364b8ac43aa6c2185c25c-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-12daba8686\" (UID: \"d5c726a9ca7364b8ac43aa6c2185c25c\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.886072 kubelet[2056]: I0913 01:32:48.886058 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.886197 kubelet[2056]: I0913 01:32:48.886183 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.886309 kubelet[2056]: I0913 01:32:48.886296 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d5c726a9ca7364b8ac43aa6c2185c25c-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-12daba8686\" (UID: \"d5c726a9ca7364b8ac43aa6c2185c25c\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.886414 kubelet[2056]: I0913 01:32:48.886401 2056 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d5c726a9ca7364b8ac43aa6c2185c25c-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-12daba8686\" (UID: \"d5c726a9ca7364b8ac43aa6c2185c25c\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.893457 kubelet[2056]: E0913 01:32:48.893428 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.896435 systemd[1]: Created slice kubepods-burstable-podd5c726a9ca7364b8ac43aa6c2185c25c.slice. Sep 13 01:32:48.899036 kubelet[2056]: E0913 01:32:48.899017 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.900189 systemd[1]: Created slice kubepods-burstable-podce2ffa72f0661515378eaf2a1b893953.slice. Sep 13 01:32:48.901890 kubelet[2056]: E0913 01:32:48.901872 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.950191 kubelet[2056]: I0913 01:32:48.950092 2056 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:48.951470 kubelet[2056]: E0913 01:32:48.951444 2056 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.14:6443/api/v1/nodes\": dial tcp 10.200.20.14:6443: connect: connection refused" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:49.088209 kubelet[2056]: E0913 01:32:49.088175 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-12daba8686?timeout=10s\": dial tcp 10.200.20.14:6443: connect: connection refused" interval="800ms" Sep 13 01:32:49.153484 kubelet[2056]: I0913 01:32:49.153457 2056 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:49.153877 kubelet[2056]: E0913 01:32:49.153853 2056 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.14:6443/api/v1/nodes\": dial tcp 10.200.20.14:6443: connect: connection refused" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:49.195422 env[1447]: time="2025-09-13T01:32:49.195139927Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-12daba8686,Uid:9556d2dbf8c4f60d156dd0a589753125,Namespace:kube-system,Attempt:0,}" Sep 13 01:32:49.200371 env[1447]: time="2025-09-13T01:32:49.200286871Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-12daba8686,Uid:d5c726a9ca7364b8ac43aa6c2185c25c,Namespace:kube-system,Attempt:0,}" Sep 13 01:32:49.203574 env[1447]: time="2025-09-13T01:32:49.203391662Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-12daba8686,Uid:ce2ffa72f0661515378eaf2a1b893953,Namespace:kube-system,Attempt:0,}" Sep 13 01:32:49.311824 kubelet[2056]: W0913 01:32:49.311755 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.14:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:49.311977 kubelet[2056]: E0913 01:32:49.311831 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.14:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:49.366647 kubelet[2056]: W0913 01:32:49.366596 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-12daba8686&limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:49.366772 kubelet[2056]: E0913 01:32:49.366672 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-12daba8686&limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:49.555910 kubelet[2056]: I0913 01:32:49.555883 2056 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:49.556603 kubelet[2056]: E0913 01:32:49.556581 2056 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.14:6443/api/v1/nodes\": dial tcp 10.200.20.14:6443: connect: connection refused" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:49.823466 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1549526457.mount: Deactivated successfully. Sep 13 01:32:49.844972 env[1447]: time="2025-09-13T01:32:49.844925867Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.860190 env[1447]: time="2025-09-13T01:32:49.860150901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.863357 env[1447]: time="2025-09-13T01:32:49.863317011Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.866726 env[1447]: time="2025-09-13T01:32:49.866681881Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.876202 env[1447]: time="2025-09-13T01:32:49.876160492Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.879891 env[1447]: time="2025-09-13T01:32:49.879858961Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.883379 env[1447]: time="2025-09-13T01:32:49.883349670Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.888254 env[1447]: time="2025-09-13T01:32:49.888208375Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.888947 kubelet[2056]: E0913 01:32:49.888910 2056 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-12daba8686?timeout=10s\": dial tcp 10.200.20.14:6443: connect: connection refused" interval="1.6s" Sep 13 01:32:49.891214 env[1447]: time="2025-09-13T01:32:49.891179086Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.894045 env[1447]: time="2025-09-13T01:32:49.894004438Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.898868 env[1447]: time="2025-09-13T01:32:49.898829063Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.910798 env[1447]: time="2025-09-13T01:32:49.910760066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:32:49.959287 env[1447]: time="2025-09-13T01:32:49.959208639Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:32:49.959468 env[1447]: time="2025-09-13T01:32:49.959249519Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:32:49.959556 env[1447]: time="2025-09-13T01:32:49.959520238Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:32:49.959871 env[1447]: time="2025-09-13T01:32:49.959810917Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1368f1183ffeb719b84c762205dddc91bba1e798edb586971e37f61e720ab6cb pid=2096 runtime=io.containerd.runc.v2 Sep 13 01:32:49.977416 kubelet[2056]: W0913 01:32:49.977318 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:49.977416 kubelet[2056]: E0913 01:32:49.977383 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:49.989872 systemd[1]: Started cri-containerd-1368f1183ffeb719b84c762205dddc91bba1e798edb586971e37f61e720ab6cb.scope. Sep 13 01:32:49.999285 env[1447]: time="2025-09-13T01:32:49.999218197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:32:49.999436 env[1447]: time="2025-09-13T01:32:49.999260157Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:32:49.999436 env[1447]: time="2025-09-13T01:32:49.999280317Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:32:49.999945 env[1447]: time="2025-09-13T01:32:49.999900235Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:32:50.000059 env[1447]: time="2025-09-13T01:32:50.000037395Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:32:50.000131 env[1447]: time="2025-09-13T01:32:50.000112394Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:32:50.000308 env[1447]: time="2025-09-13T01:32:50.000284154Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c8d87dabe83f5b9a060ad6db3b5511b186c5304254dc6b051738bf517a643661 pid=2138 runtime=io.containerd.runc.v2 Sep 13 01:32:50.002538 env[1447]: time="2025-09-13T01:32:50.002480947Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/536a6e9d891aab298afbdeca835f49c6ac1e7cfcee45ae9530945d2a5aa6fe5c pid=2121 runtime=io.containerd.runc.v2 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit: BPF prog-id=62 op=LOAD Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2096 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363866313138336666656237313962383463373632323035646464 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2096 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363866313138336666656237313962383463373632323035646464 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit: BPF prog-id=63 op=LOAD Sep 13 01:32:50.003000 audit[2106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2096 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363866313138336666656237313962383463373632323035646464 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.003000 audit: BPF prog-id=64 op=LOAD Sep 13 01:32:50.003000 audit[2106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2096 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363866313138336666656237313962383463373632323035646464 Sep 13 01:32:50.004000 audit: BPF prog-id=64 op=UNLOAD Sep 13 01:32:50.004000 audit: BPF prog-id=63 op=UNLOAD Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { perfmon } for pid=2106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit[2106]: AVC avc: denied { bpf } for pid=2106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.004000 audit: BPF prog-id=65 op=LOAD Sep 13 01:32:50.004000 audit[2106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2096 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133363866313138336666656237313962383463373632323035646464 Sep 13 01:32:50.008444 kubelet[2056]: W0913 01:32:50.008351 2056 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.14:6443: connect: connection refused Sep 13 01:32:50.008444 kubelet[2056]: E0913 01:32:50.008413 2056 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.14:6443: connect: connection refused" logger="UnhandledError" Sep 13 01:32:50.014431 systemd[1]: Started cri-containerd-c8d87dabe83f5b9a060ad6db3b5511b186c5304254dc6b051738bf517a643661.scope. Sep 13 01:32:50.032621 systemd[1]: Started cri-containerd-536a6e9d891aab298afbdeca835f49c6ac1e7cfcee45ae9530945d2a5aa6fe5c.scope. Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.042000 audit: BPF prog-id=66 op=LOAD Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2138 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338643837646162653833663562396130363061643664623362353531 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2138 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338643837646162653833663562396130363061643664623362353531 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit: BPF prog-id=67 op=LOAD Sep 13 01:32:50.043000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2138 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338643837646162653833663562396130363061643664623362353531 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit: BPF prog-id=68 op=LOAD Sep 13 01:32:50.043000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2138 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338643837646162653833663562396130363061643664623362353531 Sep 13 01:32:50.043000 audit: BPF prog-id=68 op=UNLOAD Sep 13 01:32:50.043000 audit: BPF prog-id=67 op=UNLOAD Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.044000 audit: BPF prog-id=69 op=LOAD Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2121 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533366136653964383931616162323938616662646563613833356634 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2121 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533366136653964383931616162323938616662646563613833356634 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit: BPF prog-id=70 op=LOAD Sep 13 01:32:50.045000 audit[2156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2121 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533366136653964383931616162323938616662646563613833356634 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit: BPF prog-id=71 op=LOAD Sep 13 01:32:50.045000 audit[2156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2121 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533366136653964383931616162323938616662646563613833356634 Sep 13 01:32:50.045000 audit: BPF prog-id=71 op=UNLOAD Sep 13 01:32:50.045000 audit: BPF prog-id=70 op=UNLOAD Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { perfmon } for pid=2156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit[2156]: AVC avc: denied { bpf } for pid=2156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.045000 audit: BPF prog-id=72 op=LOAD Sep 13 01:32:50.045000 audit[2156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2121 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533366136653964383931616162323938616662646563613833356634 Sep 13 01:32:50.043000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.043000 audit: BPF prog-id=73 op=LOAD Sep 13 01:32:50.049051 env[1447]: time="2025-09-13T01:32:50.049011889Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-12daba8686,Uid:9556d2dbf8c4f60d156dd0a589753125,Namespace:kube-system,Attempt:0,} returns sandbox id \"1368f1183ffeb719b84c762205dddc91bba1e798edb586971e37f61e720ab6cb\"" Sep 13 01:32:50.052145 env[1447]: time="2025-09-13T01:32:50.052105080Z" level=info msg="CreateContainer within sandbox \"1368f1183ffeb719b84c762205dddc91bba1e798edb586971e37f61e720ab6cb\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Sep 13 01:32:50.043000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2138 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338643837646162653833663562396130363061643664623362353531 Sep 13 01:32:50.082967 env[1447]: time="2025-09-13T01:32:50.081127354Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-12daba8686,Uid:d5c726a9ca7364b8ac43aa6c2185c25c,Namespace:kube-system,Attempt:0,} returns sandbox id \"536a6e9d891aab298afbdeca835f49c6ac1e7cfcee45ae9530945d2a5aa6fe5c\"" Sep 13 01:32:50.086983 env[1447]: time="2025-09-13T01:32:50.086545138Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-12daba8686,Uid:ce2ffa72f0661515378eaf2a1b893953,Namespace:kube-system,Attempt:0,} returns sandbox id \"c8d87dabe83f5b9a060ad6db3b5511b186c5304254dc6b051738bf517a643661\"" Sep 13 01:32:50.087098 env[1447]: time="2025-09-13T01:32:50.087062376Z" level=info msg="CreateContainer within sandbox \"536a6e9d891aab298afbdeca835f49c6ac1e7cfcee45ae9530945d2a5aa6fe5c\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Sep 13 01:32:50.091940 env[1447]: time="2025-09-13T01:32:50.091907922Z" level=info msg="CreateContainer within sandbox \"c8d87dabe83f5b9a060ad6db3b5511b186c5304254dc6b051738bf517a643661\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Sep 13 01:32:50.093601 env[1447]: time="2025-09-13T01:32:50.093544237Z" level=info msg="CreateContainer within sandbox \"1368f1183ffeb719b84c762205dddc91bba1e798edb586971e37f61e720ab6cb\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"19f4a48478e064c2df0e7f63589f55a70b79caa8922d75e009c106a5ad1710ec\"" Sep 13 01:32:50.094259 env[1447]: time="2025-09-13T01:32:50.094236635Z" level=info msg="StartContainer for \"19f4a48478e064c2df0e7f63589f55a70b79caa8922d75e009c106a5ad1710ec\"" Sep 13 01:32:50.110217 systemd[1]: Started cri-containerd-19f4a48478e064c2df0e7f63589f55a70b79caa8922d75e009c106a5ad1710ec.scope. Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.124000 audit: BPF prog-id=74 op=LOAD Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2096 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139663461343834373865303634633264663065376636333538396635 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2096 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139663461343834373865303634633264663065376636333538396635 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit: BPF prog-id=75 op=LOAD Sep 13 01:32:50.125000 audit[2224]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2096 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139663461343834373865303634633264663065376636333538396635 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit: BPF prog-id=76 op=LOAD Sep 13 01:32:50.125000 audit[2224]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2096 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139663461343834373865303634633264663065376636333538396635 Sep 13 01:32:50.125000 audit: BPF prog-id=76 op=UNLOAD Sep 13 01:32:50.125000 audit: BPF prog-id=75 op=UNLOAD Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { perfmon } for pid=2224 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit[2224]: AVC avc: denied { bpf } for pid=2224 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.125000 audit: BPF prog-id=77 op=LOAD Sep 13 01:32:50.125000 audit[2224]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2096 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139663461343834373865303634633264663065376636333538396635 Sep 13 01:32:50.153331 env[1447]: time="2025-09-13T01:32:50.153286580Z" level=info msg="StartContainer for \"19f4a48478e064c2df0e7f63589f55a70b79caa8922d75e009c106a5ad1710ec\" returns successfully" Sep 13 01:32:50.164021 env[1447]: time="2025-09-13T01:32:50.163976468Z" level=info msg="CreateContainer within sandbox \"c8d87dabe83f5b9a060ad6db3b5511b186c5304254dc6b051738bf517a643661\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"ae64447bb23afd222ba72a557f134780e9f34837fa41ab041c0d43518ae40d6f\"" Sep 13 01:32:50.165746 env[1447]: time="2025-09-13T01:32:50.164626226Z" level=info msg="StartContainer for \"ae64447bb23afd222ba72a557f134780e9f34837fa41ab041c0d43518ae40d6f\"" Sep 13 01:32:50.165746 env[1447]: time="2025-09-13T01:32:50.165691983Z" level=info msg="CreateContainer within sandbox \"536a6e9d891aab298afbdeca835f49c6ac1e7cfcee45ae9530945d2a5aa6fe5c\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"666751b911929d95a6b1a5442183faa93a5e1c755083b13895912ea2156ff881\"" Sep 13 01:32:50.166235 env[1447]: time="2025-09-13T01:32:50.166205942Z" level=info msg="StartContainer for \"666751b911929d95a6b1a5442183faa93a5e1c755083b13895912ea2156ff881\"" Sep 13 01:32:50.182708 systemd[1]: Started cri-containerd-666751b911929d95a6b1a5442183faa93a5e1c755083b13895912ea2156ff881.scope. Sep 13 01:32:50.196373 systemd[1]: Started cri-containerd-ae64447bb23afd222ba72a557f134780e9f34837fa41ab041c0d43518ae40d6f.scope. Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.207000 audit: BPF prog-id=78 op=LOAD Sep 13 01:32:50.208000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.208000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2121 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363735316239313139323964393561366231613534343231383366 Sep 13 01:32:50.208000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.208000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2121 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363735316239313139323964393561366231613534343231383366 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit: BPF prog-id=79 op=LOAD Sep 13 01:32:50.209000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2121 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363735316239313139323964393561366231613534343231383366 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.209000 audit: BPF prog-id=80 op=LOAD Sep 13 01:32:50.209000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2121 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363735316239313139323964393561366231613534343231383366 Sep 13 01:32:50.210000 audit: BPF prog-id=80 op=UNLOAD Sep 13 01:32:50.210000 audit: BPF prog-id=79 op=UNLOAD Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { perfmon } for pid=2267 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit[2267]: AVC avc: denied { bpf } for pid=2267 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.210000 audit: BPF prog-id=81 op=LOAD Sep 13 01:32:50.210000 audit[2267]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2121 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363735316239313139323964393561366231613534343231383366 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.238000 audit: BPF prog-id=82 op=LOAD Sep 13 01:32:50.239000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.239000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2138 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363434343762623233616664323232626137326135353766313334 Sep 13 01:32:50.239000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.239000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2138 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363434343762623233616664323232626137326135353766313334 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit: BPF prog-id=83 op=LOAD Sep 13 01:32:50.240000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2138 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363434343762623233616664323232626137326135353766313334 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit: BPF prog-id=84 op=LOAD Sep 13 01:32:50.240000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2138 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363434343762623233616664323232626137326135353766313334 Sep 13 01:32:50.240000 audit: BPF prog-id=84 op=UNLOAD Sep 13 01:32:50.240000 audit: BPF prog-id=83 op=UNLOAD Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { perfmon } for pid=2268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit[2268]: AVC avc: denied { bpf } for pid=2268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:50.240000 audit: BPF prog-id=85 op=LOAD Sep 13 01:32:50.240000 audit[2268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2138 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:50.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363434343762623233616664323232626137326135353766313334 Sep 13 01:32:50.246296 env[1447]: time="2025-09-13T01:32:50.246253504Z" level=info msg="StartContainer for \"666751b911929d95a6b1a5442183faa93a5e1c755083b13895912ea2156ff881\" returns successfully" Sep 13 01:32:50.267375 env[1447]: time="2025-09-13T01:32:50.267327722Z" level=info msg="StartContainer for \"ae64447bb23afd222ba72a557f134780e9f34837fa41ab041c0d43518ae40d6f\" returns successfully" Sep 13 01:32:50.359761 kubelet[2056]: I0913 01:32:50.359208 2056 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:50.578940 kubelet[2056]: E0913 01:32:50.578910 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:50.583907 kubelet[2056]: E0913 01:32:50.583880 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:50.589056 kubelet[2056]: E0913 01:32:50.589027 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:51.451000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:51.451000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40007ca6f0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:51.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:51.451000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:51.451000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003d6140 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:51.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:51.589187 kubelet[2056]: E0913 01:32:51.589158 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:51.589957 kubelet[2056]: E0913 01:32:51.589834 2056 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:51.923000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:51.931546 kernel: kauditd_printk_skb: 565 callbacks suppressed Sep 13 01:32:51.931677 kernel: audit: type=1400 audit(1757727171.923:574): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:51.923000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=400784a840 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:51.988743 kernel: audit: type=1300 audit(1757727171.923:574): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=400784a840 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:51.988870 kernel: audit: type=1327 audit(1757727171.923:574): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:51.923000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:51.987000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:52.042123 kernel: audit: type=1400 audit(1757727171.987:575): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:51.987000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400784acf0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:52.076467 kernel: audit: type=1300 audit(1757727171.987:575): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400784acf0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:51.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:52.102064 kernel: audit: type=1327 audit(1757727171.987:575): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:51.998000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:52.128566 kernel: audit: type=1400 audit(1757727171.998:576): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:51.998000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4006b8e100 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:52.162534 kernel: audit: type=1300 audit(1757727171.998:576): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4006b8e100 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:51.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:52.190051 kernel: audit: type=1327 audit(1757727171.998:576): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:51.998000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:52.213924 kernel: audit: type=1400 audit(1757727171.998:577): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:51.998000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=4006b480c0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:51.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:52.018000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:52.018000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40047d78a0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:52.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:52.018000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:52.018000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4006480990 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:32:52.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:32:52.379946 kubelet[2056]: E0913 01:32:52.379898 2056 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-12daba8686\" not found" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.455161 kubelet[2056]: I0913 01:32:52.455066 2056 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.455331 kubelet[2056]: E0913 01:32:52.455317 2056 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ci-3510.3.8-n-12daba8686\": node \"ci-3510.3.8-n-12daba8686\" not found" Sep 13 01:32:52.467905 kubelet[2056]: I0913 01:32:52.467871 2056 apiserver.go:52] "Watching apiserver" Sep 13 01:32:52.484577 kubelet[2056]: I0913 01:32:52.484530 2056 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 13 01:32:52.487379 kubelet[2056]: I0913 01:32:52.487272 2056 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.506152 kubelet[2056]: E0913 01:32:52.506109 2056 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-12daba8686\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.506152 kubelet[2056]: I0913 01:32:52.506143 2056 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.508889 kubelet[2056]: E0913 01:32:52.508855 2056 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-12daba8686\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.509046 kubelet[2056]: I0913 01:32:52.509033 2056 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.511012 kubelet[2056]: E0913 01:32:52.510980 2056 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.588621 kubelet[2056]: I0913 01:32:52.588576 2056 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:52.591443 kubelet[2056]: E0913 01:32:52.591407 2056 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-12daba8686\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:54.336122 systemd[1]: Reloading. Sep 13 01:32:54.407809 /usr/lib/systemd/system-generators/torcx-generator[2350]: time="2025-09-13T01:32:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Sep 13 01:32:54.408164 /usr/lib/systemd/system-generators/torcx-generator[2350]: time="2025-09-13T01:32:54Z" level=info msg="torcx already run" Sep 13 01:32:54.508185 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Sep 13 01:32:54.508207 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Sep 13 01:32:54.525539 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit: BPF prog-id=86 op=LOAD Sep 13 01:32:54.616000 audit: BPF prog-id=47 op=UNLOAD Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit: BPF prog-id=87 op=LOAD Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.616000 audit: BPF prog-id=88 op=LOAD Sep 13 01:32:54.616000 audit: BPF prog-id=48 op=UNLOAD Sep 13 01:32:54.616000 audit: BPF prog-id=49 op=UNLOAD Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit: BPF prog-id=89 op=LOAD Sep 13 01:32:54.619000 audit: BPF prog-id=50 op=UNLOAD Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit: BPF prog-id=90 op=LOAD Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.619000 audit: BPF prog-id=91 op=LOAD Sep 13 01:32:54.619000 audit: BPF prog-id=51 op=UNLOAD Sep 13 01:32:54.619000 audit: BPF prog-id=52 op=UNLOAD Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit: BPF prog-id=92 op=LOAD Sep 13 01:32:54.620000 audit: BPF prog-id=53 op=UNLOAD Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit: BPF prog-id=93 op=LOAD Sep 13 01:32:54.620000 audit: BPF prog-id=66 op=UNLOAD Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit: BPF prog-id=94 op=LOAD Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.620000 audit: BPF prog-id=95 op=LOAD Sep 13 01:32:54.620000 audit: BPF prog-id=54 op=UNLOAD Sep 13 01:32:54.620000 audit: BPF prog-id=55 op=UNLOAD Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit: BPF prog-id=96 op=LOAD Sep 13 01:32:54.621000 audit: BPF prog-id=74 op=UNLOAD Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit: BPF prog-id=97 op=LOAD Sep 13 01:32:54.622000 audit: BPF prog-id=56 op=UNLOAD Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit: BPF prog-id=98 op=LOAD Sep 13 01:32:54.622000 audit: BPF prog-id=57 op=UNLOAD Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit: BPF prog-id=99 op=LOAD Sep 13 01:32:54.623000 audit: BPF prog-id=58 op=UNLOAD Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit: BPF prog-id=100 op=LOAD Sep 13 01:32:54.623000 audit: BPF prog-id=82 op=UNLOAD Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit: BPF prog-id=101 op=LOAD Sep 13 01:32:54.624000 audit: BPF prog-id=62 op=UNLOAD Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit: BPF prog-id=102 op=LOAD Sep 13 01:32:54.624000 audit: BPF prog-id=59 op=UNLOAD Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit: BPF prog-id=103 op=LOAD Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.624000 audit: BPF prog-id=104 op=LOAD Sep 13 01:32:54.624000 audit: BPF prog-id=60 op=UNLOAD Sep 13 01:32:54.624000 audit: BPF prog-id=61 op=UNLOAD Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.626000 audit: BPF prog-id=105 op=LOAD Sep 13 01:32:54.626000 audit: BPF prog-id=78 op=UNLOAD Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.628000 audit: BPF prog-id=106 op=LOAD Sep 13 01:32:54.628000 audit: BPF prog-id=69 op=UNLOAD Sep 13 01:32:54.652160 systemd[1]: Stopping kubelet.service... Sep 13 01:32:54.674070 systemd[1]: kubelet.service: Deactivated successfully. Sep 13 01:32:54.674266 systemd[1]: Stopped kubelet.service. Sep 13 01:32:54.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:54.674325 systemd[1]: kubelet.service: Consumed 1.421s CPU time. Sep 13 01:32:54.676544 systemd[1]: Starting kubelet.service... Sep 13 01:32:54.772084 systemd[1]: Started kubelet.service. Sep 13 01:32:54.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:32:54.915926 kubelet[2414]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:32:54.915926 kubelet[2414]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Sep 13 01:32:54.915926 kubelet[2414]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Sep 13 01:32:54.920986 kubelet[2414]: I0913 01:32:54.920924 2414 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Sep 13 01:32:54.930405 kubelet[2414]: I0913 01:32:54.930367 2414 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Sep 13 01:32:54.930621 kubelet[2414]: I0913 01:32:54.930610 2414 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Sep 13 01:32:54.930992 kubelet[2414]: I0913 01:32:54.930976 2414 server.go:954] "Client rotation is on, will bootstrap in background" Sep 13 01:32:54.932266 kubelet[2414]: I0913 01:32:54.932248 2414 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Sep 13 01:32:54.934505 kubelet[2414]: I0913 01:32:54.934484 2414 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Sep 13 01:32:54.938804 kubelet[2414]: E0913 01:32:54.938750 2414 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Sep 13 01:32:54.938967 kubelet[2414]: I0913 01:32:54.938954 2414 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Sep 13 01:32:54.943339 kubelet[2414]: I0913 01:32:54.943310 2414 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Sep 13 01:32:54.943792 kubelet[2414]: I0913 01:32:54.943765 2414 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Sep 13 01:32:54.944177 kubelet[2414]: I0913 01:32:54.943875 2414 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-12daba8686","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Sep 13 01:32:54.944329 kubelet[2414]: I0913 01:32:54.944315 2414 topology_manager.go:138] "Creating topology manager with none policy" Sep 13 01:32:54.944388 kubelet[2414]: I0913 01:32:54.944377 2414 container_manager_linux.go:304] "Creating device plugin manager" Sep 13 01:32:54.944496 kubelet[2414]: I0913 01:32:54.944486 2414 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:32:54.944710 kubelet[2414]: I0913 01:32:54.944696 2414 kubelet.go:446] "Attempting to sync node with API server" Sep 13 01:32:54.944779 kubelet[2414]: I0913 01:32:54.944769 2414 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Sep 13 01:32:54.944844 kubelet[2414]: I0913 01:32:54.944835 2414 kubelet.go:352] "Adding apiserver pod source" Sep 13 01:32:54.944915 kubelet[2414]: I0913 01:32:54.944905 2414 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Sep 13 01:32:54.950312 kubelet[2414]: I0913 01:32:54.950255 2414 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Sep 13 01:32:54.950936 kubelet[2414]: I0913 01:32:54.950920 2414 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Sep 13 01:32:54.951434 kubelet[2414]: I0913 01:32:54.951420 2414 watchdog_linux.go:99] "Systemd watchdog is not enabled" Sep 13 01:32:54.951529 kubelet[2414]: I0913 01:32:54.951520 2414 server.go:1287] "Started kubelet" Sep 13 01:32:54.952000 audit[2414]: AVC avc: denied { mac_admin } for pid=2414 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.952000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:32:54.952000 audit[2414]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000054780 a1=40004cdba8 a2=4000399f80 a3=25 items=0 ppid=1 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:54.952000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:32:54.954374 kubelet[2414]: I0913 01:32:54.954353 2414 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Sep 13 01:32:54.952000 audit[2414]: AVC avc: denied { mac_admin } for pid=2414 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:54.952000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:32:54.952000 audit[2414]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40000eb940 a1=40004cdbc0 a2=4000054900 a3=25 items=0 ppid=1 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:54.952000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:32:54.954628 kubelet[2414]: I0913 01:32:54.954610 2414 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Sep 13 01:32:54.954739 kubelet[2414]: I0913 01:32:54.954729 2414 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Sep 13 01:32:54.972886 kubelet[2414]: I0913 01:32:54.972843 2414 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Sep 13 01:32:54.973894 kubelet[2414]: I0913 01:32:54.973877 2414 server.go:479] "Adding debug handlers to kubelet server" Sep 13 01:32:54.974865 kubelet[2414]: I0913 01:32:54.974821 2414 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Sep 13 01:32:54.975097 kubelet[2414]: I0913 01:32:54.975085 2414 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Sep 13 01:32:54.975355 kubelet[2414]: I0913 01:32:54.975341 2414 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Sep 13 01:32:54.976783 kubelet[2414]: I0913 01:32:54.976765 2414 volume_manager.go:297] "Starting Kubelet Volume Manager" Sep 13 01:32:54.985702 kubelet[2414]: E0913 01:32:54.985648 2414 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-12daba8686\" not found" Sep 13 01:32:54.986562 kubelet[2414]: I0913 01:32:54.986544 2414 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Sep 13 01:32:54.986795 kubelet[2414]: I0913 01:32:54.986783 2414 reconciler.go:26] "Reconciler: start to sync state" Sep 13 01:32:54.994528 kubelet[2414]: I0913 01:32:54.992575 2414 factory.go:221] Registration of the systemd container factory successfully Sep 13 01:32:54.994528 kubelet[2414]: I0913 01:32:54.992726 2414 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Sep 13 01:32:54.997118 kubelet[2414]: E0913 01:32:54.995398 2414 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Sep 13 01:32:54.997118 kubelet[2414]: I0913 01:32:54.996339 2414 factory.go:221] Registration of the containerd container factory successfully Sep 13 01:32:54.997876 kubelet[2414]: I0913 01:32:54.997845 2414 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Sep 13 01:32:54.999525 kubelet[2414]: I0913 01:32:54.999506 2414 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Sep 13 01:32:54.999629 kubelet[2414]: I0913 01:32:54.999618 2414 status_manager.go:227] "Starting to sync pod status with apiserver" Sep 13 01:32:54.999735 kubelet[2414]: I0913 01:32:54.999724 2414 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Sep 13 01:32:54.999794 kubelet[2414]: I0913 01:32:54.999786 2414 kubelet.go:2382] "Starting kubelet main sync loop" Sep 13 01:32:54.999886 kubelet[2414]: E0913 01:32:54.999871 2414 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Sep 13 01:32:55.048801 kubelet[2414]: I0913 01:32:55.048775 2414 cpu_manager.go:221] "Starting CPU manager" policy="none" Sep 13 01:32:55.048954 kubelet[2414]: I0913 01:32:55.048941 2414 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Sep 13 01:32:55.049039 kubelet[2414]: I0913 01:32:55.049030 2414 state_mem.go:36] "Initialized new in-memory state store" Sep 13 01:32:55.049262 kubelet[2414]: I0913 01:32:55.049249 2414 state_mem.go:88] "Updated default CPUSet" cpuSet="" Sep 13 01:32:55.049343 kubelet[2414]: I0913 01:32:55.049318 2414 state_mem.go:96] "Updated CPUSet assignments" assignments={} Sep 13 01:32:55.049398 kubelet[2414]: I0913 01:32:55.049389 2414 policy_none.go:49] "None policy: Start" Sep 13 01:32:55.049450 kubelet[2414]: I0913 01:32:55.049442 2414 memory_manager.go:186] "Starting memorymanager" policy="None" Sep 13 01:32:55.049501 kubelet[2414]: I0913 01:32:55.049493 2414 state_mem.go:35] "Initializing new in-memory state store" Sep 13 01:32:55.049651 kubelet[2414]: I0913 01:32:55.049641 2414 state_mem.go:75] "Updated machine memory state" Sep 13 01:32:55.052981 kubelet[2414]: I0913 01:32:55.052947 2414 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Sep 13 01:32:55.051000 audit[2414]: AVC avc: denied { mac_admin } for pid=2414 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:32:55.051000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Sep 13 01:32:55.051000 audit[2414]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000932930 a1=4000ef45a0 a2=4000932900 a3=25 items=0 ppid=1 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:32:55.051000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Sep 13 01:32:55.053412 kubelet[2414]: I0913 01:32:55.053277 2414 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Sep 13 01:32:55.053448 kubelet[2414]: I0913 01:32:55.053417 2414 eviction_manager.go:189] "Eviction manager: starting control loop" Sep 13 01:32:55.053476 kubelet[2414]: I0913 01:32:55.053428 2414 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Sep 13 01:32:55.053865 kubelet[2414]: I0913 01:32:55.053731 2414 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Sep 13 01:32:55.056024 kubelet[2414]: E0913 01:32:55.055166 2414 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Sep 13 01:32:55.100850 kubelet[2414]: I0913 01:32:55.100810 2414 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.101032 kubelet[2414]: I0913 01:32:55.101020 2414 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.101358 kubelet[2414]: I0913 01:32:55.101342 2414 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.110531 kubelet[2414]: W0913 01:32:55.110502 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 13 01:32:55.122766 kubelet[2414]: W0913 01:32:55.122735 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 13 01:32:55.123273 kubelet[2414]: W0913 01:32:55.123255 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 13 01:32:55.156819 kubelet[2414]: I0913 01:32:55.156788 2414 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.173998 kubelet[2414]: I0913 01:32:55.173901 2414 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.173998 kubelet[2414]: I0913 01:32:55.173999 2414 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.187343 kubelet[2414]: I0913 01:32:55.187312 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9556d2dbf8c4f60d156dd0a589753125-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-12daba8686\" (UID: \"9556d2dbf8c4f60d156dd0a589753125\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.187491 kubelet[2414]: I0913 01:32:55.187476 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d5c726a9ca7364b8ac43aa6c2185c25c-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-12daba8686\" (UID: \"d5c726a9ca7364b8ac43aa6c2185c25c\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.187570 kubelet[2414]: I0913 01:32:55.187558 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.187748 kubelet[2414]: I0913 01:32:55.187732 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.187994 kubelet[2414]: I0913 01:32:55.187980 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.188092 kubelet[2414]: I0913 01:32:55.188080 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d5c726a9ca7364b8ac43aa6c2185c25c-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-12daba8686\" (UID: \"d5c726a9ca7364b8ac43aa6c2185c25c\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.188174 kubelet[2414]: I0913 01:32:55.188160 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d5c726a9ca7364b8ac43aa6c2185c25c-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-12daba8686\" (UID: \"d5c726a9ca7364b8ac43aa6c2185c25c\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.188249 kubelet[2414]: I0913 01:32:55.188237 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.188335 kubelet[2414]: I0913 01:32:55.188314 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ce2ffa72f0661515378eaf2a1b893953-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-12daba8686\" (UID: \"ce2ffa72f0661515378eaf2a1b893953\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" Sep 13 01:32:55.947342 kubelet[2414]: I0913 01:32:55.947302 2414 apiserver.go:52] "Watching apiserver" Sep 13 01:32:55.987145 kubelet[2414]: I0913 01:32:55.987106 2414 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Sep 13 01:32:56.024495 kubelet[2414]: I0913 01:32:56.024454 2414 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:56.026618 kubelet[2414]: I0913 01:32:56.024983 2414 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:56.035352 kubelet[2414]: W0913 01:32:56.035321 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 13 01:32:56.035572 kubelet[2414]: E0913 01:32:56.035555 2414 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-12daba8686\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" Sep 13 01:32:56.036696 kubelet[2414]: W0913 01:32:56.036681 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Sep 13 01:32:56.036835 kubelet[2414]: E0913 01:32:56.036821 2414 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-12daba8686\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" Sep 13 01:32:56.059057 kubelet[2414]: I0913 01:32:56.058995 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-12daba8686" podStartSLOduration=1.05895972 podStartE2EDuration="1.05895972s" podCreationTimestamp="2025-09-13 01:32:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:32:56.05875224 +0000 UTC m=+1.281050589" watchObservedRunningTime="2025-09-13 01:32:56.05895972 +0000 UTC m=+1.281257989" Sep 13 01:32:56.086206 kubelet[2414]: I0913 01:32:56.086145 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-12daba8686" podStartSLOduration=1.086118931 podStartE2EDuration="1.086118931s" podCreationTimestamp="2025-09-13 01:32:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:32:56.071883967 +0000 UTC m=+1.294182276" watchObservedRunningTime="2025-09-13 01:32:56.086118931 +0000 UTC m=+1.308417240" Sep 13 01:32:56.103146 kubelet[2414]: I0913 01:32:56.103092 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-12daba8686" podStartSLOduration=1.103073208 podStartE2EDuration="1.103073208s" podCreationTimestamp="2025-09-13 01:32:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:32:56.086099531 +0000 UTC m=+1.308397840" watchObservedRunningTime="2025-09-13 01:32:56.103073208 +0000 UTC m=+1.325371517" Sep 13 01:32:56.549000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Sep 13 01:32:56.549000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400039d200 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:56.549000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:57.347000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.354868 kernel: kauditd_printk_skb: 269 callbacks suppressed Sep 13 01:32:57.354995 kernel: audit: type=1400 audit(1757727177.347:830): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.347000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a63440 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:57.411705 kernel: audit: type=1300 audit(1757727177.347:830): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a63440 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:57.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:57.438461 kernel: audit: type=1327 audit(1757727177.347:830): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:57.438592 kernel: audit: type=1400 audit(1757727177.347:831): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.347000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.347000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c2b780 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:57.493544 kernel: audit: type=1300 audit(1757727177.347:831): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c2b780 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:57.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:57.518122 kernel: audit: type=1327 audit(1757727177.347:831): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:57.347000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.541419 kernel: audit: type=1400 audit(1757727177.347:832): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.347000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c2b940 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:57.572844 kernel: audit: type=1300 audit(1757727177.347:832): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c2b940 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:57.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:57.598631 kernel: audit: type=1327 audit(1757727177.347:832): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:32:57.598766 kernel: audit: type=1400 audit(1757727177.347:833): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.347000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:32:57.347000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c2bb00 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:32:57.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:33:01.108057 kubelet[2414]: I0913 01:33:01.108013 2414 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Sep 13 01:33:01.108734 env[1447]: time="2025-09-13T01:33:01.108703284Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Sep 13 01:33:01.109161 kubelet[2414]: I0913 01:33:01.109140 2414 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Sep 13 01:33:02.090476 systemd[1]: Created slice kubepods-besteffort-pod317c65e4_9d86_454d_bd51_719dc243837f.slice. Sep 13 01:33:02.221701 systemd[1]: Created slice kubepods-besteffort-poda25f3637_3819_46d2_9308_0d51a8aa2f0c.slice. Sep 13 01:33:02.234553 kubelet[2414]: I0913 01:33:02.234518 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/317c65e4-9d86-454d-bd51-719dc243837f-kube-proxy\") pod \"kube-proxy-8ghqb\" (UID: \"317c65e4-9d86-454d-bd51-719dc243837f\") " pod="kube-system/kube-proxy-8ghqb" Sep 13 01:33:02.234985 kubelet[2414]: I0913 01:33:02.234968 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/317c65e4-9d86-454d-bd51-719dc243837f-xtables-lock\") pod \"kube-proxy-8ghqb\" (UID: \"317c65e4-9d86-454d-bd51-719dc243837f\") " pod="kube-system/kube-proxy-8ghqb" Sep 13 01:33:02.235083 kubelet[2414]: I0913 01:33:02.235069 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/317c65e4-9d86-454d-bd51-719dc243837f-lib-modules\") pod \"kube-proxy-8ghqb\" (UID: \"317c65e4-9d86-454d-bd51-719dc243837f\") " pod="kube-system/kube-proxy-8ghqb" Sep 13 01:33:02.235174 kubelet[2414]: I0913 01:33:02.235161 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-psrbv\" (UniqueName: \"kubernetes.io/projected/317c65e4-9d86-454d-bd51-719dc243837f-kube-api-access-psrbv\") pod \"kube-proxy-8ghqb\" (UID: \"317c65e4-9d86-454d-bd51-719dc243837f\") " pod="kube-system/kube-proxy-8ghqb" Sep 13 01:33:02.335674 kubelet[2414]: I0913 01:33:02.335623 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/a25f3637-3819-46d2-9308-0d51a8aa2f0c-var-lib-calico\") pod \"tigera-operator-755d956888-ttbjw\" (UID: \"a25f3637-3819-46d2-9308-0d51a8aa2f0c\") " pod="tigera-operator/tigera-operator-755d956888-ttbjw" Sep 13 01:33:02.336239 kubelet[2414]: I0913 01:33:02.336205 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-flrkk\" (UniqueName: \"kubernetes.io/projected/a25f3637-3819-46d2-9308-0d51a8aa2f0c-kube-api-access-flrkk\") pod \"tigera-operator-755d956888-ttbjw\" (UID: \"a25f3637-3819-46d2-9308-0d51a8aa2f0c\") " pod="tigera-operator/tigera-operator-755d956888-ttbjw" Sep 13 01:33:02.345793 kubelet[2414]: I0913 01:33:02.345582 2414 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Sep 13 01:33:02.399250 env[1447]: time="2025-09-13T01:33:02.399199488Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8ghqb,Uid:317c65e4-9d86-454d-bd51-719dc243837f,Namespace:kube-system,Attempt:0,}" Sep 13 01:33:02.431518 env[1447]: time="2025-09-13T01:33:02.431443218Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:02.431734 env[1447]: time="2025-09-13T01:33:02.431711258Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:02.431834 env[1447]: time="2025-09-13T01:33:02.431812857Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:02.432120 env[1447]: time="2025-09-13T01:33:02.432080137Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9dc82314e5392bd0aa7f2a02601784f50384a5a490c199dce9dfabc9a76bef7 pid=2466 runtime=io.containerd.runc.v2 Sep 13 01:33:02.459422 systemd[1]: Started cri-containerd-a9dc82314e5392bd0aa7f2a02601784f50384a5a490c199dce9dfabc9a76bef7.scope. Sep 13 01:33:02.477583 kernel: kauditd_printk_skb: 2 callbacks suppressed Sep 13 01:33:02.477717 kernel: audit: type=1400 audit(1757727182.469:834): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.521427 kernel: audit: type=1400 audit(1757727182.469:835): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.521679 kernel: audit: type=1400 audit(1757727182.469:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.544127 env[1447]: time="2025-09-13T01:33:02.544080975Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-ttbjw,Uid:a25f3637-3819-46d2-9308-0d51a8aa2f0c,Namespace:tigera-operator,Attempt:0,}" Sep 13 01:33:02.544667 kernel: audit: type=1400 audit(1757727182.469:837): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.569927 env[1447]: time="2025-09-13T01:33:02.569886879Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8ghqb,Uid:317c65e4-9d86-454d-bd51-719dc243837f,Namespace:kube-system,Attempt:0,} returns sandbox id \"a9dc82314e5392bd0aa7f2a02601784f50384a5a490c199dce9dfabc9a76bef7\"" Sep 13 01:33:02.593305 kernel: audit: type=1400 audit(1757727182.469:838): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.595061 env[1447]: time="2025-09-13T01:33:02.595028625Z" level=info msg="CreateContainer within sandbox \"a9dc82314e5392bd0aa7f2a02601784f50384a5a490c199dce9dfabc9a76bef7\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Sep 13 01:33:02.615858 kernel: audit: type=1400 audit(1757727182.469:839): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.616001 kernel: audit: type=1400 audit(1757727182.469:840): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.660147 kernel: audit: type=1400 audit(1757727182.469:841): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.660228 kernel: audit: type=1400 audit(1757727182.469:842): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.706373 kernel: audit: type=1400 audit(1757727182.475:843): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.475000 audit: BPF prog-id=107 op=LOAD Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2466 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139646338323331346535333932626430616137663261303236303137 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2466 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139646338323331346535333932626430616137663261303236303137 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit: BPF prog-id=108 op=LOAD Sep 13 01:33:02.496000 audit[2476]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2466 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139646338323331346535333932626430616137663261303236303137 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit: BPF prog-id=109 op=LOAD Sep 13 01:33:02.496000 audit[2476]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2466 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139646338323331346535333932626430616137663261303236303137 Sep 13 01:33:02.496000 audit: BPF prog-id=109 op=UNLOAD Sep 13 01:33:02.496000 audit: BPF prog-id=108 op=UNLOAD Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { perfmon } for pid=2476 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit[2476]: AVC avc: denied { bpf } for pid=2476 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.496000 audit: BPF prog-id=110 op=LOAD Sep 13 01:33:02.496000 audit[2476]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2466 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139646338323331346535333932626430616137663261303236303137 Sep 13 01:33:02.724234 env[1447]: time="2025-09-13T01:33:02.724145306Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:02.724424 env[1447]: time="2025-09-13T01:33:02.724401665Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:02.724514 env[1447]: time="2025-09-13T01:33:02.724494585Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:02.724847 env[1447]: time="2025-09-13T01:33:02.724797745Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6d3fb441c66e0eb23afa4e40db66e51b03013afb0df0b7c0b86022607b3cde6c pid=2508 runtime=io.containerd.runc.v2 Sep 13 01:33:02.740414 systemd[1]: Started cri-containerd-6d3fb441c66e0eb23afa4e40db66e51b03013afb0df0b7c0b86022607b3cde6c.scope. Sep 13 01:33:02.749105 env[1447]: time="2025-09-13T01:33:02.749045292Z" level=info msg="CreateContainer within sandbox \"a9dc82314e5392bd0aa7f2a02601784f50384a5a490c199dce9dfabc9a76bef7\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"fc498cfaf9cb6e9109de06c110d8c13122db71d2fab6828bd00b7b9442b6edd6\"" Sep 13 01:33:02.749929 env[1447]: time="2025-09-13T01:33:02.749900330Z" level=info msg="StartContainer for \"fc498cfaf9cb6e9109de06c110d8c13122db71d2fab6828bd00b7b9442b6edd6\"" Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.761000 audit: BPF prog-id=111 op=LOAD Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664336662343431633636653065623233616661346534306462363665 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664336662343431633636653065623233616661346534306462363665 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.765000 audit: BPF prog-id=112 op=LOAD Sep 13 01:33:02.765000 audit[2519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664336662343431633636653065623233616661346534306462363665 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit: BPF prog-id=113 op=LOAD Sep 13 01:33:02.766000 audit[2519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664336662343431633636653065623233616661346534306462363665 Sep 13 01:33:02.766000 audit: BPF prog-id=113 op=UNLOAD Sep 13 01:33:02.766000 audit: BPF prog-id=112 op=UNLOAD Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { perfmon } for pid=2519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit[2519]: AVC avc: denied { bpf } for pid=2519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.766000 audit: BPF prog-id=114 op=LOAD Sep 13 01:33:02.766000 audit[2519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2508 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664336662343431633636653065623233616661346534306462363665 Sep 13 01:33:02.792211 systemd[1]: Started cri-containerd-fc498cfaf9cb6e9109de06c110d8c13122db71d2fab6828bd00b7b9442b6edd6.scope. Sep 13 01:33:02.800096 env[1447]: time="2025-09-13T01:33:02.800049302Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-755d956888-ttbjw,Uid:a25f3637-3819-46d2-9308-0d51a8aa2f0c,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"6d3fb441c66e0eb23afa4e40db66e51b03013afb0df0b7c0b86022607b3cde6c\"" Sep 13 01:33:02.803203 env[1447]: time="2025-09-13T01:33:02.802157818Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\"" Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2466 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663343938636661663963623665393130396465303663313130643863 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.813000 audit: BPF prog-id=115 op=LOAD Sep 13 01:33:02.813000 audit[2541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2466 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663343938636661663963623665393130396465303663313130643863 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit: BPF prog-id=116 op=LOAD Sep 13 01:33:02.814000 audit[2541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2466 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663343938636661663963623665393130396465303663313130643863 Sep 13 01:33:02.814000 audit: BPF prog-id=116 op=UNLOAD Sep 13 01:33:02.814000 audit: BPF prog-id=115 op=UNLOAD Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:02.814000 audit: BPF prog-id=117 op=LOAD Sep 13 01:33:02.814000 audit[2541]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2466 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663343938636661663963623665393130396465303663313130643863 Sep 13 01:33:02.837743 env[1447]: time="2025-09-13T01:33:02.837580421Z" level=info msg="StartContainer for \"fc498cfaf9cb6e9109de06c110d8c13122db71d2fab6828bd00b7b9442b6edd6\" returns successfully" Sep 13 01:33:02.976000 audit[2607]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:02.976000 audit[2607]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe9eccb10 a2=0 a3=1 items=0 ppid=2558 pid=2607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 01:33:02.977000 audit[2608]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2608 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:02.977000 audit[2608]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff0eb85a0 a2=0 a3=1 items=0 ppid=2558 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.977000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Sep 13 01:33:02.978000 audit[2611]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2611 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:02.978000 audit[2611]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1f53040 a2=0 a3=1 items=0 ppid=2558 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 01:33:02.979000 audit[2612]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:02.979000 audit[2612]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdae0e280 a2=0 a3=1 items=0 ppid=2558 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.979000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Sep 13 01:33:02.982000 audit[2613]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_chain pid=2613 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:02.982000 audit[2613]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd8fe2bd0 a2=0 a3=1 items=0 ppid=2558 pid=2613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.982000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 01:33:02.983000 audit[2614]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2614 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:02.983000 audit[2614]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca11fb10 a2=0 a3=1 items=0 ppid=2558 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:02.983000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Sep 13 01:33:03.071000 audit[2615]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.071000 audit[2615]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc27eb130 a2=0 a3=1 items=0 ppid=2558 pid=2615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 01:33:03.073000 audit[2617]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2617 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.073000 audit[2617]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc1568730 a2=0 a3=1 items=0 ppid=2558 pid=2617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Sep 13 01:33:03.076000 audit[2620]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.076000 audit[2620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc24bb720 a2=0 a3=1 items=0 ppid=2558 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.076000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Sep 13 01:33:03.077000 audit[2621]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.077000 audit[2621]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3db6400 a2=0 a3=1 items=0 ppid=2558 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 01:33:03.080000 audit[2623]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.080000 audit[2623]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff7e74520 a2=0 a3=1 items=0 ppid=2558 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.080000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 01:33:03.081000 audit[2624]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.081000 audit[2624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff019e000 a2=0 a3=1 items=0 ppid=2558 pid=2624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.081000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 01:33:03.086000 audit[2626]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.086000 audit[2626]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff0517e10 a2=0 a3=1 items=0 ppid=2558 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.086000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 01:33:03.089000 audit[2629]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.089000 audit[2629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd5012340 a2=0 a3=1 items=0 ppid=2558 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.089000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Sep 13 01:33:03.090000 audit[2630]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.090000 audit[2630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed460a10 a2=0 a3=1 items=0 ppid=2558 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.090000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 01:33:03.093000 audit[2632]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.093000 audit[2632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff9418c40 a2=0 a3=1 items=0 ppid=2558 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 01:33:03.094000 audit[2633]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.094000 audit[2633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9f8d760 a2=0 a3=1 items=0 ppid=2558 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 01:33:03.096000 audit[2635]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.096000 audit[2635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe6c2a410 a2=0 a3=1 items=0 ppid=2558 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 01:33:03.099000 audit[2638]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.099000 audit[2638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffd238960 a2=0 a3=1 items=0 ppid=2558 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 01:33:03.103000 audit[2641]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.103000 audit[2641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdf555120 a2=0 a3=1 items=0 ppid=2558 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 01:33:03.105000 audit[2642]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.105000 audit[2642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff8ec4d10 a2=0 a3=1 items=0 ppid=2558 pid=2642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.105000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 01:33:03.107000 audit[2644]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.107000 audit[2644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffffc89dc40 a2=0 a3=1 items=0 ppid=2558 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:33:03.110000 audit[2647]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.110000 audit[2647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcfd7f490 a2=0 a3=1 items=0 ppid=2558 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:33:03.111000 audit[2648]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.111000 audit[2648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1fd6590 a2=0 a3=1 items=0 ppid=2558 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.111000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 01:33:03.113000 audit[2650]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 13 01:33:03.113000 audit[2650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff4ea38f0 a2=0 a3=1 items=0 ppid=2558 pid=2650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 01:33:03.266000 audit[2656]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2656 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:03.266000 audit[2656]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc8eda130 a2=0 a3=1 items=0 ppid=2558 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:03.307000 audit[2656]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2656 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:03.307000 audit[2656]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffc8eda130 a2=0 a3=1 items=0 ppid=2558 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.307000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:03.309000 audit[2661]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2661 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.309000 audit[2661]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff1caf7c0 a2=0 a3=1 items=0 ppid=2558 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.309000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Sep 13 01:33:03.311000 audit[2663]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2663 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.311000 audit[2663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe2185a40 a2=0 a3=1 items=0 ppid=2558 pid=2663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.311000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Sep 13 01:33:03.315000 audit[2666]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.315000 audit[2666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe93d6de0 a2=0 a3=1 items=0 ppid=2558 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.315000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Sep 13 01:33:03.316000 audit[2667]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.316000 audit[2667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe69f4a0 a2=0 a3=1 items=0 ppid=2558 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.316000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Sep 13 01:33:03.319000 audit[2669]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2669 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.319000 audit[2669]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffe791fc0 a2=0 a3=1 items=0 ppid=2558 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.319000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Sep 13 01:33:03.320000 audit[2670]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2670 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.320000 audit[2670]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc7e2fef0 a2=0 a3=1 items=0 ppid=2558 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.320000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Sep 13 01:33:03.322000 audit[2672]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2672 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.322000 audit[2672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffc91c5a0 a2=0 a3=1 items=0 ppid=2558 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.322000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Sep 13 01:33:03.325000 audit[2675]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.325000 audit[2675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffdc78eca0 a2=0 a3=1 items=0 ppid=2558 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.325000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Sep 13 01:33:03.326000 audit[2676]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2676 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.326000 audit[2676]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9ce6d70 a2=0 a3=1 items=0 ppid=2558 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.326000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Sep 13 01:33:03.328000 audit[2678]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2678 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.328000 audit[2678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd5bf97d0 a2=0 a3=1 items=0 ppid=2558 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.328000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Sep 13 01:33:03.329000 audit[2679]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2679 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.329000 audit[2679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffc9b51b0 a2=0 a3=1 items=0 ppid=2558 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.329000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Sep 13 01:33:03.331000 audit[2681]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2681 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.331000 audit[2681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff0229a90 a2=0 a3=1 items=0 ppid=2558 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Sep 13 01:33:03.335000 audit[2684]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2684 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.335000 audit[2684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdf383850 a2=0 a3=1 items=0 ppid=2558 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Sep 13 01:33:03.338000 audit[2687]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2687 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.338000 audit[2687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff76471e0 a2=0 a3=1 items=0 ppid=2558 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.338000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Sep 13 01:33:03.339000 audit[2688]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2688 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.339000 audit[2688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc71fd470 a2=0 a3=1 items=0 ppid=2558 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.339000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Sep 13 01:33:03.341000 audit[2690]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2690 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.341000 audit[2690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffda219010 a2=0 a3=1 items=0 ppid=2558 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:33:03.345000 audit[2693]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2693 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.345000 audit[2693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffeefa48e0 a2=0 a3=1 items=0 ppid=2558 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.345000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Sep 13 01:33:03.346000 audit[2694]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.346000 audit[2694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe69a450 a2=0 a3=1 items=0 ppid=2558 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.346000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Sep 13 01:33:03.353000 audit[2696]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2696 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.353000 audit[2696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe4315840 a2=0 a3=1 items=0 ppid=2558 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Sep 13 01:33:03.354000 audit[2697]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2697 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.354000 audit[2697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee4918d0 a2=0 a3=1 items=0 ppid=2558 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.354000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Sep 13 01:33:03.356000 audit[2699]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2699 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.356000 audit[2699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc90106d0 a2=0 a3=1 items=0 ppid=2558 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.356000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:33:03.359000 audit[2702]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 13 01:33:03.359000 audit[2702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe64aabf0 a2=0 a3=1 items=0 ppid=2558 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.359000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Sep 13 01:33:03.365000 audit[2704]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2704 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 01:33:03.365000 audit[2704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffffbc0b3e0 a2=0 a3=1 items=0 ppid=2558 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.365000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:03.366000 audit[2704]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Sep 13 01:33:03.366000 audit[2704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffffbc0b3e0 a2=0 a3=1 items=0 ppid=2558 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:03.366000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:03.946998 kubelet[2414]: I0913 01:33:03.946934 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-8ghqb" podStartSLOduration=1.946916117 podStartE2EDuration="1.946916117s" podCreationTimestamp="2025-09-13 01:33:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:33:03.050803243 +0000 UTC m=+8.273101552" watchObservedRunningTime="2025-09-13 01:33:03.946916117 +0000 UTC m=+9.169214426" Sep 13 01:33:04.752780 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2202614236.mount: Deactivated successfully. Sep 13 01:33:05.645307 env[1447]: time="2025-09-13T01:33:05.645268821Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:05.654721 env[1447]: time="2025-09-13T01:33:05.654675362Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:05.658931 env[1447]: time="2025-09-13T01:33:05.658862594Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:05.663981 env[1447]: time="2025-09-13T01:33:05.663943623Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:00a7a9b62f9b9a4e0856128b078539783b8352b07f707bff595cb604cc580f6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:05.664374 env[1447]: time="2025-09-13T01:33:05.664345783Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.6\" returns image reference \"sha256:dd2e197838b00861b08ae5f480dfbfb9a519722e35ced99346315722309cbe9f\"" Sep 13 01:33:05.667911 env[1447]: time="2025-09-13T01:33:05.667865936Z" level=info msg="CreateContainer within sandbox \"6d3fb441c66e0eb23afa4e40db66e51b03013afb0df0b7c0b86022607b3cde6c\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Sep 13 01:33:05.695127 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4281422864.mount: Deactivated successfully. Sep 13 01:33:05.709491 env[1447]: time="2025-09-13T01:33:05.709445932Z" level=info msg="CreateContainer within sandbox \"6d3fb441c66e0eb23afa4e40db66e51b03013afb0df0b7c0b86022607b3cde6c\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"6e89ff7127c236ffebbc3d91ca4a436c8cb2a9dea65b13d4f77248eea7718f71\"" Sep 13 01:33:05.710483 env[1447]: time="2025-09-13T01:33:05.710440210Z" level=info msg="StartContainer for \"6e89ff7127c236ffebbc3d91ca4a436c8cb2a9dea65b13d4f77248eea7718f71\"" Sep 13 01:33:05.729773 systemd[1]: Started cri-containerd-6e89ff7127c236ffebbc3d91ca4a436c8cb2a9dea65b13d4f77248eea7718f71.scope. Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.743000 audit: BPF prog-id=118 op=LOAD Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2508 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:05.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665383966663731323763323336666665626263336439316361346134 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2508 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:05.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665383966663731323763323336666665626263336439316361346134 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit: BPF prog-id=119 op=LOAD Sep 13 01:33:05.745000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2508 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:05.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665383966663731323763323336666665626263336439316361346134 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.745000 audit: BPF prog-id=120 op=LOAD Sep 13 01:33:05.745000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2508 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:05.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665383966663731323763323336666665626263336439316361346134 Sep 13 01:33:05.745000 audit: BPF prog-id=120 op=UNLOAD Sep 13 01:33:05.745000 audit: BPF prog-id=119 op=UNLOAD Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:05.746000 audit: BPF prog-id=121 op=LOAD Sep 13 01:33:05.746000 audit[2712]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2508 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:05.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665383966663731323763323336666665626263336439316361346134 Sep 13 01:33:05.770549 env[1447]: time="2025-09-13T01:33:05.770496050Z" level=info msg="StartContainer for \"6e89ff7127c236ffebbc3d91ca4a436c8cb2a9dea65b13d4f77248eea7718f71\" returns successfully" Sep 13 01:33:06.257594 kubelet[2414]: I0913 01:33:06.257341 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-755d956888-ttbjw" podStartSLOduration=1.393276607 podStartE2EDuration="4.257323208s" podCreationTimestamp="2025-09-13 01:33:02 +0000 UTC" firstStartedPulling="2025-09-13 01:33:02.80110806 +0000 UTC m=+8.023406369" lastFinishedPulling="2025-09-13 01:33:05.665154701 +0000 UTC m=+10.887452970" observedRunningTime="2025-09-13 01:33:06.057078639 +0000 UTC m=+11.279376948" watchObservedRunningTime="2025-09-13 01:33:06.257323208 +0000 UTC m=+11.479621517" Sep 13 01:33:11.591011 sudo[1760]: pam_unix(sudo:session): session closed for user root Sep 13 01:33:11.589000 audit[1760]: USER_END pid=1760 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:33:11.596599 kernel: kauditd_printk_skb: 357 callbacks suppressed Sep 13 01:33:11.596726 kernel: audit: type=1106 audit(1757727191.589:945): pid=1760 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:33:11.589000 audit[1760]: CRED_DISP pid=1760 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:33:11.649322 kernel: audit: type=1104 audit(1757727191.589:946): pid=1760 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 13 01:33:11.689584 sshd[1757]: pam_unix(sshd:session): session closed for user core Sep 13 01:33:11.690000 audit[1757]: USER_END pid=1757 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:33:11.718214 systemd[1]: sshd@6-10.200.20.14:22-10.200.16.10:43808.service: Deactivated successfully. Sep 13 01:33:11.718937 systemd[1]: session-9.scope: Deactivated successfully. Sep 13 01:33:11.719094 systemd[1]: session-9.scope: Consumed 6.643s CPU time. Sep 13 01:33:11.720303 systemd-logind[1434]: Session 9 logged out. Waiting for processes to exit. Sep 13 01:33:11.721089 systemd-logind[1434]: Removed session 9. Sep 13 01:33:11.690000 audit[1757]: CRED_DISP pid=1757 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:33:11.742608 kernel: audit: type=1106 audit(1757727191.690:947): pid=1757 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:33:11.742749 kernel: audit: type=1104 audit(1757727191.690:948): pid=1757 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:33:11.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.14:22-10.200.16.10:43808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:33:11.763979 kernel: audit: type=1131 audit(1757727191.716:949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.14:22-10.200.16.10:43808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:33:14.427000 audit[2784]: NETFILTER_CFG table=filter:92 family=2 entries=15 op=nft_register_rule pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:14.427000 audit[2784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe8252610 a2=0 a3=1 items=0 ppid=2558 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:14.474114 kernel: audit: type=1325 audit(1757727194.427:950): table=filter:92 family=2 entries=15 op=nft_register_rule pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:14.474249 kernel: audit: type=1300 audit(1757727194.427:950): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe8252610 a2=0 a3=1 items=0 ppid=2558 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:14.427000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:14.506554 kernel: audit: type=1327 audit(1757727194.427:950): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:14.446000 audit[2784]: NETFILTER_CFG table=nat:93 family=2 entries=12 op=nft_register_rule pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:14.526871 kernel: audit: type=1325 audit(1757727194.446:951): table=nat:93 family=2 entries=12 op=nft_register_rule pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:14.446000 audit[2784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe8252610 a2=0 a3=1 items=0 ppid=2558 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:14.561377 kernel: audit: type=1300 audit(1757727194.446:951): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe8252610 a2=0 a3=1 items=0 ppid=2558 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:14.446000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:14.501000 audit[2786]: NETFILTER_CFG table=filter:94 family=2 entries=16 op=nft_register_rule pid=2786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:14.501000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff406eec0 a2=0 a3=1 items=0 ppid=2558 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:14.501000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:14.510000 audit[2786]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:14.510000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff406eec0 a2=0 a3=1 items=0 ppid=2558 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:14.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.428000 audit[2789]: NETFILTER_CFG table=filter:96 family=2 entries=17 op=nft_register_rule pid=2789 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.435372 kernel: kauditd_printk_skb: 7 callbacks suppressed Sep 13 01:33:19.435486 kernel: audit: type=1325 audit(1757727199.428:954): table=filter:96 family=2 entries=17 op=nft_register_rule pid=2789 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.428000 audit[2789]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeee7e810 a2=0 a3=1 items=0 ppid=2558 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:19.490631 kernel: audit: type=1300 audit(1757727199.428:954): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeee7e810 a2=0 a3=1 items=0 ppid=2558 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:19.498705 kernel: audit: type=1327 audit(1757727199.428:954): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.428000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.451000 audit[2789]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2789 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.532471 kernel: audit: type=1325 audit(1757727199.451:955): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2789 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.535689 kernel: audit: type=1300 audit(1757727199.451:955): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeee7e810 a2=0 a3=1 items=0 ppid=2558 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:19.451000 audit[2789]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeee7e810 a2=0 a3=1 items=0 ppid=2558 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:19.451000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.587782 kernel: audit: type=1327 audit(1757727199.451:955): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.503000 audit[2791]: NETFILTER_CFG table=filter:98 family=2 entries=18 op=nft_register_rule pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.605707 kernel: audit: type=1325 audit(1757727199.503:956): table=filter:98 family=2 entries=18 op=nft_register_rule pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.503000 audit[2791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffebe87430 a2=0 a3=1 items=0 ppid=2558 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:19.638000 kernel: audit: type=1300 audit(1757727199.503:956): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffebe87430 a2=0 a3=1 items=0 ppid=2558 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:19.503000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.655222 kernel: audit: type=1327 audit(1757727199.503:956): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.659063 systemd[1]: Created slice kubepods-besteffort-pod008d108d_9a35_46ea_9700_959f85593471.slice. Sep 13 01:33:19.514000 audit[2791]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.676151 kernel: audit: type=1325 audit(1757727199.514:957): table=nat:99 family=2 entries=12 op=nft_register_rule pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:19.514000 audit[2791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffebe87430 a2=0 a3=1 items=0 ppid=2558 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:19.514000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:19.736398 kubelet[2414]: I0913 01:33:19.736350 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/008d108d-9a35-46ea-9700-959f85593471-tigera-ca-bundle\") pod \"calico-typha-5f7c54645d-854fk\" (UID: \"008d108d-9a35-46ea-9700-959f85593471\") " pod="calico-system/calico-typha-5f7c54645d-854fk" Sep 13 01:33:19.736816 kubelet[2414]: I0913 01:33:19.736800 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/008d108d-9a35-46ea-9700-959f85593471-typha-certs\") pod \"calico-typha-5f7c54645d-854fk\" (UID: \"008d108d-9a35-46ea-9700-959f85593471\") " pod="calico-system/calico-typha-5f7c54645d-854fk" Sep 13 01:33:19.736909 kubelet[2414]: I0913 01:33:19.736897 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dfzxv\" (UniqueName: \"kubernetes.io/projected/008d108d-9a35-46ea-9700-959f85593471-kube-api-access-dfzxv\") pod \"calico-typha-5f7c54645d-854fk\" (UID: \"008d108d-9a35-46ea-9700-959f85593471\") " pod="calico-system/calico-typha-5f7c54645d-854fk" Sep 13 01:33:19.915458 systemd[1]: Created slice kubepods-besteffort-poda12b58c4_49a7_42d9_aa54_ad7d40174c86.slice. Sep 13 01:33:19.966168 env[1447]: time="2025-09-13T01:33:19.966117876Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5f7c54645d-854fk,Uid:008d108d-9a35-46ea-9700-959f85593471,Namespace:calico-system,Attempt:0,}" Sep 13 01:33:20.009309 env[1447]: time="2025-09-13T01:33:20.009001855Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:20.009309 env[1447]: time="2025-09-13T01:33:20.009045855Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:20.009309 env[1447]: time="2025-09-13T01:33:20.009056335Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:20.010504 env[1447]: time="2025-09-13T01:33:20.009546054Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7376a7e89712069f26ce828452303a387dc28f28cf1371f43b22666460a2b565 pid=2803 runtime=io.containerd.runc.v2 Sep 13 01:33:20.023461 systemd[1]: Started cri-containerd-7376a7e89712069f26ce828452303a387dc28f28cf1371f43b22666460a2b565.scope. Sep 13 01:33:20.039080 kubelet[2414]: I0913 01:33:20.039049 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a12b58c4-49a7-42d9-aa54-ad7d40174c86-tigera-ca-bundle\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039252 kubelet[2414]: I0913 01:33:20.039237 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-policysync\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039364 kubelet[2414]: I0913 01:33:20.039349 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-xtables-lock\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039462 kubelet[2414]: I0913 01:33:20.039450 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/a12b58c4-49a7-42d9-aa54-ad7d40174c86-node-certs\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039553 kubelet[2414]: I0913 01:33:20.039541 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-cni-bin-dir\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039648 kubelet[2414]: I0913 01:33:20.039635 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-lib-modules\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039748 kubelet[2414]: I0913 01:33:20.039733 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-var-run-calico\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039844 kubelet[2414]: I0913 01:33:20.039830 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-flexvol-driver-host\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.039941 kubelet[2414]: I0913 01:33:20.039928 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-var-lib-calico\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.040036 kubelet[2414]: I0913 01:33:20.040014 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-cni-log-dir\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.040176 kubelet[2414]: I0913 01:33:20.040162 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/a12b58c4-49a7-42d9-aa54-ad7d40174c86-cni-net-dir\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.040274 kubelet[2414]: I0913 01:33:20.040261 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sh2j6\" (UniqueName: \"kubernetes.io/projected/a12b58c4-49a7-42d9-aa54-ad7d40174c86-kube-api-access-sh2j6\") pod \"calico-node-plx77\" (UID: \"a12b58c4-49a7-42d9-aa54-ad7d40174c86\") " pod="calico-system/calico-node-plx77" Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit: BPF prog-id=122 op=LOAD Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2803 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733373661376538393731323036396632366365383238343532333033 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2803 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733373661376538393731323036396632366365383238343532333033 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit: BPF prog-id=123 op=LOAD Sep 13 01:33:20.049000 audit[2812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2803 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733373661376538393731323036396632366365383238343532333033 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit: BPF prog-id=124 op=LOAD Sep 13 01:33:20.049000 audit[2812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2803 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733373661376538393731323036396632366365383238343532333033 Sep 13 01:33:20.049000 audit: BPF prog-id=124 op=UNLOAD Sep 13 01:33:20.049000 audit: BPF prog-id=123 op=UNLOAD Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { perfmon } for pid=2812 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit[2812]: AVC avc: denied { bpf } for pid=2812 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.049000 audit: BPF prog-id=125 op=LOAD Sep 13 01:33:20.049000 audit[2812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2803 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733373661376538393731323036396632366365383238343532333033 Sep 13 01:33:20.065507 kubelet[2414]: E0913 01:33:20.065461 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8rf89" podUID="1a57959b-d271-4cd6-940b-885d382531e4" Sep 13 01:33:20.074428 env[1447]: time="2025-09-13T01:33:20.074375563Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5f7c54645d-854fk,Uid:008d108d-9a35-46ea-9700-959f85593471,Namespace:calico-system,Attempt:0,} returns sandbox id \"7376a7e89712069f26ce828452303a387dc28f28cf1371f43b22666460a2b565\"" Sep 13 01:33:20.076050 env[1447]: time="2025-09-13T01:33:20.076011921Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\"" Sep 13 01:33:20.141466 kubelet[2414]: I0913 01:33:20.141430 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xxks7\" (UniqueName: \"kubernetes.io/projected/1a57959b-d271-4cd6-940b-885d382531e4-kube-api-access-xxks7\") pod \"csi-node-driver-8rf89\" (UID: \"1a57959b-d271-4cd6-940b-885d382531e4\") " pod="calico-system/csi-node-driver-8rf89" Sep 13 01:33:20.141781 kubelet[2414]: I0913 01:33:20.141763 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/1a57959b-d271-4cd6-940b-885d382531e4-varrun\") pod \"csi-node-driver-8rf89\" (UID: \"1a57959b-d271-4cd6-940b-885d382531e4\") " pod="calico-system/csi-node-driver-8rf89" Sep 13 01:33:20.142057 kubelet[2414]: I0913 01:33:20.142042 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/1a57959b-d271-4cd6-940b-885d382531e4-registration-dir\") pod \"csi-node-driver-8rf89\" (UID: \"1a57959b-d271-4cd6-940b-885d382531e4\") " pod="calico-system/csi-node-driver-8rf89" Sep 13 01:33:20.142431 kubelet[2414]: I0913 01:33:20.142412 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/1a57959b-d271-4cd6-940b-885d382531e4-socket-dir\") pod \"csi-node-driver-8rf89\" (UID: \"1a57959b-d271-4cd6-940b-885d382531e4\") " pod="calico-system/csi-node-driver-8rf89" Sep 13 01:33:20.142579 kubelet[2414]: I0913 01:33:20.142565 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/1a57959b-d271-4cd6-940b-885d382531e4-kubelet-dir\") pod \"csi-node-driver-8rf89\" (UID: \"1a57959b-d271-4cd6-940b-885d382531e4\") " pod="calico-system/csi-node-driver-8rf89" Sep 13 01:33:20.143369 kubelet[2414]: E0913 01:33:20.143351 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.143477 kubelet[2414]: W0913 01:33:20.143460 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.143580 kubelet[2414]: E0913 01:33:20.143568 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.147746 kubelet[2414]: E0913 01:33:20.147719 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.147916 kubelet[2414]: W0913 01:33:20.147899 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.148003 kubelet[2414]: E0913 01:33:20.147990 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.148713 kubelet[2414]: E0913 01:33:20.148695 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.148821 kubelet[2414]: W0913 01:33:20.148807 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.148898 kubelet[2414]: E0913 01:33:20.148886 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.149155 kubelet[2414]: E0913 01:33:20.149142 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.149246 kubelet[2414]: W0913 01:33:20.149234 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.149323 kubelet[2414]: E0913 01:33:20.149311 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.149588 kubelet[2414]: E0913 01:33:20.149576 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.149720 kubelet[2414]: W0913 01:33:20.149707 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.149799 kubelet[2414]: E0913 01:33:20.149787 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.150020 kubelet[2414]: E0913 01:33:20.150008 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.150101 kubelet[2414]: W0913 01:33:20.150089 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.150175 kubelet[2414]: E0913 01:33:20.150163 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.150446 kubelet[2414]: E0913 01:33:20.150429 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.150544 kubelet[2414]: W0913 01:33:20.150531 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.150617 kubelet[2414]: E0913 01:33:20.150606 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.151069 kubelet[2414]: E0913 01:33:20.151052 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.151164 kubelet[2414]: W0913 01:33:20.151150 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.151253 kubelet[2414]: E0913 01:33:20.151241 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.151513 kubelet[2414]: E0913 01:33:20.151501 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.151609 kubelet[2414]: W0913 01:33:20.151596 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.151713 kubelet[2414]: E0913 01:33:20.151702 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.193322 kubelet[2414]: E0913 01:33:20.193292 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.193495 kubelet[2414]: W0913 01:33:20.193478 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.193580 kubelet[2414]: E0913 01:33:20.193567 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.218978 env[1447]: time="2025-09-13T01:33:20.218924760Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-plx77,Uid:a12b58c4-49a7-42d9-aa54-ad7d40174c86,Namespace:calico-system,Attempt:0,}" Sep 13 01:33:20.243968 kubelet[2414]: E0913 01:33:20.243933 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.244141 kubelet[2414]: W0913 01:33:20.244125 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.244220 kubelet[2414]: E0913 01:33:20.244207 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.244543 kubelet[2414]: E0913 01:33:20.244527 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.244645 kubelet[2414]: W0913 01:33:20.244632 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.244744 kubelet[2414]: E0913 01:33:20.244732 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.245750 kubelet[2414]: E0913 01:33:20.245720 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.245848 kubelet[2414]: W0913 01:33:20.245835 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.245941 kubelet[2414]: E0913 01:33:20.245929 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.246213 kubelet[2414]: E0913 01:33:20.246200 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.246308 kubelet[2414]: W0913 01:33:20.246296 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.246386 kubelet[2414]: E0913 01:33:20.246375 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.246641 kubelet[2414]: E0913 01:33:20.246630 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.246752 kubelet[2414]: W0913 01:33:20.246740 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.246895 kubelet[2414]: E0913 01:33:20.246883 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.247055 kubelet[2414]: E0913 01:33:20.247037 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.247127 kubelet[2414]: W0913 01:33:20.247116 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.247272 kubelet[2414]: E0913 01:33:20.247260 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.247470 kubelet[2414]: E0913 01:33:20.247459 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.247555 kubelet[2414]: W0913 01:33:20.247543 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.247733 kubelet[2414]: E0913 01:33:20.247721 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.247857 kubelet[2414]: E0913 01:33:20.247847 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.247942 kubelet[2414]: W0913 01:33:20.247931 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.248086 kubelet[2414]: E0913 01:33:20.248070 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.248208 kubelet[2414]: E0913 01:33:20.248199 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.248290 kubelet[2414]: W0913 01:33:20.248279 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.248428 kubelet[2414]: E0913 01:33:20.248416 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.248595 kubelet[2414]: E0913 01:33:20.248585 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.248711 kubelet[2414]: W0913 01:33:20.248651 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.248891 kubelet[2414]: E0913 01:33:20.248878 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.249024 kubelet[2414]: E0913 01:33:20.249014 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.249105 kubelet[2414]: W0913 01:33:20.249094 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.249251 kubelet[2414]: E0913 01:33:20.249239 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.249379 kubelet[2414]: E0913 01:33:20.249371 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.249458 kubelet[2414]: W0913 01:33:20.249447 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.249597 kubelet[2414]: E0913 01:33:20.249586 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.249766 kubelet[2414]: E0913 01:33:20.249748 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.249850 kubelet[2414]: W0913 01:33:20.249837 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.249997 kubelet[2414]: E0913 01:33:20.249986 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.250124 kubelet[2414]: E0913 01:33:20.250115 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.250208 kubelet[2414]: W0913 01:33:20.250196 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.250344 kubelet[2414]: E0913 01:33:20.250334 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.254645 kubelet[2414]: E0913 01:33:20.254618 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.255584 kubelet[2414]: W0913 01:33:20.255555 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.255885 kubelet[2414]: E0913 01:33:20.255868 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.256215 kubelet[2414]: E0913 01:33:20.256201 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.256324 kubelet[2414]: W0913 01:33:20.256309 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.256524 kubelet[2414]: E0913 01:33:20.256511 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.257016 kubelet[2414]: E0913 01:33:20.257002 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.257112 kubelet[2414]: W0913 01:33:20.257100 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.257247 kubelet[2414]: E0913 01:33:20.257235 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.257440 kubelet[2414]: E0913 01:33:20.257429 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.257507 kubelet[2414]: W0913 01:33:20.257496 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.257701 kubelet[2414]: E0913 01:33:20.257687 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.257897 kubelet[2414]: E0913 01:33:20.257885 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.257975 kubelet[2414]: W0913 01:33:20.257962 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.258097 kubelet[2414]: E0913 01:33:20.258086 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.263639 env[1447]: time="2025-09-13T01:33:20.258935424Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:20.263639 env[1447]: time="2025-09-13T01:33:20.259024424Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:20.263639 env[1447]: time="2025-09-13T01:33:20.259048864Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:20.263639 env[1447]: time="2025-09-13T01:33:20.261583260Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22 pid=2872 runtime=io.containerd.runc.v2 Sep 13 01:33:20.264041 kubelet[2414]: E0913 01:33:20.264015 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.264138 kubelet[2414]: W0913 01:33:20.264121 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.264350 kubelet[2414]: E0913 01:33:20.264335 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.266800 kubelet[2414]: E0913 01:33:20.266776 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.270779 kubelet[2414]: W0913 01:33:20.270740 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.271090 kubelet[2414]: E0913 01:33:20.271073 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.271329 kubelet[2414]: E0913 01:33:20.271316 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.271415 kubelet[2414]: W0913 01:33:20.271402 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.271566 kubelet[2414]: E0913 01:33:20.271552 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.271738 kubelet[2414]: E0913 01:33:20.271727 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.271822 kubelet[2414]: W0913 01:33:20.271810 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.272007 kubelet[2414]: E0913 01:33:20.271994 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.272217 kubelet[2414]: E0913 01:33:20.272206 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.272300 kubelet[2414]: W0913 01:33:20.272288 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.272368 kubelet[2414]: E0913 01:33:20.272357 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.272872 kubelet[2414]: E0913 01:33:20.272858 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.272956 kubelet[2414]: W0913 01:33:20.272944 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.273029 kubelet[2414]: E0913 01:33:20.273017 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.283472 systemd[1]: Started cri-containerd-33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22.scope. Sep 13 01:33:20.295246 kubelet[2414]: E0913 01:33:20.295221 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:20.295427 kubelet[2414]: W0913 01:33:20.295408 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:20.295526 kubelet[2414]: E0913 01:33:20.295513 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.302000 audit: BPF prog-id=126 op=LOAD Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2872 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623564383838633164346433653432333264386631393831376562 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2872 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623564383838633164346433653432333264386631393831376562 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.303000 audit: BPF prog-id=127 op=LOAD Sep 13 01:33:20.303000 audit[2888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2872 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623564383838633164346433653432333264386631393831376562 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.304000 audit: BPF prog-id=128 op=LOAD Sep 13 01:33:20.304000 audit[2888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2872 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623564383838633164346433653432333264386631393831376562 Sep 13 01:33:20.305000 audit: BPF prog-id=128 op=UNLOAD Sep 13 01:33:20.305000 audit: BPF prog-id=127 op=UNLOAD Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { perfmon } for pid=2888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit[2888]: AVC avc: denied { bpf } for pid=2888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:20.305000 audit: BPF prog-id=129 op=LOAD Sep 13 01:33:20.305000 audit[2888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2872 pid=2888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333623564383838633164346433653432333264386631393831376562 Sep 13 01:33:20.325841 env[1447]: time="2025-09-13T01:33:20.325788450Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-plx77,Uid:a12b58c4-49a7-42d9-aa54-ad7d40174c86,Namespace:calico-system,Attempt:0,} returns sandbox id \"33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22\"" Sep 13 01:33:20.543000 audit[2917]: NETFILTER_CFG table=filter:100 family=2 entries=20 op=nft_register_rule pid=2917 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:20.543000 audit[2917]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffec99e230 a2=0 a3=1 items=0 ppid=2558 pid=2917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.543000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:20.557000 audit[2917]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2917 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:20.557000 audit[2917]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffec99e230 a2=0 a3=1 items=0 ppid=2558 pid=2917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:20.557000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:20.845589 systemd[1]: run-containerd-runc-k8s.io-7376a7e89712069f26ce828452303a387dc28f28cf1371f43b22666460a2b565-runc.U3mBkG.mount: Deactivated successfully. Sep 13 01:33:21.338202 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3231665635.mount: Deactivated successfully. Sep 13 01:33:22.000849 kubelet[2414]: E0913 01:33:22.000798 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8rf89" podUID="1a57959b-d271-4cd6-940b-885d382531e4" Sep 13 01:33:22.092570 env[1447]: time="2025-09-13T01:33:22.092515047Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:22.099959 env[1447]: time="2025-09-13T01:33:22.099908757Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:22.105064 env[1447]: time="2025-09-13T01:33:22.105017190Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:22.109468 env[1447]: time="2025-09-13T01:33:22.109424544Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:f4a3d61ffda9c98a53adeb412c5af404ca3727a3cc2d0b4ef28d197bdd47ecaa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:22.109728 env[1447]: time="2025-09-13T01:33:22.109697464Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.3\" returns image reference \"sha256:6a1496fdc48cc0b9ab3c10aef777497484efac5df9efbfbbdf9775e9583645cb\"" Sep 13 01:33:22.112241 env[1447]: time="2025-09-13T01:33:22.112201780Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\"" Sep 13 01:33:22.124898 env[1447]: time="2025-09-13T01:33:22.124850163Z" level=info msg="CreateContainer within sandbox \"7376a7e89712069f26ce828452303a387dc28f28cf1371f43b22666460a2b565\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Sep 13 01:33:22.152253 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3717952546.mount: Deactivated successfully. Sep 13 01:33:22.169851 env[1447]: time="2025-09-13T01:33:22.169800263Z" level=info msg="CreateContainer within sandbox \"7376a7e89712069f26ce828452303a387dc28f28cf1371f43b22666460a2b565\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"23f3ab6c140254d8b538418ad2172417d405c49e88f41ee9f044e76c1b787db4\"" Sep 13 01:33:22.171157 env[1447]: time="2025-09-13T01:33:22.170507182Z" level=info msg="StartContainer for \"23f3ab6c140254d8b538418ad2172417d405c49e88f41ee9f044e76c1b787db4\"" Sep 13 01:33:22.201043 systemd[1]: Started cri-containerd-23f3ab6c140254d8b538418ad2172417d405c49e88f41ee9f044e76c1b787db4.scope. Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.219000 audit: BPF prog-id=130 op=LOAD Sep 13 01:33:22.219000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.219000 audit[2928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2803 pid=2928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:22.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663361623663313430323534643862353338343138616432313732 Sep 13 01:33:22.219000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.219000 audit[2928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2803 pid=2928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:22.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663361623663313430323534643862353338343138616432313732 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit: BPF prog-id=131 op=LOAD Sep 13 01:33:22.220000 audit[2928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2803 pid=2928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:22.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663361623663313430323534643862353338343138616432313732 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.220000 audit: BPF prog-id=132 op=LOAD Sep 13 01:33:22.220000 audit[2928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2803 pid=2928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:22.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663361623663313430323534643862353338343138616432313732 Sep 13 01:33:22.221000 audit: BPF prog-id=132 op=UNLOAD Sep 13 01:33:22.221000 audit: BPF prog-id=131 op=UNLOAD Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { perfmon } for pid=2928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit[2928]: AVC avc: denied { bpf } for pid=2928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:22.221000 audit: BPF prog-id=133 op=LOAD Sep 13 01:33:22.221000 audit[2928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2803 pid=2928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:22.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233663361623663313430323534643862353338343138616432313732 Sep 13 01:33:22.254511 env[1447]: time="2025-09-13T01:33:22.254411509Z" level=info msg="StartContainer for \"23f3ab6c140254d8b538418ad2172417d405c49e88f41ee9f044e76c1b787db4\" returns successfully" Sep 13 01:33:23.089126 kubelet[2414]: I0913 01:33:23.089060 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5f7c54645d-854fk" podStartSLOduration=2.053376531 podStartE2EDuration="4.089043911s" podCreationTimestamp="2025-09-13 01:33:19 +0000 UTC" firstStartedPulling="2025-09-13 01:33:20.075496722 +0000 UTC m=+25.297795031" lastFinishedPulling="2025-09-13 01:33:22.111164102 +0000 UTC m=+27.333462411" observedRunningTime="2025-09-13 01:33:23.088684111 +0000 UTC m=+28.310982420" watchObservedRunningTime="2025-09-13 01:33:23.089043911 +0000 UTC m=+28.311342220" Sep 13 01:33:23.103922 kubelet[2414]: E0913 01:33:23.103888 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.103922 kubelet[2414]: W0913 01:33:23.103915 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.104100 kubelet[2414]: E0913 01:33:23.103937 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.104230 kubelet[2414]: E0913 01:33:23.104214 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.104267 kubelet[2414]: W0913 01:33:23.104226 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.104267 kubelet[2414]: E0913 01:33:23.104261 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.104444 kubelet[2414]: E0913 01:33:23.104429 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.104444 kubelet[2414]: W0913 01:33:23.104442 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.104511 kubelet[2414]: E0913 01:33:23.104451 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.104594 kubelet[2414]: E0913 01:33:23.104577 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.104594 kubelet[2414]: W0913 01:33:23.104591 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.104719 kubelet[2414]: E0913 01:33:23.104598 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.104784 kubelet[2414]: E0913 01:33:23.104765 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.104784 kubelet[2414]: W0913 01:33:23.104779 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.104850 kubelet[2414]: E0913 01:33:23.104789 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.104916 kubelet[2414]: E0913 01:33:23.104903 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.104916 kubelet[2414]: W0913 01:33:23.104914 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.104977 kubelet[2414]: E0913 01:33:23.104922 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.105069 kubelet[2414]: E0913 01:33:23.105052 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.105069 kubelet[2414]: W0913 01:33:23.105064 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.105135 kubelet[2414]: E0913 01:33:23.105072 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.105206 kubelet[2414]: E0913 01:33:23.105190 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.105206 kubelet[2414]: W0913 01:33:23.105202 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.105278 kubelet[2414]: E0913 01:33:23.105210 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.105352 kubelet[2414]: E0913 01:33:23.105336 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.105352 kubelet[2414]: W0913 01:33:23.105348 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.105423 kubelet[2414]: E0913 01:33:23.105355 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.105487 kubelet[2414]: E0913 01:33:23.105470 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.105487 kubelet[2414]: W0913 01:33:23.105482 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.105558 kubelet[2414]: E0913 01:33:23.105491 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.105617 kubelet[2414]: E0913 01:33:23.105601 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.105617 kubelet[2414]: W0913 01:33:23.105613 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.105693 kubelet[2414]: E0913 01:33:23.105620 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.105781 kubelet[2414]: E0913 01:33:23.105763 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.105781 kubelet[2414]: W0913 01:33:23.105777 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.105888 kubelet[2414]: E0913 01:33:23.105785 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.105980 kubelet[2414]: E0913 01:33:23.105909 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.105980 kubelet[2414]: W0913 01:33:23.105916 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.105980 kubelet[2414]: E0913 01:33:23.105926 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.106056 kubelet[2414]: E0913 01:33:23.106040 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.106056 kubelet[2414]: W0913 01:33:23.106047 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.106056 kubelet[2414]: E0913 01:33:23.106053 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.106181 kubelet[2414]: E0913 01:33:23.106161 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.106181 kubelet[2414]: W0913 01:33:23.106175 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.106249 kubelet[2414]: E0913 01:33:23.106183 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.169941 kubelet[2414]: E0913 01:33:23.169682 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.169941 kubelet[2414]: W0913 01:33:23.169713 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.169941 kubelet[2414]: E0913 01:33:23.169745 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.170403 kubelet[2414]: E0913 01:33:23.170190 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.170403 kubelet[2414]: W0913 01:33:23.170203 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.170403 kubelet[2414]: E0913 01:33:23.170227 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.170672 kubelet[2414]: E0913 01:33:23.170558 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.170672 kubelet[2414]: W0913 01:33:23.170571 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.170672 kubelet[2414]: E0913 01:33:23.170597 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.170797 kubelet[2414]: E0913 01:33:23.170783 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.170797 kubelet[2414]: W0913 01:33:23.170793 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.170856 kubelet[2414]: E0913 01:33:23.170816 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.170980 kubelet[2414]: E0913 01:33:23.170962 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.170980 kubelet[2414]: W0913 01:33:23.170975 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.171063 kubelet[2414]: E0913 01:33:23.170990 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.171139 kubelet[2414]: E0913 01:33:23.171122 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.171139 kubelet[2414]: W0913 01:33:23.171135 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.171207 kubelet[2414]: E0913 01:33:23.171145 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.171321 kubelet[2414]: E0913 01:33:23.171305 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.171321 kubelet[2414]: W0913 01:33:23.171319 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.171386 kubelet[2414]: E0913 01:33:23.171334 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.171687 kubelet[2414]: E0913 01:33:23.171606 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.171687 kubelet[2414]: W0913 01:33:23.171620 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.171687 kubelet[2414]: E0913 01:33:23.171643 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.171858 kubelet[2414]: E0913 01:33:23.171831 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.171858 kubelet[2414]: W0913 01:33:23.171851 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.171940 kubelet[2414]: E0913 01:33:23.171870 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.172057 kubelet[2414]: E0913 01:33:23.172035 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.172057 kubelet[2414]: W0913 01:33:23.172049 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.172121 kubelet[2414]: E0913 01:33:23.172063 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.172214 kubelet[2414]: E0913 01:33:23.172192 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.172214 kubelet[2414]: W0913 01:33:23.172209 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.172272 kubelet[2414]: E0913 01:33:23.172218 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.172384 kubelet[2414]: E0913 01:33:23.172369 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.172384 kubelet[2414]: W0913 01:33:23.172379 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.172441 kubelet[2414]: E0913 01:33:23.172391 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.172791 kubelet[2414]: E0913 01:33:23.172771 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.172791 kubelet[2414]: W0913 01:33:23.172789 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.172945 kubelet[2414]: E0913 01:33:23.172904 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.172945 kubelet[2414]: E0913 01:33:23.172936 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.172945 kubelet[2414]: W0913 01:33:23.172943 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.173051 kubelet[2414]: E0913 01:33:23.173013 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.173128 kubelet[2414]: E0913 01:33:23.173115 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.173128 kubelet[2414]: W0913 01:33:23.173127 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.173205 kubelet[2414]: E0913 01:33:23.173136 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.173278 kubelet[2414]: E0913 01:33:23.173265 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.173278 kubelet[2414]: W0913 01:33:23.173276 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.173349 kubelet[2414]: E0913 01:33:23.173284 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.173445 kubelet[2414]: E0913 01:33:23.173433 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.173445 kubelet[2414]: W0913 01:33:23.173444 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.173516 kubelet[2414]: E0913 01:33:23.173453 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.174823 kubelet[2414]: E0913 01:33:23.174757 2414 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Sep 13 01:33:23.174823 kubelet[2414]: W0913 01:33:23.174774 2414 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Sep 13 01:33:23.174823 kubelet[2414]: E0913 01:33:23.174789 2414 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Sep 13 01:33:23.275267 env[1447]: time="2025-09-13T01:33:23.275222626Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:23.283383 env[1447]: time="2025-09-13T01:33:23.283338336Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:23.287712 env[1447]: time="2025-09-13T01:33:23.287676970Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:23.292072 env[1447]: time="2025-09-13T01:33:23.292037404Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:81bdfcd9dbd36624dc35354e8c181c75631ba40e6c7df5820f5f56cea36f0ef9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:23.292587 env[1447]: time="2025-09-13T01:33:23.292556603Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.3\" returns image reference \"sha256:29e6f31ad72882b1b817dd257df6b7981e4d7d31d872b7fe2cf102c6e2af27a5\"" Sep 13 01:33:23.295127 env[1447]: time="2025-09-13T01:33:23.295090440Z" level=info msg="CreateContainer within sandbox \"33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Sep 13 01:33:23.322080 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3079404984.mount: Deactivated successfully. Sep 13 01:33:23.340756 env[1447]: time="2025-09-13T01:33:23.340598260Z" level=info msg="CreateContainer within sandbox \"33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a\"" Sep 13 01:33:23.342388 env[1447]: time="2025-09-13T01:33:23.342304418Z" level=info msg="StartContainer for \"886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a\"" Sep 13 01:33:23.366164 systemd[1]: Started cri-containerd-886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a.scope. Sep 13 01:33:23.380000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.380000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2872 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:23.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838366361653739663162333433316432626532303937323965306335 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit: BPF prog-id=134 op=LOAD Sep 13 01:33:23.383000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2872 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:23.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838366361653739663162333433316432626532303937323965306335 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit: BPF prog-id=135 op=LOAD Sep 13 01:33:23.383000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2872 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:23.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838366361653739663162333433316432626532303937323965306335 Sep 13 01:33:23.383000 audit: BPF prog-id=135 op=UNLOAD Sep 13 01:33:23.383000 audit: BPF prog-id=134 op=UNLOAD Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:23.383000 audit: BPF prog-id=136 op=LOAD Sep 13 01:33:23.383000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2872 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:23.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838366361653739663162333433316432626532303937323965306335 Sep 13 01:33:23.404855 env[1447]: time="2025-09-13T01:33:23.404806776Z" level=info msg="StartContainer for \"886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a\" returns successfully" Sep 13 01:33:23.413498 systemd[1]: cri-containerd-886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a.scope: Deactivated successfully. Sep 13 01:33:23.414000 audit: BPF prog-id=136 op=UNLOAD Sep 13 01:33:24.001128 kubelet[2414]: E0913 01:33:24.001088 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8rf89" podUID="1a57959b-d271-4cd6-940b-885d382531e4" Sep 13 01:33:24.077371 kubelet[2414]: I0913 01:33:24.077344 2414 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:33:24.115874 systemd[1]: run-containerd-runc-k8s.io-886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a-runc.Ivi9pI.mount: Deactivated successfully. Sep 13 01:33:24.115966 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a-rootfs.mount: Deactivated successfully. Sep 13 01:33:24.489067 env[1447]: time="2025-09-13T01:33:24.489011324Z" level=info msg="shim disconnected" id=886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a Sep 13 01:33:24.489067 env[1447]: time="2025-09-13T01:33:24.489061644Z" level=warning msg="cleaning up after shim disconnected" id=886cae79f1b3431d2be209729e0c505f5bda3d9729fe161effadebf466a3ae1a namespace=k8s.io Sep 13 01:33:24.489067 env[1447]: time="2025-09-13T01:33:24.489072644Z" level=info msg="cleaning up dead shim" Sep 13 01:33:24.496979 env[1447]: time="2025-09-13T01:33:24.496927874Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:33:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3042 runtime=io.containerd.runc.v2\n" Sep 13 01:33:25.083639 env[1447]: time="2025-09-13T01:33:25.083600522Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\"" Sep 13 01:33:26.000691 kubelet[2414]: E0913 01:33:26.000628 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8rf89" podUID="1a57959b-d271-4cd6-940b-885d382531e4" Sep 13 01:33:26.763709 kubelet[2414]: I0913 01:33:26.763679 2414 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:33:26.823000 audit[3058]: NETFILTER_CFG table=filter:102 family=2 entries=21 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:26.831149 kernel: kauditd_printk_skb: 223 callbacks suppressed Sep 13 01:33:26.831328 kernel: audit: type=1325 audit(1757727206.823:1021): table=filter:102 family=2 entries=21 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:26.823000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffde57cbc0 a2=0 a3=1 items=0 ppid=2558 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:26.916031 kernel: audit: type=1300 audit(1757727206.823:1021): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffde57cbc0 a2=0 a3=1 items=0 ppid=2558 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:26.916146 kernel: audit: type=1327 audit(1757727206.823:1021): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:26.823000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:26.849000 audit[3058]: NETFILTER_CFG table=nat:103 family=2 entries=19 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:26.939178 kernel: audit: type=1325 audit(1757727206.849:1022): table=nat:103 family=2 entries=19 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:26.849000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffde57cbc0 a2=0 a3=1 items=0 ppid=2558 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:26.978151 kernel: audit: type=1300 audit(1757727206.849:1022): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffde57cbc0 a2=0 a3=1 items=0 ppid=2558 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:26.849000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:26.995358 kernel: audit: type=1327 audit(1757727206.849:1022): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:27.934080 env[1447]: time="2025-09-13T01:33:27.934019326Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:27.941048 env[1447]: time="2025-09-13T01:33:27.940999437Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:27.946337 env[1447]: time="2025-09-13T01:33:27.946292511Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:27.950295 env[1447]: time="2025-09-13T01:33:27.950247626Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:73d1e391050490d54e5bee8ff2b1a50a8be1746c98dc530361b00e8c0ab63f87,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:27.950959 env[1447]: time="2025-09-13T01:33:27.950933065Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.3\" returns image reference \"sha256:7077a1dc632ee598cbfa626f9e3c9bca5b20c0d1e1e557995890125b2e8d2e23\"" Sep 13 01:33:27.954691 env[1447]: time="2025-09-13T01:33:27.954633501Z" level=info msg="CreateContainer within sandbox \"33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Sep 13 01:33:27.979277 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4267948995.mount: Deactivated successfully. Sep 13 01:33:27.997833 env[1447]: time="2025-09-13T01:33:27.997783969Z" level=info msg="CreateContainer within sandbox \"33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848\"" Sep 13 01:33:28.000026 env[1447]: time="2025-09-13T01:33:27.999992246Z" level=info msg="StartContainer for \"a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848\"" Sep 13 01:33:28.000234 kubelet[2414]: E0913 01:33:28.000179 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-8rf89" podUID="1a57959b-d271-4cd6-940b-885d382531e4" Sep 13 01:33:28.024330 systemd[1]: Started cri-containerd-a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848.scope. Sep 13 01:33:28.031940 systemd[1]: run-containerd-runc-k8s.io-a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848-runc.sifUMv.mount: Deactivated successfully. Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2872 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:28.106762 kernel: audit: type=1400 audit(1757727208.044:1023): avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.106889 kernel: audit: type=1300 audit(1757727208.044:1023): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2872 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:28.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323532346266316636626634303164376630613366663637343333 Sep 13 01:33:28.139740 kernel: audit: type=1327 audit(1757727208.044:1023): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323532346266316636626634303164376630613366663637343333 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.162051 kernel: audit: type=1400 audit(1757727208.044:1024): avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.044000 audit: BPF prog-id=137 op=LOAD Sep 13 01:33:28.044000 audit[3067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2872 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:28.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323532346266316636626634303164376630613366663637343333 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.068000 audit: BPF prog-id=138 op=LOAD Sep 13 01:33:28.068000 audit[3067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2872 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:28.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323532346266316636626634303164376630613366663637343333 Sep 13 01:33:28.068000 audit: BPF prog-id=138 op=UNLOAD Sep 13 01:33:28.069000 audit: BPF prog-id=137 op=UNLOAD Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:28.069000 audit: BPF prog-id=139 op=LOAD Sep 13 01:33:28.069000 audit[3067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2872 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:28.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323532346266316636626634303164376630613366663637343333 Sep 13 01:33:28.184520 env[1447]: time="2025-09-13T01:33:28.184402868Z" level=info msg="StartContainer for \"a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848\" returns successfully" Sep 13 01:33:29.422571 env[1447]: time="2025-09-13T01:33:29.422479573Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 13 01:33:29.425534 systemd[1]: cri-containerd-a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848.scope: Deactivated successfully. Sep 13 01:33:29.428000 audit: BPF prog-id=139 op=UNLOAD Sep 13 01:33:29.447710 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848-rootfs.mount: Deactivated successfully. Sep 13 01:33:29.516251 kubelet[2414]: I0913 01:33:29.516209 2414 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Sep 13 01:33:29.832035 kubelet[2414]: I0913 01:33:29.563744 2414 status_manager.go:890] "Failed to get status for pod" podUID="a6cbb0ca-3390-4a37-8c80-d5a01d422ca6" pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" err="pods \"calico-apiserver-84855b6446-7k6rx\" is forbidden: User \"system:node:ci-3510.3.8-n-12daba8686\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ci-3510.3.8-n-12daba8686' and this object" Sep 13 01:33:29.832035 kubelet[2414]: W0913 01:33:29.590978 2414 reflector.go:569] object-"calico-system"/"goldmane-key-pair": failed to list *v1.Secret: secrets "goldmane-key-pair" is forbidden: User "system:node:ci-3510.3.8-n-12daba8686" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.8-n-12daba8686' and this object Sep 13 01:33:29.832035 kubelet[2414]: E0913 01:33:29.591294 2414 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"goldmane-key-pair\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"goldmane-key-pair\" is forbidden: User \"system:node:ci-3510.3.8-n-12daba8686\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.8-n-12daba8686' and this object" logger="UnhandledError" Sep 13 01:33:29.832035 kubelet[2414]: W0913 01:33:29.594324 2414 reflector.go:569] object-"calico-system"/"goldmane-ca-bundle": failed to list *v1.ConfigMap: configmaps "goldmane-ca-bundle" is forbidden: User "system:node:ci-3510.3.8-n-12daba8686" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ci-3510.3.8-n-12daba8686' and this object Sep 13 01:33:29.561325 systemd[1]: Created slice kubepods-besteffort-poda6cbb0ca_3390_4a37_8c80_d5a01d422ca6.slice. Sep 13 01:33:29.832351 kubelet[2414]: E0913 01:33:29.594353 2414 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"goldmane-ca-bundle\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"goldmane-ca-bundle\" is forbidden: User \"system:node:ci-3510.3.8-n-12daba8686\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ci-3510.3.8-n-12daba8686' and this object" logger="UnhandledError" Sep 13 01:33:29.832351 kubelet[2414]: I0913 01:33:29.614461 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-calico-apiserver-certs\") pod \"calico-apiserver-84855b6446-7k6rx\" (UID: \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\") " pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" Sep 13 01:33:29.832351 kubelet[2414]: I0913 01:33:29.614495 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4x2zg\" (UniqueName: \"kubernetes.io/projected/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-kube-api-access-4x2zg\") pod \"calico-apiserver-84855b6446-7k6rx\" (UID: \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\") " pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" Sep 13 01:33:29.832351 kubelet[2414]: I0913 01:33:29.614513 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/52df943e-5550-4ee4-87ef-5b65208ddbbc-tigera-ca-bundle\") pod \"calico-kube-controllers-78c5b7c8f4-5d5nl\" (UID: \"52df943e-5550-4ee4-87ef-5b65208ddbbc\") " pod="calico-system/calico-kube-controllers-78c5b7c8f4-5d5nl" Sep 13 01:33:29.832351 kubelet[2414]: I0913 01:33:29.614533 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/43c6eaa8-fda6-473c-b002-26d293c3cf62-config-volume\") pod \"coredns-668d6bf9bc-t8fkc\" (UID: \"43c6eaa8-fda6-473c-b002-26d293c3cf62\") " pod="kube-system/coredns-668d6bf9bc-t8fkc" Sep 13 01:33:29.575290 systemd[1]: Created slice kubepods-besteffort-pod52df943e_5550_4ee4_87ef_5b65208ddbbc.slice. Sep 13 01:33:29.832516 kubelet[2414]: I0913 01:33:29.614551 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z58gq\" (UniqueName: \"kubernetes.io/projected/43c6eaa8-fda6-473c-b002-26d293c3cf62-kube-api-access-z58gq\") pod \"coredns-668d6bf9bc-t8fkc\" (UID: \"43c6eaa8-fda6-473c-b002-26d293c3cf62\") " pod="kube-system/coredns-668d6bf9bc-t8fkc" Sep 13 01:33:29.832516 kubelet[2414]: I0913 01:33:29.614571 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xlqc4\" (UniqueName: \"kubernetes.io/projected/52df943e-5550-4ee4-87ef-5b65208ddbbc-kube-api-access-xlqc4\") pod \"calico-kube-controllers-78c5b7c8f4-5d5nl\" (UID: \"52df943e-5550-4ee4-87ef-5b65208ddbbc\") " pod="calico-system/calico-kube-controllers-78c5b7c8f4-5d5nl" Sep 13 01:33:29.832516 kubelet[2414]: I0913 01:33:29.715131 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/8b6a17d7-5c99-4a44-aee7-e6e39838b3d3-config\") pod \"goldmane-54d579b49d-dn9x6\" (UID: \"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3\") " pod="calico-system/goldmane-54d579b49d-dn9x6" Sep 13 01:33:29.832516 kubelet[2414]: I0913 01:33:29.715197 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p2r22\" (UniqueName: \"kubernetes.io/projected/8b6a17d7-5c99-4a44-aee7-e6e39838b3d3-kube-api-access-p2r22\") pod \"goldmane-54d579b49d-dn9x6\" (UID: \"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3\") " pod="calico-system/goldmane-54d579b49d-dn9x6" Sep 13 01:33:29.832516 kubelet[2414]: I0913 01:33:29.715271 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-chh56\" (UniqueName: \"kubernetes.io/projected/c3714508-07d9-482b-9c6e-7440b4ca147e-kube-api-access-chh56\") pod \"whisker-7d69989445-pg8j2\" (UID: \"c3714508-07d9-482b-9c6e-7440b4ca147e\") " pod="calico-system/whisker-7d69989445-pg8j2" Sep 13 01:33:29.583651 systemd[1]: Created slice kubepods-burstable-pod43c6eaa8_fda6_473c_b002_26d293c3cf62.slice. Sep 13 01:33:29.832691 kubelet[2414]: I0913 01:33:29.715291 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zx9lz\" (UniqueName: \"kubernetes.io/projected/3e03f1c0-901c-40fa-b26f-00188c44bf4b-kube-api-access-zx9lz\") pod \"coredns-668d6bf9bc-9kprh\" (UID: \"3e03f1c0-901c-40fa-b26f-00188c44bf4b\") " pod="kube-system/coredns-668d6bf9bc-9kprh" Sep 13 01:33:29.832691 kubelet[2414]: I0913 01:33:29.715351 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-ca-bundle\") pod \"whisker-7d69989445-pg8j2\" (UID: \"c3714508-07d9-482b-9c6e-7440b4ca147e\") " pod="calico-system/whisker-7d69989445-pg8j2" Sep 13 01:33:29.832691 kubelet[2414]: I0913 01:33:29.715369 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3e03f1c0-901c-40fa-b26f-00188c44bf4b-config-volume\") pod \"coredns-668d6bf9bc-9kprh\" (UID: \"3e03f1c0-901c-40fa-b26f-00188c44bf4b\") " pod="kube-system/coredns-668d6bf9bc-9kprh" Sep 13 01:33:29.832691 kubelet[2414]: I0913 01:33:29.715541 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zjtjs\" (UniqueName: \"kubernetes.io/projected/ddddcc61-e927-42cf-8461-ba98f8f408bd-kube-api-access-zjtjs\") pod \"calico-apiserver-84855b6446-8ds5r\" (UID: \"ddddcc61-e927-42cf-8461-ba98f8f408bd\") " pod="calico-apiserver/calico-apiserver-84855b6446-8ds5r" Sep 13 01:33:29.832691 kubelet[2414]: I0913 01:33:29.715586 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/ddddcc61-e927-42cf-8461-ba98f8f408bd-calico-apiserver-certs\") pod \"calico-apiserver-84855b6446-8ds5r\" (UID: \"ddddcc61-e927-42cf-8461-ba98f8f408bd\") " pod="calico-apiserver/calico-apiserver-84855b6446-8ds5r" Sep 13 01:33:29.592170 systemd[1]: Created slice kubepods-besteffort-podc3714508_07d9_482b_9c6e_7440b4ca147e.slice. Sep 13 01:33:29.832853 kubelet[2414]: I0913 01:33:29.715606 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-backend-key-pair\") pod \"whisker-7d69989445-pg8j2\" (UID: \"c3714508-07d9-482b-9c6e-7440b4ca147e\") " pod="calico-system/whisker-7d69989445-pg8j2" Sep 13 01:33:29.832853 kubelet[2414]: I0913 01:33:29.715622 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5e4bc629-7106-42a7-8f0b-73740c96de56-calico-apiserver-certs\") pod \"calico-apiserver-7d66856c58-zgwwq\" (UID: \"5e4bc629-7106-42a7-8f0b-73740c96de56\") " pod="calico-apiserver/calico-apiserver-7d66856c58-zgwwq" Sep 13 01:33:29.832853 kubelet[2414]: I0913 01:33:29.715752 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/8b6a17d7-5c99-4a44-aee7-e6e39838b3d3-goldmane-key-pair\") pod \"goldmane-54d579b49d-dn9x6\" (UID: \"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3\") " pod="calico-system/goldmane-54d579b49d-dn9x6" Sep 13 01:33:29.832853 kubelet[2414]: I0913 01:33:29.715902 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4tssh\" (UniqueName: \"kubernetes.io/projected/5e4bc629-7106-42a7-8f0b-73740c96de56-kube-api-access-4tssh\") pod \"calico-apiserver-7d66856c58-zgwwq\" (UID: \"5e4bc629-7106-42a7-8f0b-73740c96de56\") " pod="calico-apiserver/calico-apiserver-7d66856c58-zgwwq" Sep 13 01:33:29.832853 kubelet[2414]: I0913 01:33:29.715976 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8b6a17d7-5c99-4a44-aee7-e6e39838b3d3-goldmane-ca-bundle\") pod \"goldmane-54d579b49d-dn9x6\" (UID: \"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3\") " pod="calico-system/goldmane-54d579b49d-dn9x6" Sep 13 01:33:29.601547 systemd[1]: Created slice kubepods-burstable-pod3e03f1c0_901c_40fa_b26f_00188c44bf4b.slice. Sep 13 01:33:29.609441 systemd[1]: Created slice kubepods-besteffort-podddddcc61_e927_42cf_8461_ba98f8f408bd.slice. Sep 13 01:33:29.615865 systemd[1]: Created slice kubepods-besteffort-pod5e4bc629_7106_42a7_8f0b_73740c96de56.slice. Sep 13 01:33:29.620891 systemd[1]: Created slice kubepods-besteffort-pod8b6a17d7_5c99_4a44_aee7_e6e39838b3d3.slice. Sep 13 01:33:30.005189 systemd[1]: Created slice kubepods-besteffort-pod1a57959b_d271_4cd6_940b_885d382531e4.slice. Sep 13 01:33:30.007832 env[1447]: time="2025-09-13T01:33:30.007786694Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8rf89,Uid:1a57959b-d271-4cd6-940b-885d382531e4,Namespace:calico-system,Attempt:0,}" Sep 13 01:33:30.130762 env[1447]: time="2025-09-13T01:33:30.130628234Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-7k6rx,Uid:a6cbb0ca-3390-4a37-8c80-d5a01d422ca6,Namespace:calico-apiserver,Attempt:0,}" Sep 13 01:33:30.136972 env[1447]: time="2025-09-13T01:33:30.136893387Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9kprh,Uid:3e03f1c0-901c-40fa-b26f-00188c44bf4b,Namespace:kube-system,Attempt:0,}" Sep 13 01:33:30.137500 env[1447]: time="2025-09-13T01:33:30.137334107Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-8ds5r,Uid:ddddcc61-e927-42cf-8461-ba98f8f408bd,Namespace:calico-apiserver,Attempt:0,}" Sep 13 01:33:30.137853 env[1447]: time="2025-09-13T01:33:30.137824386Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-t8fkc,Uid:43c6eaa8-fda6-473c-b002-26d293c3cf62,Namespace:kube-system,Attempt:0,}" Sep 13 01:33:30.148176 env[1447]: time="2025-09-13T01:33:30.147950695Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d66856c58-zgwwq,Uid:5e4bc629-7106-42a7-8f0b-73740c96de56,Namespace:calico-apiserver,Attempt:0,}" Sep 13 01:33:30.148553 env[1447]: time="2025-09-13T01:33:30.148307814Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7d69989445-pg8j2,Uid:c3714508-07d9-482b-9c6e-7440b4ca147e,Namespace:calico-system,Attempt:0,}" Sep 13 01:33:30.148553 env[1447]: time="2025-09-13T01:33:30.148413734Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78c5b7c8f4-5d5nl,Uid:52df943e-5550-4ee4-87ef-5b65208ddbbc,Namespace:calico-system,Attempt:0,}" Sep 13 01:33:30.336848 env[1447]: time="2025-09-13T01:33:30.336776400Z" level=info msg="shim disconnected" id=a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848 Sep 13 01:33:30.336848 env[1447]: time="2025-09-13T01:33:30.336838800Z" level=warning msg="cleaning up after shim disconnected" id=a02524bf1f6bf401d7f0a3ff6743316794a2a3627094d030f7115d476f7ad848 namespace=k8s.io Sep 13 01:33:30.336848 env[1447]: time="2025-09-13T01:33:30.336848080Z" level=info msg="cleaning up dead shim" Sep 13 01:33:30.344409 env[1447]: time="2025-09-13T01:33:30.344362671Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:33:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3135 runtime=io.containerd.runc.v2\n" Sep 13 01:33:30.649208 env[1447]: time="2025-09-13T01:33:30.649139245Z" level=error msg="Failed to destroy network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.649995 env[1447]: time="2025-09-13T01:33:30.649959364Z" level=error msg="encountered an error cleaning up failed sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.650139 env[1447]: time="2025-09-13T01:33:30.650113564Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8rf89,Uid:1a57959b-d271-4cd6-940b-885d382531e4,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.656310 kubelet[2414]: E0913 01:33:30.656257 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.657793 kubelet[2414]: E0913 01:33:30.656320 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-8rf89" Sep 13 01:33:30.657793 kubelet[2414]: E0913 01:33:30.656339 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-8rf89" Sep 13 01:33:30.657793 kubelet[2414]: E0913 01:33:30.656372 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-8rf89_calico-system(1a57959b-d271-4cd6-940b-885d382531e4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-8rf89_calico-system(1a57959b-d271-4cd6-940b-885d382531e4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-8rf89" podUID="1a57959b-d271-4cd6-940b-885d382531e4" Sep 13 01:33:30.756270 env[1447]: time="2025-09-13T01:33:30.756211923Z" level=error msg="Failed to destroy network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.756778 env[1447]: time="2025-09-13T01:33:30.756745283Z" level=error msg="encountered an error cleaning up failed sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.756910 env[1447]: time="2025-09-13T01:33:30.756882242Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-t8fkc,Uid:43c6eaa8-fda6-473c-b002-26d293c3cf62,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.757174 kubelet[2414]: E0913 01:33:30.757132 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.757243 kubelet[2414]: E0913 01:33:30.757193 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-t8fkc" Sep 13 01:33:30.757243 kubelet[2414]: E0913 01:33:30.757213 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-t8fkc" Sep 13 01:33:30.757296 kubelet[2414]: E0913 01:33:30.757251 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-t8fkc_kube-system(43c6eaa8-fda6-473c-b002-26d293c3cf62)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-t8fkc_kube-system(43c6eaa8-fda6-473c-b002-26d293c3cf62)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-t8fkc" podUID="43c6eaa8-fda6-473c-b002-26d293c3cf62" Sep 13 01:33:30.780904 env[1447]: time="2025-09-13T01:33:30.780838615Z" level=error msg="Failed to destroy network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.781340 env[1447]: time="2025-09-13T01:33:30.781291775Z" level=error msg="encountered an error cleaning up failed sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.781403 env[1447]: time="2025-09-13T01:33:30.781352695Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-7k6rx,Uid:a6cbb0ca-3390-4a37-8c80-d5a01d422ca6,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.781651 kubelet[2414]: E0913 01:33:30.781599 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.781746 kubelet[2414]: E0913 01:33:30.781687 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" Sep 13 01:33:30.781746 kubelet[2414]: E0913 01:33:30.781707 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" Sep 13 01:33:30.781807 kubelet[2414]: E0913 01:33:30.781762 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-84855b6446-7k6rx_calico-apiserver(a6cbb0ca-3390-4a37-8c80-d5a01d422ca6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-84855b6446-7k6rx_calico-apiserver(a6cbb0ca-3390-4a37-8c80-d5a01d422ca6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" podUID="a6cbb0ca-3390-4a37-8c80-d5a01d422ca6" Sep 13 01:33:30.788864 env[1447]: time="2025-09-13T01:33:30.788810006Z" level=error msg="Failed to destroy network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.789375 env[1447]: time="2025-09-13T01:33:30.789340485Z" level=error msg="encountered an error cleaning up failed sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.789503 env[1447]: time="2025-09-13T01:33:30.789478525Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d66856c58-zgwwq,Uid:5e4bc629-7106-42a7-8f0b-73740c96de56,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.789853 kubelet[2414]: E0913 01:33:30.789806 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.789940 kubelet[2414]: E0913 01:33:30.789869 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7d66856c58-zgwwq" Sep 13 01:33:30.789940 kubelet[2414]: E0913 01:33:30.789887 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7d66856c58-zgwwq" Sep 13 01:33:30.789993 kubelet[2414]: E0913 01:33:30.789924 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7d66856c58-zgwwq_calico-apiserver(5e4bc629-7106-42a7-8f0b-73740c96de56)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7d66856c58-zgwwq_calico-apiserver(5e4bc629-7106-42a7-8f0b-73740c96de56)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7d66856c58-zgwwq" podUID="5e4bc629-7106-42a7-8f0b-73740c96de56" Sep 13 01:33:30.813743 env[1447]: time="2025-09-13T01:33:30.813684938Z" level=error msg="Failed to destroy network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.814983 env[1447]: time="2025-09-13T01:33:30.814944536Z" level=error msg="encountered an error cleaning up failed sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.815127 env[1447]: time="2025-09-13T01:33:30.815100816Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78c5b7c8f4-5d5nl,Uid:52df943e-5550-4ee4-87ef-5b65208ddbbc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.815491 kubelet[2414]: E0913 01:33:30.815447 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.815568 kubelet[2414]: E0913 01:33:30.815518 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-78c5b7c8f4-5d5nl" Sep 13 01:33:30.815568 kubelet[2414]: E0913 01:33:30.815536 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-78c5b7c8f4-5d5nl" Sep 13 01:33:30.815624 kubelet[2414]: E0913 01:33:30.815590 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-78c5b7c8f4-5d5nl_calico-system(52df943e-5550-4ee4-87ef-5b65208ddbbc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-78c5b7c8f4-5d5nl_calico-system(52df943e-5550-4ee4-87ef-5b65208ddbbc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-78c5b7c8f4-5d5nl" podUID="52df943e-5550-4ee4-87ef-5b65208ddbbc" Sep 13 01:33:30.827573 env[1447]: time="2025-09-13T01:33:30.827499522Z" level=error msg="Failed to destroy network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.828266 env[1447]: time="2025-09-13T01:33:30.828222641Z" level=error msg="encountered an error cleaning up failed sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.828357 env[1447]: time="2025-09-13T01:33:30.828285921Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-8ds5r,Uid:ddddcc61-e927-42cf-8461-ba98f8f408bd,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.828549 kubelet[2414]: E0913 01:33:30.828503 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.828624 kubelet[2414]: E0913 01:33:30.828578 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84855b6446-8ds5r" Sep 13 01:33:30.828624 kubelet[2414]: E0913 01:33:30.828597 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-84855b6446-8ds5r" Sep 13 01:33:30.828717 kubelet[2414]: E0913 01:33:30.828644 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-84855b6446-8ds5r_calico-apiserver(ddddcc61-e927-42cf-8461-ba98f8f408bd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-84855b6446-8ds5r_calico-apiserver(ddddcc61-e927-42cf-8461-ba98f8f408bd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84855b6446-8ds5r" podUID="ddddcc61-e927-42cf-8461-ba98f8f408bd" Sep 13 01:33:30.830417 env[1447]: time="2025-09-13T01:33:30.830376759Z" level=error msg="Failed to destroy network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.831039 env[1447]: time="2025-09-13T01:33:30.830999718Z" level=error msg="encountered an error cleaning up failed sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.831182 env[1447]: time="2025-09-13T01:33:30.831152918Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9kprh,Uid:3e03f1c0-901c-40fa-b26f-00188c44bf4b,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.831504 kubelet[2414]: E0913 01:33:30.831465 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.831570 kubelet[2414]: E0913 01:33:30.831529 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-9kprh" Sep 13 01:33:30.831570 kubelet[2414]: E0913 01:33:30.831549 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-9kprh" Sep 13 01:33:30.831640 kubelet[2414]: E0913 01:33:30.831616 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-9kprh_kube-system(3e03f1c0-901c-40fa-b26f-00188c44bf4b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-9kprh_kube-system(3e03f1c0-901c-40fa-b26f-00188c44bf4b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-9kprh" podUID="3e03f1c0-901c-40fa-b26f-00188c44bf4b" Sep 13 01:33:30.836218 env[1447]: time="2025-09-13T01:33:30.836161832Z" level=error msg="Failed to destroy network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.837985 env[1447]: time="2025-09-13T01:33:30.837942710Z" level=error msg="encountered an error cleaning up failed sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.838130 env[1447]: time="2025-09-13T01:33:30.838105950Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7d69989445-pg8j2,Uid:c3714508-07d9-482b-9c6e-7440b4ca147e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.838464 kubelet[2414]: E0913 01:33:30.838426 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:30.838528 kubelet[2414]: E0913 01:33:30.838504 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7d69989445-pg8j2" Sep 13 01:33:30.838558 kubelet[2414]: E0913 01:33:30.838525 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7d69989445-pg8j2" Sep 13 01:33:30.838624 kubelet[2414]: E0913 01:33:30.838590 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7d69989445-pg8j2_calico-system(c3714508-07d9-482b-9c6e-7440b4ca147e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7d69989445-pg8j2_calico-system(c3714508-07d9-482b-9c6e-7440b4ca147e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7d69989445-pg8j2" podUID="c3714508-07d9-482b-9c6e-7440b4ca147e" Sep 13 01:33:31.036702 env[1447]: time="2025-09-13T01:33:31.036629845Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-dn9x6,Uid:8b6a17d7-5c99-4a44-aee7-e6e39838b3d3,Namespace:calico-system,Attempt:0,}" Sep 13 01:33:31.119615 kubelet[2414]: I0913 01:33:31.118974 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:31.120016 env[1447]: time="2025-09-13T01:33:31.119982432Z" level=info msg="StopPodSandbox for \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\"" Sep 13 01:33:31.122996 kubelet[2414]: I0913 01:33:31.122547 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:31.123130 env[1447]: time="2025-09-13T01:33:31.123076469Z" level=info msg="StopPodSandbox for \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\"" Sep 13 01:33:31.124580 kubelet[2414]: I0913 01:33:31.124199 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:31.124904 env[1447]: time="2025-09-13T01:33:31.124874707Z" level=info msg="StopPodSandbox for \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\"" Sep 13 01:33:31.127706 kubelet[2414]: I0913 01:33:31.127337 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:31.128025 env[1447]: time="2025-09-13T01:33:31.127972143Z" level=info msg="StopPodSandbox for \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\"" Sep 13 01:33:31.130140 kubelet[2414]: I0913 01:33:31.129737 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:31.130715 env[1447]: time="2025-09-13T01:33:31.130685940Z" level=info msg="StopPodSandbox for \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\"" Sep 13 01:33:31.133080 kubelet[2414]: I0913 01:33:31.132681 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:31.133367 env[1447]: time="2025-09-13T01:33:31.133326137Z" level=info msg="StopPodSandbox for \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\"" Sep 13 01:33:31.135055 kubelet[2414]: I0913 01:33:31.135030 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:31.135919 env[1447]: time="2025-09-13T01:33:31.135887775Z" level=info msg="StopPodSandbox for \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\"" Sep 13 01:33:31.139871 env[1447]: time="2025-09-13T01:33:31.139844450Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\"" Sep 13 01:33:31.147171 kubelet[2414]: I0913 01:33:31.146259 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:31.153140 env[1447]: time="2025-09-13T01:33:31.153094995Z" level=info msg="StopPodSandbox for \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\"" Sep 13 01:33:31.217609 env[1447]: time="2025-09-13T01:33:31.217556364Z" level=error msg="StopPodSandbox for \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\" failed" error="failed to destroy network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.218271 kubelet[2414]: E0913 01:33:31.218008 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:31.218271 kubelet[2414]: E0913 01:33:31.218106 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d"} Sep 13 01:33:31.218271 kubelet[2414]: E0913 01:33:31.218186 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5e4bc629-7106-42a7-8f0b-73740c96de56\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.218271 kubelet[2414]: E0913 01:33:31.218208 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5e4bc629-7106-42a7-8f0b-73740c96de56\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7d66856c58-zgwwq" podUID="5e4bc629-7106-42a7-8f0b-73740c96de56" Sep 13 01:33:31.236844 env[1447]: time="2025-09-13T01:33:31.236774262Z" level=error msg="StopPodSandbox for \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\" failed" error="failed to destroy network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.237198 kubelet[2414]: E0913 01:33:31.237148 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:31.237263 kubelet[2414]: E0913 01:33:31.237208 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7"} Sep 13 01:33:31.237263 kubelet[2414]: E0913 01:33:31.237242 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ddddcc61-e927-42cf-8461-ba98f8f408bd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.237349 kubelet[2414]: E0913 01:33:31.237264 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ddddcc61-e927-42cf-8461-ba98f8f408bd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84855b6446-8ds5r" podUID="ddddcc61-e927-42cf-8461-ba98f8f408bd" Sep 13 01:33:31.264232 env[1447]: time="2025-09-13T01:33:31.264172352Z" level=error msg="StopPodSandbox for \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\" failed" error="failed to destroy network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.264673 kubelet[2414]: E0913 01:33:31.264605 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:31.264755 kubelet[2414]: E0913 01:33:31.264683 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276"} Sep 13 01:33:31.264755 kubelet[2414]: E0913 01:33:31.264719 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.264755 kubelet[2414]: E0913 01:33:31.264741 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" podUID="a6cbb0ca-3390-4a37-8c80-d5a01d422ca6" Sep 13 01:33:31.272455 env[1447]: time="2025-09-13T01:33:31.272389902Z" level=error msg="StopPodSandbox for \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\" failed" error="failed to destroy network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.272909 kubelet[2414]: E0913 01:33:31.272758 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:31.272909 kubelet[2414]: E0913 01:33:31.272807 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902"} Sep 13 01:33:31.272909 kubelet[2414]: E0913 01:33:31.272848 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3e03f1c0-901c-40fa-b26f-00188c44bf4b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.272909 kubelet[2414]: E0913 01:33:31.272874 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3e03f1c0-901c-40fa-b26f-00188c44bf4b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-9kprh" podUID="3e03f1c0-901c-40fa-b26f-00188c44bf4b" Sep 13 01:33:31.283811 env[1447]: time="2025-09-13T01:33:31.283751250Z" level=error msg="StopPodSandbox for \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\" failed" error="failed to destroy network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.284214 kubelet[2414]: E0913 01:33:31.284168 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:31.284289 kubelet[2414]: E0913 01:33:31.284255 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8"} Sep 13 01:33:31.284323 kubelet[2414]: E0913 01:33:31.284290 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"52df943e-5550-4ee4-87ef-5b65208ddbbc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.284382 kubelet[2414]: E0913 01:33:31.284313 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"52df943e-5550-4ee4-87ef-5b65208ddbbc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-78c5b7c8f4-5d5nl" podUID="52df943e-5550-4ee4-87ef-5b65208ddbbc" Sep 13 01:33:31.284475 env[1447]: time="2025-09-13T01:33:31.284203409Z" level=error msg="StopPodSandbox for \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\" failed" error="failed to destroy network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.284770 kubelet[2414]: E0913 01:33:31.284672 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:31.284770 kubelet[2414]: E0913 01:33:31.284698 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a"} Sep 13 01:33:31.284770 kubelet[2414]: E0913 01:33:31.284718 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"43c6eaa8-fda6-473c-b002-26d293c3cf62\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.284770 kubelet[2414]: E0913 01:33:31.284748 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"43c6eaa8-fda6-473c-b002-26d293c3cf62\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-t8fkc" podUID="43c6eaa8-fda6-473c-b002-26d293c3cf62" Sep 13 01:33:31.301842 env[1447]: time="2025-09-13T01:33:31.300606951Z" level=error msg="Failed to destroy network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.301842 env[1447]: time="2025-09-13T01:33:31.301398310Z" level=error msg="encountered an error cleaning up failed sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.301842 env[1447]: time="2025-09-13T01:33:31.301681910Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-dn9x6,Uid:8b6a17d7-5c99-4a44-aee7-e6e39838b3d3,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.302260 kubelet[2414]: E0913 01:33:31.302208 2414 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.302345 kubelet[2414]: E0913 01:33:31.302272 2414 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-dn9x6" Sep 13 01:33:31.302345 kubelet[2414]: E0913 01:33:31.302293 2414 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-54d579b49d-dn9x6" Sep 13 01:33:31.302398 kubelet[2414]: E0913 01:33:31.302344 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-54d579b49d-dn9x6_calico-system(8b6a17d7-5c99-4a44-aee7-e6e39838b3d3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-54d579b49d-dn9x6_calico-system(8b6a17d7-5c99-4a44-aee7-e6e39838b3d3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-dn9x6" podUID="8b6a17d7-5c99-4a44-aee7-e6e39838b3d3" Sep 13 01:33:31.304513 env[1447]: time="2025-09-13T01:33:31.304463827Z" level=error msg="StopPodSandbox for \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\" failed" error="failed to destroy network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.304921 kubelet[2414]: E0913 01:33:31.304782 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:31.304921 kubelet[2414]: E0913 01:33:31.304832 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90"} Sep 13 01:33:31.304921 kubelet[2414]: E0913 01:33:31.304869 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c3714508-07d9-482b-9c6e-7440b4ca147e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.304921 kubelet[2414]: E0913 01:33:31.304898 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c3714508-07d9-482b-9c6e-7440b4ca147e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7d69989445-pg8j2" podUID="c3714508-07d9-482b-9c6e-7440b4ca147e" Sep 13 01:33:31.307163 env[1447]: time="2025-09-13T01:33:31.307116784Z" level=error msg="StopPodSandbox for \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\" failed" error="failed to destroy network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:31.307328 kubelet[2414]: E0913 01:33:31.307284 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:31.307382 kubelet[2414]: E0913 01:33:31.307334 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86"} Sep 13 01:33:31.307382 kubelet[2414]: E0913 01:33:31.307360 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1a57959b-d271-4cd6-940b-885d382531e4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:31.307453 kubelet[2414]: E0913 01:33:31.307381 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1a57959b-d271-4cd6-940b-885d382531e4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-8rf89" podUID="1a57959b-d271-4cd6-940b-885d382531e4" Sep 13 01:33:31.450009 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276-shm.mount: Deactivated successfully. Sep 13 01:33:31.450093 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86-shm.mount: Deactivated successfully. Sep 13 01:33:32.149705 kubelet[2414]: I0913 01:33:32.149252 2414 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:32.150061 env[1447]: time="2025-09-13T01:33:32.150013488Z" level=info msg="StopPodSandbox for \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\"" Sep 13 01:33:32.179634 env[1447]: time="2025-09-13T01:33:32.179578775Z" level=error msg="StopPodSandbox for \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\" failed" error="failed to destroy network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Sep 13 01:33:32.180181 kubelet[2414]: E0913 01:33:32.180014 2414 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:32.180181 kubelet[2414]: E0913 01:33:32.180071 2414 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb"} Sep 13 01:33:32.180181 kubelet[2414]: E0913 01:33:32.180107 2414 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Sep 13 01:33:32.180181 kubelet[2414]: E0913 01:33:32.180128 2414 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-54d579b49d-dn9x6" podUID="8b6a17d7-5c99-4a44-aee7-e6e39838b3d3" Sep 13 01:33:36.363278 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2328633226.mount: Deactivated successfully. Sep 13 01:33:36.456179 env[1447]: time="2025-09-13T01:33:36.456124221Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:36.465168 env[1447]: time="2025-09-13T01:33:36.465124292Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:36.472912 env[1447]: time="2025-09-13T01:33:36.472872924Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:36.477247 env[1447]: time="2025-09-13T01:33:36.477212240Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:bcb8146fcaeced1e1c88fad3eaa697f1680746bd23c3e7e8d4535bc484c6f2a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:36.477594 env[1447]: time="2025-09-13T01:33:36.477562480Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.3\" returns image reference \"sha256:2b8abd2140fc4464ed664d225fe38e5b90bbfcf62996b484b0fc0e0537b6a4a9\"" Sep 13 01:33:36.496452 env[1447]: time="2025-09-13T01:33:36.496406261Z" level=info msg="CreateContainer within sandbox \"33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Sep 13 01:33:36.549015 env[1447]: time="2025-09-13T01:33:36.548966967Z" level=info msg="CreateContainer within sandbox \"33b5d888c1d4d3e4232d8f19817ebe5f4bc4e456474fe65516aeefa30f9ffb22\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920\"" Sep 13 01:33:36.551120 env[1447]: time="2025-09-13T01:33:36.551060605Z" level=info msg="StartContainer for \"4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920\"" Sep 13 01:33:36.569129 systemd[1]: Started cri-containerd-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920.scope. Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.593979 kernel: kauditd_printk_skb: 40 callbacks suppressed Sep 13 01:33:36.594085 kernel: audit: type=1400 audit(1757727216.586:1030): avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2872 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:36.646549 kernel: audit: type=1300 audit(1757727216.586:1030): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2872 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:36.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466313933386530663865663066316466353262346433643861343761 Sep 13 01:33:36.680592 kernel: audit: type=1327 audit(1757727216.586:1030): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466313933386530663865663066316466353262346433643861343761 Sep 13 01:33:36.680765 kernel: audit: type=1400 audit(1757727216.586:1031): avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.717607 kernel: audit: type=1400 audit(1757727216.586:1031): avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.739473 kernel: audit: type=1400 audit(1757727216.586:1031): avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.760810 kernel: audit: type=1400 audit(1757727216.586:1031): avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.761572 kernel: audit: type=1400 audit(1757727216.586:1031): avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.809678 kernel: audit: type=1400 audit(1757727216.586:1031): avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.833227 kernel: audit: type=1400 audit(1757727216.586:1031): avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit: BPF prog-id=140 op=LOAD Sep 13 01:33:36.586000 audit[3535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2872 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:36.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466313933386530663865663066316466353262346433643861343761 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit: BPF prog-id=141 op=LOAD Sep 13 01:33:36.586000 audit[3535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2872 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:36.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466313933386530663865663066316466353262346433643861343761 Sep 13 01:33:36.586000 audit: BPF prog-id=141 op=UNLOAD Sep 13 01:33:36.586000 audit: BPF prog-id=140 op=UNLOAD Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:36.586000 audit: BPF prog-id=142 op=LOAD Sep 13 01:33:36.586000 audit[3535]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2872 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:36.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466313933386530663865663066316466353262346433643861343761 Sep 13 01:33:36.876878 env[1447]: time="2025-09-13T01:33:36.876826075Z" level=info msg="StartContainer for \"4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920\" returns successfully" Sep 13 01:33:37.533081 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Sep 13 01:33:37.533261 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Sep 13 01:33:37.666948 kubelet[2414]: I0913 01:33:37.666875 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-plx77" podStartSLOduration=2.517499253 podStartE2EDuration="18.666846807s" podCreationTimestamp="2025-09-13 01:33:19 +0000 UTC" firstStartedPulling="2025-09-13 01:33:20.329287005 +0000 UTC m=+25.551585314" lastFinishedPulling="2025-09-13 01:33:36.478634599 +0000 UTC m=+41.700932868" observedRunningTime="2025-09-13 01:33:37.182981049 +0000 UTC m=+42.405279358" watchObservedRunningTime="2025-09-13 01:33:37.666846807 +0000 UTC m=+42.889145076" Sep 13 01:33:37.668307 env[1447]: time="2025-09-13T01:33:37.668270526Z" level=info msg="StopPodSandbox for \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\"" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.766 [INFO][3609] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.766 [INFO][3609] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" iface="eth0" netns="/var/run/netns/cni-0a399bf1-46b2-6d9d-a3a8-08b4d6188aa7" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.766 [INFO][3609] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" iface="eth0" netns="/var/run/netns/cni-0a399bf1-46b2-6d9d-a3a8-08b4d6188aa7" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.768 [INFO][3609] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" iface="eth0" netns="/var/run/netns/cni-0a399bf1-46b2-6d9d-a3a8-08b4d6188aa7" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.769 [INFO][3609] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.769 [INFO][3609] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.809 [INFO][3617] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.809 [INFO][3617] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.809 [INFO][3617] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.820 [WARNING][3617] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.820 [INFO][3617] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.821 [INFO][3617] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:37.825395 env[1447]: 2025-09-13 01:33:37.823 [INFO][3609] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:37.847798 env[1447]: time="2025-09-13T01:33:37.828234327Z" level=info msg="TearDown network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\" successfully" Sep 13 01:33:37.847798 env[1447]: time="2025-09-13T01:33:37.828273127Z" level=info msg="StopPodSandbox for \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\" returns successfully" Sep 13 01:33:37.828141 systemd[1]: run-netns-cni\x2d0a399bf1\x2d46b2\x2d6d9d\x2da3a8\x2d08b4d6188aa7.mount: Deactivated successfully. Sep 13 01:33:37.968473 kubelet[2414]: I0913 01:33:37.968298 2414 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-backend-key-pair\") pod \"c3714508-07d9-482b-9c6e-7440b4ca147e\" (UID: \"c3714508-07d9-482b-9c6e-7440b4ca147e\") " Sep 13 01:33:37.968473 kubelet[2414]: I0913 01:33:37.968340 2414 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-ca-bundle\") pod \"c3714508-07d9-482b-9c6e-7440b4ca147e\" (UID: \"c3714508-07d9-482b-9c6e-7440b4ca147e\") " Sep 13 01:33:37.968473 kubelet[2414]: I0913 01:33:37.968378 2414 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-chh56\" (UniqueName: \"kubernetes.io/projected/c3714508-07d9-482b-9c6e-7440b4ca147e-kube-api-access-chh56\") pod \"c3714508-07d9-482b-9c6e-7440b4ca147e\" (UID: \"c3714508-07d9-482b-9c6e-7440b4ca147e\") " Sep 13 01:33:37.969249 kubelet[2414]: I0913 01:33:37.969031 2414 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "c3714508-07d9-482b-9c6e-7440b4ca147e" (UID: "c3714508-07d9-482b-9c6e-7440b4ca147e"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Sep 13 01:33:37.977247 systemd[1]: var-lib-kubelet-pods-c3714508\x2d07d9\x2d482b\x2d9c6e\x2d7440b4ca147e-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Sep 13 01:33:37.978750 kubelet[2414]: I0913 01:33:37.978718 2414 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "c3714508-07d9-482b-9c6e-7440b4ca147e" (UID: "c3714508-07d9-482b-9c6e-7440b4ca147e"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 13 01:33:37.981407 systemd[1]: var-lib-kubelet-pods-c3714508\x2d07d9\x2d482b\x2d9c6e\x2d7440b4ca147e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dchh56.mount: Deactivated successfully. Sep 13 01:33:37.983251 kubelet[2414]: I0913 01:33:37.983216 2414 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c3714508-07d9-482b-9c6e-7440b4ca147e-kube-api-access-chh56" (OuterVolumeSpecName: "kube-api-access-chh56") pod "c3714508-07d9-482b-9c6e-7440b4ca147e" (UID: "c3714508-07d9-482b-9c6e-7440b4ca147e"). InnerVolumeSpecName "kube-api-access-chh56". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 13 01:33:38.069313 kubelet[2414]: I0913 01:33:38.069274 2414 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-12daba8686\" DevicePath \"\"" Sep 13 01:33:38.069313 kubelet[2414]: I0913 01:33:38.069308 2414 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c3714508-07d9-482b-9c6e-7440b4ca147e-whisker-ca-bundle\") on node \"ci-3510.3.8-n-12daba8686\" DevicePath \"\"" Sep 13 01:33:38.069313 kubelet[2414]: I0913 01:33:38.069319 2414 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-chh56\" (UniqueName: \"kubernetes.io/projected/c3714508-07d9-482b-9c6e-7440b4ca147e-kube-api-access-chh56\") on node \"ci-3510.3.8-n-12daba8686\" DevicePath \"\"" Sep 13 01:33:38.166881 systemd[1]: Removed slice kubepods-besteffort-podc3714508_07d9_482b_9c6e_7440b4ca147e.slice. Sep 13 01:33:38.252224 systemd[1]: Created slice kubepods-besteffort-pod7aa8a8ac_772a_495a_953b_d42cf8370416.slice. Sep 13 01:33:38.370856 kubelet[2414]: I0913 01:33:38.370819 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/7aa8a8ac-772a-495a-953b-d42cf8370416-whisker-backend-key-pair\") pod \"whisker-68dd75554d-sgt5w\" (UID: \"7aa8a8ac-772a-495a-953b-d42cf8370416\") " pod="calico-system/whisker-68dd75554d-sgt5w" Sep 13 01:33:38.371077 kubelet[2414]: I0913 01:33:38.371063 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dxll7\" (UniqueName: \"kubernetes.io/projected/7aa8a8ac-772a-495a-953b-d42cf8370416-kube-api-access-dxll7\") pod \"whisker-68dd75554d-sgt5w\" (UID: \"7aa8a8ac-772a-495a-953b-d42cf8370416\") " pod="calico-system/whisker-68dd75554d-sgt5w" Sep 13 01:33:38.371191 kubelet[2414]: I0913 01:33:38.371178 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7aa8a8ac-772a-495a-953b-d42cf8370416-whisker-ca-bundle\") pod \"whisker-68dd75554d-sgt5w\" (UID: \"7aa8a8ac-772a-495a-953b-d42cf8370416\") " pod="calico-system/whisker-68dd75554d-sgt5w" Sep 13 01:33:38.559077 env[1447]: time="2025-09-13T01:33:38.558744850Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68dd75554d-sgt5w,Uid:7aa8a8ac-772a-495a-953b-d42cf8370416,Namespace:calico-system,Attempt:0,}" Sep 13 01:33:38.777342 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:33:38.777583 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali204c0e35801: link becomes ready Sep 13 01:33:38.785148 systemd-networkd[1601]: cali204c0e35801: Link UP Sep 13 01:33:38.785297 systemd-networkd[1601]: cali204c0e35801: Gained carrier Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.628 [INFO][3660] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.640 [INFO][3660] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0 whisker-68dd75554d- calico-system 7aa8a8ac-772a-495a-953b-d42cf8370416 939 0 2025-09-13 01:33:38 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:68dd75554d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 whisker-68dd75554d-sgt5w eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali204c0e35801 [] [] }} ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.641 [INFO][3660] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.667 [INFO][3673] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" HandleID="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.667 [INFO][3673] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" HandleID="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-12daba8686", "pod":"whisker-68dd75554d-sgt5w", "timestamp":"2025-09-13 01:33:38.667132264 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.667 [INFO][3673] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.667 [INFO][3673] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.667 [INFO][3673] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.676 [INFO][3673] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.680 [INFO][3673] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.684 [INFO][3673] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.686 [INFO][3673] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.687 [INFO][3673] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.687 [INFO][3673] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.689 [INFO][3673] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.694 [INFO][3673] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.710 [INFO][3673] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.193/26] block=192.168.19.192/26 handle="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.710 [INFO][3673] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.193/26] handle="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.710 [INFO][3673] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:38.807293 env[1447]: 2025-09-13 01:33:38.710 [INFO][3673] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.193/26] IPv6=[] ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" HandleID="k8s-pod-network.afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" Sep 13 01:33:38.808072 env[1447]: 2025-09-13 01:33:38.713 [INFO][3660] cni-plugin/k8s.go 418: Populated endpoint ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0", GenerateName:"whisker-68dd75554d-", Namespace:"calico-system", SelfLink:"", UID:"7aa8a8ac-772a-495a-953b-d42cf8370416", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"68dd75554d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"whisker-68dd75554d-sgt5w", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.19.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali204c0e35801", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:38.808072 env[1447]: 2025-09-13 01:33:38.713 [INFO][3660] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.193/32] ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" Sep 13 01:33:38.808072 env[1447]: 2025-09-13 01:33:38.713 [INFO][3660] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali204c0e35801 ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" Sep 13 01:33:38.808072 env[1447]: 2025-09-13 01:33:38.784 [INFO][3660] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" Sep 13 01:33:38.808072 env[1447]: 2025-09-13 01:33:38.786 [INFO][3660] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0", GenerateName:"whisker-68dd75554d-", Namespace:"calico-system", SelfLink:"", UID:"7aa8a8ac-772a-495a-953b-d42cf8370416", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"68dd75554d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf", Pod:"whisker-68dd75554d-sgt5w", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.19.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali204c0e35801", MAC:"3a:df:a1:e9:8e:8b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:38.808072 env[1447]: 2025-09-13 01:33:38.804 [INFO][3660] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf" Namespace="calico-system" Pod="whisker-68dd75554d-sgt5w" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--68dd75554d--sgt5w-eth0" Sep 13 01:33:38.820081 env[1447]: time="2025-09-13T01:33:38.819950835Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:38.820252 env[1447]: time="2025-09-13T01:33:38.820228395Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:38.820403 env[1447]: time="2025-09-13T01:33:38.820381115Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:38.820928 env[1447]: time="2025-09-13T01:33:38.820887314Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf pid=3696 runtime=io.containerd.runc.v2 Sep 13 01:33:38.835119 systemd[1]: Started cri-containerd-afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf.scope. Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.848000 audit: BPF prog-id=143 op=LOAD Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3696 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633030323337303634373834326236313938663235303833313766 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3696 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633030323337303634373834326236313938663235303833313766 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit: BPF prog-id=144 op=LOAD Sep 13 01:33:38.849000 audit[3706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3696 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633030323337303634373834326236313938663235303833313766 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit: BPF prog-id=145 op=LOAD Sep 13 01:33:38.849000 audit[3706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3696 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633030323337303634373834326236313938663235303833313766 Sep 13 01:33:38.849000 audit: BPF prog-id=145 op=UNLOAD Sep 13 01:33:38.849000 audit: BPF prog-id=144 op=UNLOAD Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:38.849000 audit: BPF prog-id=146 op=LOAD Sep 13 01:33:38.849000 audit[3706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3696 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166633030323337303634373834326236313938663235303833313766 Sep 13 01:33:38.868418 env[1447]: time="2025-09-13T01:33:38.868371548Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68dd75554d-sgt5w,Uid:7aa8a8ac-772a-495a-953b-d42cf8370416,Namespace:calico-system,Attempt:0,} returns sandbox id \"afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf\"" Sep 13 01:33:38.871894 env[1447]: time="2025-09-13T01:33:38.870204946Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\"" Sep 13 01:33:38.992000 audit[3786]: AVC avc: denied { write } for pid=3786 comm="tee" name="fd" dev="proc" ino=25092 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:33:38.994000 audit[3783]: AVC avc: denied { write } for pid=3783 comm="tee" name="fd" dev="proc" ino=25846 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:33:38.994000 audit[3783]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd5d8b7c8 a2=241 a3=1b6 items=1 ppid=3739 pid=3783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.994000 audit: CWD cwd="/etc/service/enabled/bird/log" Sep 13 01:33:38.994000 audit: PATH item=0 name="/dev/fd/63" inode=25082 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:33:38.994000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:33:38.996000 audit[3781]: AVC avc: denied { write } for pid=3781 comm="tee" name="fd" dev="proc" ino=25095 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:33:38.997000 audit[3780]: AVC avc: denied { write } for pid=3780 comm="tee" name="fd" dev="proc" ino=25098 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:33:38.992000 audit[3786]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffa7a97c7 a2=241 a3=1b6 items=1 ppid=3736 pid=3786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.004002 kubelet[2414]: I0913 01:33:39.003834 2414 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="c3714508-07d9-482b-9c6e-7440b4ca147e" path="/var/lib/kubelet/pods/c3714508-07d9-482b-9c6e-7440b4ca147e/volumes" Sep 13 01:33:38.992000 audit: CWD cwd="/etc/service/enabled/bird6/log" Sep 13 01:33:38.992000 audit: PATH item=0 name="/dev/fd/63" inode=25083 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:33:38.992000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:33:38.997000 audit[3780]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc8b3c7b7 a2=241 a3=1b6 items=1 ppid=3740 pid=3780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.997000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Sep 13 01:33:38.997000 audit: PATH item=0 name="/dev/fd/63" inode=25081 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:33:38.997000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:33:38.996000 audit[3781]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff2fb87c9 a2=241 a3=1b6 items=1 ppid=3738 pid=3781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:38.996000 audit: CWD cwd="/etc/service/enabled/cni/log" Sep 13 01:33:38.996000 audit: PATH item=0 name="/dev/fd/63" inode=25838 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:33:38.996000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:33:39.012000 audit[3789]: AVC avc: denied { write } for pid=3789 comm="tee" name="fd" dev="proc" ino=25108 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:33:39.012000 audit[3789]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffd5b97b8 a2=241 a3=1b6 items=1 ppid=3747 pid=3789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.012000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Sep 13 01:33:39.012000 audit: PATH item=0 name="/dev/fd/63" inode=25841 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:33:39.012000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:33:39.025000 audit[3808]: AVC avc: denied { write } for pid=3808 comm="tee" name="fd" dev="proc" ino=25113 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:33:39.025000 audit[3808]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff3bf07c7 a2=241 a3=1b6 items=1 ppid=3756 pid=3808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.025000 audit: CWD cwd="/etc/service/enabled/confd/log" Sep 13 01:33:39.025000 audit: PATH item=0 name="/dev/fd/63" inode=25110 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:33:39.025000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:33:39.039000 audit[3810]: AVC avc: denied { write } for pid=3810 comm="tee" name="fd" dev="proc" ino=25117 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Sep 13 01:33:39.039000 audit[3810]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd30bf7c7 a2=241 a3=1b6 items=1 ppid=3749 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.039000 audit: CWD cwd="/etc/service/enabled/felix/log" Sep 13 01:33:39.039000 audit: PATH item=0 name="/dev/fd/63" inode=25852 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Sep 13 01:33:39.039000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit: BPF prog-id=147 op=LOAD Sep 13 01:33:39.273000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdda7b608 a2=98 a3=ffffdda7b5f8 items=0 ppid=3753 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.273000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:33:39.273000 audit: BPF prog-id=147 op=UNLOAD Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit: BPF prog-id=148 op=LOAD Sep 13 01:33:39.273000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdda7b4b8 a2=74 a3=95 items=0 ppid=3753 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.273000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:33:39.273000 audit: BPF prog-id=148 op=UNLOAD Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit: BPF prog-id=149 op=LOAD Sep 13 01:33:39.273000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdda7b4e8 a2=40 a3=ffffdda7b518 items=0 ppid=3753 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.273000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:33:39.273000 audit: BPF prog-id=149 op=UNLOAD Sep 13 01:33:39.273000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.273000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffdda7b600 a2=50 a3=0 items=0 ppid=3753 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.273000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.275000 audit: BPF prog-id=150 op=LOAD Sep 13 01:33:39.275000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd983bba8 a2=98 a3=ffffd983bb98 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.275000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.276000 audit: BPF prog-id=150 op=UNLOAD Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.276000 audit: BPF prog-id=151 op=LOAD Sep 13 01:33:39.276000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd983b838 a2=74 a3=95 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.276000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.277000 audit: BPF prog-id=151 op=UNLOAD Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.277000 audit: BPF prog-id=152 op=LOAD Sep 13 01:33:39.277000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd983b898 a2=94 a3=2 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.277000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.278000 audit: BPF prog-id=152 op=UNLOAD Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.385000 audit: BPF prog-id=153 op=LOAD Sep 13 01:33:39.385000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd983b858 a2=40 a3=ffffd983b888 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.385000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.386000 audit: BPF prog-id=153 op=UNLOAD Sep 13 01:33:39.386000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.386000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd983b970 a2=50 a3=0 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.386000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.394000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.394000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd983b8c8 a2=28 a3=ffffd983b9f8 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.394000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.395000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.395000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd983b8f8 a2=28 a3=ffffd983ba28 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.395000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.395000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.395000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd983b7a8 a2=28 a3=ffffd983b8d8 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.395000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.395000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.395000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd983b918 a2=28 a3=ffffd983ba48 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.395000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.395000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.395000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd983b8f8 a2=28 a3=ffffd983ba28 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.395000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.395000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.395000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd983b8e8 a2=28 a3=ffffd983ba18 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.395000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.396000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.396000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd983b918 a2=28 a3=ffffd983ba48 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.396000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.396000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.396000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd983b8f8 a2=28 a3=ffffd983ba28 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.396000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.396000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.396000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd983b918 a2=28 a3=ffffd983ba48 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.396000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.396000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.396000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd983b8e8 a2=28 a3=ffffd983ba18 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.396000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.396000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.396000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd983b968 a2=28 a3=ffffd983baa8 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.396000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd983b6a0 a2=50 a3=0 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.397000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit: BPF prog-id=154 op=LOAD Sep 13 01:33:39.397000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd983b6a8 a2=94 a3=5 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.397000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.397000 audit: BPF prog-id=154 op=UNLOAD Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd983b7b0 a2=50 a3=0 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.397000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.397000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.397000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd983b8f8 a2=4 a3=3 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.397000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.398000 audit[3845]: AVC avc: denied { confidentiality } for pid=3845 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:33:39.398000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd983b8d8 a2=94 a3=6 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.398000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { confidentiality } for pid=3845 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:33:39.399000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd983b0a8 a2=94 a3=83 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.399000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.399000 audit[3845]: AVC avc: denied { confidentiality } for pid=3845 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:33:39.399000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd983b0a8 a2=94 a3=83 items=0 ppid=3753 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.399000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.408000 audit: BPF prog-id=155 op=LOAD Sep 13 01:33:39.408000 audit[3848]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd219d438 a2=98 a3=ffffd219d428 items=0 ppid=3753 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.408000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 01:33:39.409000 audit: BPF prog-id=155 op=UNLOAD Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit: BPF prog-id=156 op=LOAD Sep 13 01:33:39.409000 audit[3848]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd219d2e8 a2=74 a3=95 items=0 ppid=3753 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.409000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 01:33:39.409000 audit: BPF prog-id=156 op=UNLOAD Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { perfmon } for pid=3848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit[3848]: AVC avc: denied { bpf } for pid=3848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.409000 audit: BPF prog-id=157 op=LOAD Sep 13 01:33:39.409000 audit[3848]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd219d318 a2=40 a3=ffffd219d348 items=0 ppid=3753 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.409000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Sep 13 01:33:39.410000 audit: BPF prog-id=157 op=UNLOAD Sep 13 01:33:39.578230 systemd-networkd[1601]: vxlan.calico: Link UP Sep 13 01:33:39.578237 systemd-networkd[1601]: vxlan.calico: Gained carrier Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit: BPF prog-id=158 op=LOAD Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffea41ea98 a2=98 a3=ffffea41ea88 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit: BPF prog-id=158 op=UNLOAD Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit: BPF prog-id=159 op=LOAD Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffea41e778 a2=74 a3=95 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit: BPF prog-id=159 op=UNLOAD Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit: BPF prog-id=160 op=LOAD Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffea41e7d8 a2=94 a3=2 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit: BPF prog-id=160 op=UNLOAD Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffea41e808 a2=28 a3=ffffea41e938 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffea41e838 a2=28 a3=ffffea41e968 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffea41e6e8 a2=28 a3=ffffea41e818 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffea41e858 a2=28 a3=ffffea41e988 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffea41e838 a2=28 a3=ffffea41e968 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffea41e828 a2=28 a3=ffffea41e958 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffea41e858 a2=28 a3=ffffea41e988 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffea41e838 a2=28 a3=ffffea41e968 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffea41e858 a2=28 a3=ffffea41e988 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffea41e828 a2=28 a3=ffffea41e958 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffea41e8a8 a2=28 a3=ffffea41e9e8 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.610000 audit: BPF prog-id=161 op=LOAD Sep 13 01:33:39.610000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffea41e6c8 a2=40 a3=ffffea41e6f8 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.610000 audit: BPF prog-id=161 op=UNLOAD Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffea41e6f0 a2=50 a3=0 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffea41e6f0 a2=50 a3=0 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit: BPF prog-id=162 op=LOAD Sep 13 01:33:39.611000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffea41de58 a2=94 a3=2 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.611000 audit: BPF prog-id=162 op=UNLOAD Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { perfmon } for pid=3875 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit[3875]: AVC avc: denied { bpf } for pid=3875 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.611000 audit: BPF prog-id=163 op=LOAD Sep 13 01:33:39.611000 audit[3875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffea41dfe8 a2=94 a3=30 items=0 ppid=3753 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit: BPF prog-id=164 op=LOAD Sep 13 01:33:39.619000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc3dddfe8 a2=98 a3=ffffc3dddfd8 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.619000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.619000 audit: BPF prog-id=164 op=UNLOAD Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit: BPF prog-id=165 op=LOAD Sep 13 01:33:39.619000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3dddc78 a2=74 a3=95 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.619000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.619000 audit: BPF prog-id=165 op=UNLOAD Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.619000 audit: BPF prog-id=166 op=LOAD Sep 13 01:33:39.619000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3dddcd8 a2=94 a3=2 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.619000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.619000 audit: BPF prog-id=166 op=UNLOAD Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit: BPF prog-id=167 op=LOAD Sep 13 01:33:39.721000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc3dddc98 a2=40 a3=ffffc3dddcc8 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.721000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.721000 audit: BPF prog-id=167 op=UNLOAD Sep 13 01:33:39.721000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.721000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc3ddddb0 a2=50 a3=0 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.721000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3dddd08 a2=28 a3=ffffc3ddde38 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3dddd38 a2=28 a3=ffffc3ddde68 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3dddbe8 a2=28 a3=ffffc3dddd18 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3dddd58 a2=28 a3=ffffc3ddde88 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3dddd38 a2=28 a3=ffffc3ddde68 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3dddd28 a2=28 a3=ffffc3ddde58 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3dddd58 a2=28 a3=ffffc3ddde88 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3dddd38 a2=28 a3=ffffc3ddde68 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3dddd58 a2=28 a3=ffffc3ddde88 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc3dddd28 a2=28 a3=ffffc3ddde58 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc3dddda8 a2=28 a3=ffffc3dddee8 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.730000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.730000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc3dddae0 a2=50 a3=0 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.730000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit: BPF prog-id=168 op=LOAD Sep 13 01:33:39.731000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc3dddae8 a2=94 a3=5 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.731000 audit: BPF prog-id=168 op=UNLOAD Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc3dddbf0 a2=50 a3=0 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc3dddd38 a2=4 a3=3 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { confidentiality } for pid=3877 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:33:39.731000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3dddd18 a2=94 a3=6 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { confidentiality } for pid=3877 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:33:39.731000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3ddd4e8 a2=94 a3=83 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { perfmon } for pid=3877 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { confidentiality } for pid=3877 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Sep 13 01:33:39.731000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc3ddd4e8 a2=94 a3=83 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.731000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.731000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3ddef28 a2=10 a3=ffffc3ddf018 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.731000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.732000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.732000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3ddede8 a2=10 a3=ffffc3ddeed8 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.732000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.732000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.732000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3dded58 a2=10 a3=ffffc3ddeed8 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.732000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.732000 audit[3877]: AVC avc: denied { bpf } for pid=3877 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:39.732000 audit[3877]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc3dded58 a2=10 a3=ffffc3ddeed8 items=0 ppid=3753 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.732000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Sep 13 01:33:39.737000 audit: BPF prog-id=163 op=UNLOAD Sep 13 01:33:39.977876 systemd-networkd[1601]: cali204c0e35801: Gained IPv6LL Sep 13 01:33:39.988000 audit[3905]: NETFILTER_CFG table=mangle:104 family=2 entries=16 op=nft_register_chain pid=3905 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:39.988000 audit[3905]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd4b75430 a2=0 a3=ffff9e917fa8 items=0 ppid=3753 pid=3905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:39.988000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:40.096000 audit[3906]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=3906 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:40.096000 audit[3906]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffde0a7cb0 a2=0 a3=ffff9a9e3fa8 items=0 ppid=3753 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:40.096000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:40.183000 audit[3908]: NETFILTER_CFG table=raw:106 family=2 entries=21 op=nft_register_chain pid=3908 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:40.183000 audit[3908]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffdc91b820 a2=0 a3=ffff7f8a5fa8 items=0 ppid=3753 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:40.183000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:40.222000 audit[3907]: NETFILTER_CFG table=filter:107 family=2 entries=94 op=nft_register_chain pid=3907 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:40.222000 audit[3907]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffd0fd6720 a2=0 a3=ffff88e12fa8 items=0 ppid=3753 pid=3907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:40.222000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:40.904847 env[1447]: time="2025-09-13T01:33:40.904797527Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:40.911700 env[1447]: time="2025-09-13T01:33:40.911659721Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:40.917163 env[1447]: time="2025-09-13T01:33:40.917128396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:40.921595 env[1447]: time="2025-09-13T01:33:40.921563712Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:e7113761fc7633d515882f0d48b5c8d0b8e62f3f9d34823f2ee194bb16d2ec44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:40.922304 env[1447]: time="2025-09-13T01:33:40.922278071Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.3\" returns image reference \"sha256:270a0129ec34c3ad6ae6d56c0afce111eb0baa25dfdacb63722ec5887bafd3c5\"" Sep 13 01:33:40.924866 env[1447]: time="2025-09-13T01:33:40.924838188Z" level=info msg="CreateContainer within sandbox \"afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Sep 13 01:33:40.968928 env[1447]: time="2025-09-13T01:33:40.968881707Z" level=info msg="CreateContainer within sandbox \"afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"9d86ae64f0d916f50b17878b7d2d5391525d1e14609ca6c2fbc7b250e67449cc\"" Sep 13 01:33:40.971108 env[1447]: time="2025-09-13T01:33:40.970439785Z" level=info msg="StartContainer for \"9d86ae64f0d916f50b17878b7d2d5391525d1e14609ca6c2fbc7b250e67449cc\"" Sep 13 01:33:40.990882 systemd[1]: Started cri-containerd-9d86ae64f0d916f50b17878b7d2d5391525d1e14609ca6c2fbc7b250e67449cc.scope. Sep 13 01:33:40.995940 systemd[1]: run-containerd-runc-k8s.io-9d86ae64f0d916f50b17878b7d2d5391525d1e14609ca6c2fbc7b250e67449cc-runc.n1R9ah.mount: Deactivated successfully. Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.012000 audit: BPF prog-id=169 op=LOAD Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=3696 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:41.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383661653634663064393136663530623137383738623764326435 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3696 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:41.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383661653634663064393136663530623137383738623764326435 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit: BPF prog-id=170 op=LOAD Sep 13 01:33:41.013000 audit[3929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3696 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:41.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383661653634663064393136663530623137383738623764326435 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.013000 audit: BPF prog-id=171 op=LOAD Sep 13 01:33:41.013000 audit[3929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3696 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:41.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383661653634663064393136663530623137383738623764326435 Sep 13 01:33:41.013000 audit: BPF prog-id=171 op=UNLOAD Sep 13 01:33:41.014000 audit: BPF prog-id=170 op=UNLOAD Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { perfmon } for pid=3929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit[3929]: AVC avc: denied { bpf } for pid=3929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:41.014000 audit: BPF prog-id=172 op=LOAD Sep 13 01:33:41.014000 audit[3929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3696 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:41.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964383661653634663064393136663530623137383738623764326435 Sep 13 01:33:41.042419 env[1447]: time="2025-09-13T01:33:41.042373358Z" level=info msg="StartContainer for \"9d86ae64f0d916f50b17878b7d2d5391525d1e14609ca6c2fbc7b250e67449cc\" returns successfully" Sep 13 01:33:41.043759 env[1447]: time="2025-09-13T01:33:41.043729477Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\"" Sep 13 01:33:41.045000 audit[3940]: AVC avc: denied { search } for pid=3940 comm="nginx" name="crypto" dev="proc" ino=25494 scontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c764 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Sep 13 01:33:41.045000 audit[3940]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffad5a3958 a2=0 a3=0 items=0 ppid=3696 pid=3940 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c333,c764 key=(null) Sep 13 01:33:41.045000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Sep 13 01:33:41.066780 systemd-networkd[1601]: vxlan.calico: Gained IPv6LL Sep 13 01:33:42.002043 env[1447]: time="2025-09-13T01:33:42.002002349Z" level=info msg="StopPodSandbox for \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\"" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.062 [INFO][3968] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.063 [INFO][3968] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" iface="eth0" netns="/var/run/netns/cni-60357bda-4245-5af4-f12b-a4ab6832e392" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.063 [INFO][3968] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" iface="eth0" netns="/var/run/netns/cni-60357bda-4245-5af4-f12b-a4ab6832e392" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.064 [INFO][3968] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" iface="eth0" netns="/var/run/netns/cni-60357bda-4245-5af4-f12b-a4ab6832e392" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.064 [INFO][3968] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.064 [INFO][3968] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.107 [INFO][3975] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.107 [INFO][3975] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.107 [INFO][3975] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.119 [WARNING][3975] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.120 [INFO][3975] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.122 [INFO][3975] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:42.125531 env[1447]: 2025-09-13 01:33:42.124 [INFO][3968] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:42.128506 systemd[1]: run-netns-cni\x2d60357bda\x2d4245\x2d5af4\x2df12b\x2da4ab6832e392.mount: Deactivated successfully. Sep 13 01:33:42.130379 env[1447]: time="2025-09-13T01:33:42.130320753Z" level=info msg="TearDown network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\" successfully" Sep 13 01:33:42.130900 env[1447]: time="2025-09-13T01:33:42.130444113Z" level=info msg="StopPodSandbox for \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\" returns successfully" Sep 13 01:33:42.131312 env[1447]: time="2025-09-13T01:33:42.131286192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-8ds5r,Uid:ddddcc61-e927-42cf-8461-ba98f8f408bd,Namespace:calico-apiserver,Attempt:1,}" Sep 13 01:33:42.338792 systemd-networkd[1601]: calie626a0f1195: Link UP Sep 13 01:33:42.344414 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:33:42.344515 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie626a0f1195: link becomes ready Sep 13 01:33:42.347097 systemd-networkd[1601]: calie626a0f1195: Gained carrier Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.253 [INFO][3983] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0 calico-apiserver-84855b6446- calico-apiserver ddddcc61-e927-42cf-8461-ba98f8f408bd 956 0 2025-09-13 01:33:14 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84855b6446 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 calico-apiserver-84855b6446-8ds5r eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie626a0f1195 [] [] }} ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.253 [INFO][3983] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.276 [INFO][3995] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.276 [INFO][3995] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2ff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-12daba8686", "pod":"calico-apiserver-84855b6446-8ds5r", "timestamp":"2025-09-13 01:33:42.276710019 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.277 [INFO][3995] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.277 [INFO][3995] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.277 [INFO][3995] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.286 [INFO][3995] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.292 [INFO][3995] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.296 [INFO][3995] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.298 [INFO][3995] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.300 [INFO][3995] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.300 [INFO][3995] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.302 [INFO][3995] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.307 [INFO][3995] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.317 [INFO][3995] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.194/26] block=192.168.19.192/26 handle="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.317 [INFO][3995] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.194/26] handle="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.317 [INFO][3995] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:42.365840 env[1447]: 2025-09-13 01:33:42.317 [INFO][3995] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.194/26] IPv6=[] ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.366550 env[1447]: 2025-09-13 01:33:42.319 [INFO][3983] cni-plugin/k8s.go 418: Populated endpoint ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"ddddcc61-e927-42cf-8461-ba98f8f408bd", ResourceVersion:"956", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"calico-apiserver-84855b6446-8ds5r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie626a0f1195", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:42.366550 env[1447]: 2025-09-13 01:33:42.319 [INFO][3983] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.194/32] ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.366550 env[1447]: 2025-09-13 01:33:42.319 [INFO][3983] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie626a0f1195 ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.366550 env[1447]: 2025-09-13 01:33:42.346 [INFO][3983] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.366550 env[1447]: 2025-09-13 01:33:42.348 [INFO][3983] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"ddddcc61-e927-42cf-8461-ba98f8f408bd", ResourceVersion:"956", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c", Pod:"calico-apiserver-84855b6446-8ds5r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie626a0f1195", MAC:"3a:f5:39:0f:95:3a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:42.366550 env[1447]: 2025-09-13 01:33:42.362 [INFO][3983] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-8ds5r" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:42.378214 env[1447]: time="2025-09-13T01:33:42.378129487Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:42.378214 env[1447]: time="2025-09-13T01:33:42.378169407Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:42.378214 env[1447]: time="2025-09-13T01:33:42.378179287Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:42.378561 env[1447]: time="2025-09-13T01:33:42.378509407Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c pid=4019 runtime=io.containerd.runc.v2 Sep 13 01:33:42.407716 kernel: kauditd_printk_skb: 707 callbacks suppressed Sep 13 01:33:42.407847 kernel: audit: type=1325 audit(1757727222.391:1182): table=filter:108 family=2 entries=50 op=nft_register_chain pid=4030 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:42.391000 audit[4030]: NETFILTER_CFG table=filter:108 family=2 entries=50 op=nft_register_chain pid=4030 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:42.400111 systemd[1]: Started cri-containerd-203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c.scope. Sep 13 01:33:42.391000 audit[4030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffcb5241d0 a2=0 a3=ffff9a67afa8 items=0 ppid=3753 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:42.447018 kernel: audit: type=1300 audit(1757727222.391:1182): arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffcb5241d0 a2=0 a3=ffff9a67afa8 items=0 ppid=3753 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:42.391000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:42.466507 kernel: audit: type=1327 audit(1757727222.391:1182): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:42.466674 kernel: audit: type=1400 audit(1757727222.457:1183): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.493515 kernel: audit: type=1400 audit(1757727222.457:1184): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.508844 kernel: audit: type=1400 audit(1757727222.457:1185): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.526811 kernel: audit: type=1400 audit(1757727222.457:1186): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.563725 kernel: audit: type=1400 audit(1757727222.457:1187): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.564291 kernel: audit: type=1400 audit(1757727222.457:1188): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.595729 env[1447]: time="2025-09-13T01:33:42.594057410Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-8ds5r,Uid:ddddcc61-e927-42cf-8461-ba98f8f408bd,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\"" Sep 13 01:33:42.600839 kernel: audit: type=1400 audit(1757727222.457:1189): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit: BPF prog-id=173 op=LOAD Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4019 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:42.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333433346561383037373435393535376430353265366332316636 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4019 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:42.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333433346561383037373435393535376430353265366332316636 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.464000 audit: BPF prog-id=174 op=LOAD Sep 13 01:33:42.464000 audit[4031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4019 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:42.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333433346561383037373435393535376430353265366332316636 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.492000 audit: BPF prog-id=175 op=LOAD Sep 13 01:33:42.492000 audit[4031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4019 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:42.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333433346561383037373435393535376430353265366332316636 Sep 13 01:33:42.506000 audit: BPF prog-id=175 op=UNLOAD Sep 13 01:33:42.506000 audit: BPF prog-id=174 op=UNLOAD Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:42.506000 audit: BPF prog-id=176 op=LOAD Sep 13 01:33:42.506000 audit[4031]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4019 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:42.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230333433346561383037373435393535376430353265366332316636 Sep 13 01:33:43.984070 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3802099386.mount: Deactivated successfully. Sep 13 01:33:44.002196 env[1447]: time="2025-09-13T01:33:44.002023424Z" level=info msg="StopPodSandbox for \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\"" Sep 13 01:33:44.010189 systemd-networkd[1601]: calie626a0f1195: Gained IPv6LL Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.068 [INFO][4063] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.070 [INFO][4063] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" iface="eth0" netns="/var/run/netns/cni-e1db12dd-0c33-09ea-f3d3-a8a0f1115d9e" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.071 [INFO][4063] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" iface="eth0" netns="/var/run/netns/cni-e1db12dd-0c33-09ea-f3d3-a8a0f1115d9e" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.071 [INFO][4063] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" iface="eth0" netns="/var/run/netns/cni-e1db12dd-0c33-09ea-f3d3-a8a0f1115d9e" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.071 [INFO][4063] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.071 [INFO][4063] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.089 [INFO][4071] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.089 [INFO][4071] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.089 [INFO][4071] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.098 [WARNING][4071] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.098 [INFO][4071] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.099 [INFO][4071] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:44.101601 env[1447]: 2025-09-13 01:33:44.100 [INFO][4063] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:44.276862 env[1447]: time="2025-09-13T01:33:44.105088093Z" level=info msg="TearDown network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\" successfully" Sep 13 01:33:44.276862 env[1447]: time="2025-09-13T01:33:44.105123613Z" level=info msg="StopPodSandbox for \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\" returns successfully" Sep 13 01:33:44.276862 env[1447]: time="2025-09-13T01:33:44.105719252Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8rf89,Uid:1a57959b-d271-4cd6-940b-885d382531e4,Namespace:calico-system,Attempt:1,}" Sep 13 01:33:44.103902 systemd[1]: run-netns-cni\x2de1db12dd\x2d0c33\x2d09ea\x2df3d3\x2da8a0f1115d9e.mount: Deactivated successfully. Sep 13 01:33:44.306818 env[1447]: time="2025-09-13T01:33:44.306764875Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:44.324834 env[1447]: time="2025-09-13T01:33:44.324793819Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:44.329941 env[1447]: time="2025-09-13T01:33:44.329899855Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:44.341890 env[1447]: time="2025-09-13T01:33:44.341842644Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:29becebc47401da9997a2a30f4c25c511a5f379d17275680b048224829af71a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:44.343217 env[1447]: time="2025-09-13T01:33:44.343182243Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.3\" returns image reference \"sha256:e210e86234bc99f018431b30477c5ca2ad6f7ecf67ef011498f7beb48fb0b21f\"" Sep 13 01:33:44.350315 env[1447]: time="2025-09-13T01:33:44.350262757Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 01:33:44.354276 env[1447]: time="2025-09-13T01:33:44.354232633Z" level=info msg="CreateContainer within sandbox \"afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Sep 13 01:33:44.403160 env[1447]: time="2025-09-13T01:33:44.403108110Z" level=info msg="CreateContainer within sandbox \"afc002370647842b6198f2508317fd89f7adacdf780aa0a6ed67a147561d11bf\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"41da9945006873d189ec72900af030fbb0c06fd7a46bcfb3357a1c12a006cc17\"" Sep 13 01:33:44.405931 env[1447]: time="2025-09-13T01:33:44.405895748Z" level=info msg="StartContainer for \"41da9945006873d189ec72900af030fbb0c06fd7a46bcfb3357a1c12a006cc17\"" Sep 13 01:33:44.433935 systemd[1]: Started cri-containerd-41da9945006873d189ec72900af030fbb0c06fd7a46bcfb3357a1c12a006cc17.scope. Sep 13 01:33:44.464516 systemd-networkd[1601]: calic1584141ed9: Link UP Sep 13 01:33:44.486450 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:33:44.486642 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic1584141ed9: link becomes ready Sep 13 01:33:44.491712 systemd-networkd[1601]: calic1584141ed9: Gained carrier Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.495000 audit: BPF prog-id=177 op=LOAD Sep 13 01:33:44.496000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.496000 audit[4104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3696 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431646139393435303036383733643138396563373239303061663033 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3696 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431646139393435303036383733643138396563373239303061663033 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.504000 audit: BPF prog-id=178 op=LOAD Sep 13 01:33:44.504000 audit[4104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3696 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431646139393435303036383733643138396563373239303061663033 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.505000 audit: BPF prog-id=179 op=LOAD Sep 13 01:33:44.505000 audit[4104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3696 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431646139393435303036383733643138396563373239303061663033 Sep 13 01:33:44.506000 audit: BPF prog-id=179 op=UNLOAD Sep 13 01:33:44.506000 audit: BPF prog-id=178 op=UNLOAD Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { perfmon } for pid=4104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit[4104]: AVC avc: denied { bpf } for pid=4104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.506000 audit: BPF prog-id=180 op=LOAD Sep 13 01:33:44.506000 audit[4104]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3696 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431646139393435303036383733643138396563373239303061663033 Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.377 [INFO][4077] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0 csi-node-driver- calico-system 1a57959b-d271-4cd6-940b-885d382531e4 967 0 2025-09-13 01:33:20 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6c96d95cc7 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 csi-node-driver-8rf89 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calic1584141ed9 [] [] }} ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.378 [INFO][4077] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.406 [INFO][4090] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" HandleID="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.406 [INFO][4090] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" HandleID="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3060), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-12daba8686", "pod":"csi-node-driver-8rf89", "timestamp":"2025-09-13 01:33:44.406179468 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.406 [INFO][4090] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.406 [INFO][4090] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.406 [INFO][4090] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.418 [INFO][4090] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.422 [INFO][4090] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.427 [INFO][4090] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.429 [INFO][4090] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.431 [INFO][4090] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.435 [INFO][4090] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.444 [INFO][4090] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9 Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.450 [INFO][4090] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.460 [INFO][4090] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.195/26] block=192.168.19.192/26 handle="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.460 [INFO][4090] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.195/26] handle="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.460 [INFO][4090] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:44.520770 env[1447]: 2025-09-13 01:33:44.460 [INFO][4090] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.195/26] IPv6=[] ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" HandleID="k8s-pod-network.f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.521369 env[1447]: 2025-09-13 01:33:44.462 [INFO][4077] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1a57959b-d271-4cd6-940b-885d382531e4", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"csi-node-driver-8rf89", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.19.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic1584141ed9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:44.521369 env[1447]: 2025-09-13 01:33:44.462 [INFO][4077] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.195/32] ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.521369 env[1447]: 2025-09-13 01:33:44.462 [INFO][4077] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic1584141ed9 ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.521369 env[1447]: 2025-09-13 01:33:44.495 [INFO][4077] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.521369 env[1447]: 2025-09-13 01:33:44.495 [INFO][4077] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1a57959b-d271-4cd6-940b-885d382531e4", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9", Pod:"csi-node-driver-8rf89", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.19.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic1584141ed9", MAC:"62:40:23:fd:fa:84", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:44.521369 env[1447]: 2025-09-13 01:33:44.516 [INFO][4077] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9" Namespace="calico-system" Pod="csi-node-driver-8rf89" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:44.527000 audit[4130]: NETFILTER_CFG table=filter:109 family=2 entries=40 op=nft_register_chain pid=4130 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:44.527000 audit[4130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffd1cb00a0 a2=0 a3=ffff91745fa8 items=0 ppid=3753 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.527000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:44.548735 env[1447]: time="2025-09-13T01:33:44.548556262Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:44.549583 env[1447]: time="2025-09-13T01:33:44.549549142Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:44.549756 env[1447]: time="2025-09-13T01:33:44.549714381Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:44.552787 env[1447]: time="2025-09-13T01:33:44.549966261Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9 pid=4143 runtime=io.containerd.runc.v2 Sep 13 01:33:44.558478 env[1447]: time="2025-09-13T01:33:44.557827734Z" level=info msg="StartContainer for \"41da9945006873d189ec72900af030fbb0c06fd7a46bcfb3357a1c12a006cc17\" returns successfully" Sep 13 01:33:44.568149 systemd[1]: Started cri-containerd-f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9.scope. Sep 13 01:33:44.577340 systemd[1]: run-containerd-runc-k8s.io-f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9-runc.YMlO99.mount: Deactivated successfully. Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit: BPF prog-id=181 op=LOAD Sep 13 01:33:44.588000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[4157]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4143 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638343533303461343663393332306436353835303835636564346335 Sep 13 01:33:44.588000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.588000 audit[4157]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4143 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638343533303461343663393332306436353835303835636564346335 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit: BPF prog-id=182 op=LOAD Sep 13 01:33:44.589000 audit[4157]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4143 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638343533303461343663393332306436353835303835636564346335 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit: BPF prog-id=183 op=LOAD Sep 13 01:33:44.589000 audit[4157]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4143 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638343533303461343663393332306436353835303835636564346335 Sep 13 01:33:44.589000 audit: BPF prog-id=183 op=UNLOAD Sep 13 01:33:44.589000 audit: BPF prog-id=182 op=UNLOAD Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { perfmon } for pid=4157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit[4157]: AVC avc: denied { bpf } for pid=4157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:44.589000 audit: BPF prog-id=184 op=LOAD Sep 13 01:33:44.589000 audit[4157]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4143 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:44.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638343533303461343663393332306436353835303835636564346335 Sep 13 01:33:44.605703 env[1447]: time="2025-09-13T01:33:44.605634492Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-8rf89,Uid:1a57959b-d271-4cd6-940b-885d382531e4,Namespace:calico-system,Attempt:1,} returns sandbox id \"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9\"" Sep 13 01:33:45.003972 env[1447]: time="2025-09-13T01:33:45.003917621Z" level=info msg="StopPodSandbox for \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\"" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.059 [INFO][4195] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.061 [INFO][4195] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" iface="eth0" netns="/var/run/netns/cni-ae52744c-7ffd-2689-17f4-1e6864569345" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.061 [INFO][4195] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" iface="eth0" netns="/var/run/netns/cni-ae52744c-7ffd-2689-17f4-1e6864569345" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.061 [INFO][4195] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" iface="eth0" netns="/var/run/netns/cni-ae52744c-7ffd-2689-17f4-1e6864569345" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.061 [INFO][4195] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.062 [INFO][4195] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.083 [INFO][4202] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.083 [INFO][4202] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.083 [INFO][4202] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.093 [WARNING][4202] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.093 [INFO][4202] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.095 [INFO][4202] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:45.099501 env[1447]: 2025-09-13 01:33:45.096 [INFO][4195] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:45.102332 systemd[1]: run-netns-cni\x2dae52744c\x2d7ffd\x2d2689\x2d17f4\x2d1e6864569345.mount: Deactivated successfully. Sep 13 01:33:45.102949 env[1447]: time="2025-09-13T01:33:45.102819616Z" level=info msg="TearDown network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\" successfully" Sep 13 01:33:45.103049 env[1447]: time="2025-09-13T01:33:45.103032216Z" level=info msg="StopPodSandbox for \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\" returns successfully" Sep 13 01:33:45.104007 env[1447]: time="2025-09-13T01:33:45.103981655Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-7k6rx,Uid:a6cbb0ca-3390-4a37-8c80-d5a01d422ca6,Namespace:calico-apiserver,Attempt:1,}" Sep 13 01:33:45.205976 kubelet[2414]: I0913 01:33:45.205919 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-68dd75554d-sgt5w" podStartSLOduration=1.727951634 podStartE2EDuration="7.205893887s" podCreationTimestamp="2025-09-13 01:33:38 +0000 UTC" firstStartedPulling="2025-09-13 01:33:38.869935506 +0000 UTC m=+44.092233815" lastFinishedPulling="2025-09-13 01:33:44.347877759 +0000 UTC m=+49.570176068" observedRunningTime="2025-09-13 01:33:45.205668567 +0000 UTC m=+50.427966876" watchObservedRunningTime="2025-09-13 01:33:45.205893887 +0000 UTC m=+50.428192196" Sep 13 01:33:45.241000 audit[4232]: NETFILTER_CFG table=filter:110 family=2 entries=19 op=nft_register_rule pid=4232 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:45.241000 audit[4232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffccb0d0c0 a2=0 a3=1 items=0 ppid=2558 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.241000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:45.248000 audit[4232]: NETFILTER_CFG table=nat:111 family=2 entries=21 op=nft_register_chain pid=4232 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:45.248000 audit[4232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffccb0d0c0 a2=0 a3=1 items=0 ppid=2558 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.248000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:45.309546 systemd-networkd[1601]: cali2dd7773b929: Link UP Sep 13 01:33:45.317279 systemd-networkd[1601]: cali2dd7773b929: Gained carrier Sep 13 01:33:45.317857 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2dd7773b929: link becomes ready Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.222 [INFO][4212] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0 calico-apiserver-84855b6446- calico-apiserver a6cbb0ca-3390-4a37-8c80-d5a01d422ca6 979 0 2025-09-13 01:33:14 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:84855b6446 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 calico-apiserver-84855b6446-7k6rx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali2dd7773b929 [] [] }} ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.222 [INFO][4212] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.249 [INFO][4227] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.249 [INFO][4227] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3020), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-12daba8686", "pod":"calico-apiserver-84855b6446-7k6rx", "timestamp":"2025-09-13 01:33:45.249240609 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.249 [INFO][4227] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.249 [INFO][4227] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.249 [INFO][4227] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.260 [INFO][4227] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.266 [INFO][4227] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.270 [INFO][4227] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.271 [INFO][4227] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.273 [INFO][4227] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.273 [INFO][4227] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.274 [INFO][4227] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3 Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.280 [INFO][4227] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.297 [INFO][4227] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.196/26] block=192.168.19.192/26 handle="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.297 [INFO][4227] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.196/26] handle="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.297 [INFO][4227] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:45.343850 env[1447]: 2025-09-13 01:33:45.297 [INFO][4227] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.196/26] IPv6=[] ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.344549 env[1447]: 2025-09-13 01:33:45.299 [INFO][4212] cni-plugin/k8s.go 418: Populated endpoint ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"calico-apiserver-84855b6446-7k6rx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2dd7773b929", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:45.344549 env[1447]: 2025-09-13 01:33:45.300 [INFO][4212] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.196/32] ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.344549 env[1447]: 2025-09-13 01:33:45.300 [INFO][4212] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2dd7773b929 ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.344549 env[1447]: 2025-09-13 01:33:45.317 [INFO][4212] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.344549 env[1447]: 2025-09-13 01:33:45.318 [INFO][4212] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3", Pod:"calico-apiserver-84855b6446-7k6rx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2dd7773b929", MAC:"d2:1b:2f:5b:3d:f7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:45.344549 env[1447]: 2025-09-13 01:33:45.337 [INFO][4212] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Namespace="calico-apiserver" Pod="calico-apiserver-84855b6446-7k6rx" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:45.352000 audit[4242]: NETFILTER_CFG table=filter:112 family=2 entries=51 op=nft_register_chain pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:45.352000 audit[4242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27116 a0=3 a1=ffffd3fdb350 a2=0 a3=ffff93cd5fa8 items=0 ppid=3753 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.352000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:45.360636 env[1447]: time="2025-09-13T01:33:45.360542393Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:45.360636 env[1447]: time="2025-09-13T01:33:45.360580593Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:45.360636 env[1447]: time="2025-09-13T01:33:45.360590113Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:45.361287 env[1447]: time="2025-09-13T01:33:45.361081832Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3 pid=4251 runtime=io.containerd.runc.v2 Sep 13 01:33:45.371263 systemd[1]: Started cri-containerd-832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3.scope. Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit: BPF prog-id=185 op=LOAD Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4251 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833326237663762303935316236393365306232663862633232303631 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4251 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833326237663762303935316236393365306232663862633232303631 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.391000 audit: BPF prog-id=186 op=LOAD Sep 13 01:33:45.391000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4251 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833326237663762303935316236393365306232663862633232303631 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit: BPF prog-id=187 op=LOAD Sep 13 01:33:45.392000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4251 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833326237663762303935316236393365306232663862633232303631 Sep 13 01:33:45.392000 audit: BPF prog-id=187 op=UNLOAD Sep 13 01:33:45.392000 audit: BPF prog-id=186 op=UNLOAD Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:45.392000 audit: BPF prog-id=188 op=LOAD Sep 13 01:33:45.392000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4251 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:45.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833326237663762303935316236393365306232663862633232303631 Sep 13 01:33:45.418079 env[1447]: time="2025-09-13T01:33:45.418031063Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-84855b6446-7k6rx,Uid:a6cbb0ca-3390-4a37-8c80-d5a01d422ca6,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\"" Sep 13 01:33:45.737850 systemd-networkd[1601]: calic1584141ed9: Gained IPv6LL Sep 13 01:33:46.001997 env[1447]: time="2025-09-13T01:33:46.001892557Z" level=info msg="StopPodSandbox for \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\"" Sep 13 01:33:46.002417 env[1447]: time="2025-09-13T01:33:46.002372557Z" level=info msg="StopPodSandbox for \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\"" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.059 [INFO][4299] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.059 [INFO][4299] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" iface="eth0" netns="/var/run/netns/cni-47cae890-1ecf-f00b-8d78-c20fda225218" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.061 [INFO][4299] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" iface="eth0" netns="/var/run/netns/cni-47cae890-1ecf-f00b-8d78-c20fda225218" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.062 [INFO][4299] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" iface="eth0" netns="/var/run/netns/cni-47cae890-1ecf-f00b-8d78-c20fda225218" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.062 [INFO][4299] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.062 [INFO][4299] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.090 [INFO][4316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.090 [INFO][4316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.090 [INFO][4316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.099 [WARNING][4316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.099 [INFO][4316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.101 [INFO][4316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:46.104461 env[1447]: 2025-09-13 01:33:46.102 [INFO][4299] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:46.107004 systemd[1]: run-netns-cni\x2d47cae890\x2d1ecf\x2df00b\x2d8d78\x2dc20fda225218.mount: Deactivated successfully. Sep 13 01:33:46.108240 env[1447]: time="2025-09-13T01:33:46.108197986Z" level=info msg="TearDown network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\" successfully" Sep 13 01:33:46.108299 env[1447]: time="2025-09-13T01:33:46.108243026Z" level=info msg="StopPodSandbox for \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\" returns successfully" Sep 13 01:33:46.109027 env[1447]: time="2025-09-13T01:33:46.109003986Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-t8fkc,Uid:43c6eaa8-fda6-473c-b002-26d293c3cf62,Namespace:kube-system,Attempt:1,}" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.081 [INFO][4307] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.082 [INFO][4307] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" iface="eth0" netns="/var/run/netns/cni-a7046a34-990b-edd8-3a09-a500ff2f7c29" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.082 [INFO][4307] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" iface="eth0" netns="/var/run/netns/cni-a7046a34-990b-edd8-3a09-a500ff2f7c29" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.082 [INFO][4307] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" iface="eth0" netns="/var/run/netns/cni-a7046a34-990b-edd8-3a09-a500ff2f7c29" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.082 [INFO][4307] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.082 [INFO][4307] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.118 [INFO][4324] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.118 [INFO][4324] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.118 [INFO][4324] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.133 [WARNING][4324] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.133 [INFO][4324] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.135 [INFO][4324] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:46.138639 env[1447]: 2025-09-13 01:33:46.137 [INFO][4307] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:46.141478 systemd[1]: run-netns-cni\x2da7046a34\x2d990b\x2dedd8\x2d3a09\x2da500ff2f7c29.mount: Deactivated successfully. Sep 13 01:33:46.141933 env[1447]: time="2025-09-13T01:33:46.141894678Z" level=info msg="TearDown network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\" successfully" Sep 13 01:33:46.142044 env[1447]: time="2025-09-13T01:33:46.142026758Z" level=info msg="StopPodSandbox for \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\" returns successfully" Sep 13 01:33:46.142995 env[1447]: time="2025-09-13T01:33:46.142964397Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9kprh,Uid:3e03f1c0-901c-40fa-b26f-00188c44bf4b,Namespace:kube-system,Attempt:1,}" Sep 13 01:33:46.343733 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:33:46.343858 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali33bc5f2d551: link becomes ready Sep 13 01:33:46.346586 systemd-networkd[1601]: cali33bc5f2d551: Link UP Sep 13 01:33:46.346789 systemd-networkd[1601]: cali33bc5f2d551: Gained carrier Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.215 [INFO][4331] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0 coredns-668d6bf9bc- kube-system 43c6eaa8-fda6-473c-b002-26d293c3cf62 992 0 2025-09-13 01:33:02 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 coredns-668d6bf9bc-t8fkc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali33bc5f2d551 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.215 [INFO][4331] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.270 [INFO][4355] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" HandleID="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.270 [INFO][4355] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" HandleID="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003234a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-12daba8686", "pod":"coredns-668d6bf9bc-t8fkc", "timestamp":"2025-09-13 01:33:46.270465488 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.270 [INFO][4355] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.270 [INFO][4355] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.270 [INFO][4355] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.281 [INFO][4355] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.292 [INFO][4355] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.300 [INFO][4355] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.302 [INFO][4355] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.304 [INFO][4355] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.304 [INFO][4355] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.306 [INFO][4355] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99 Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.314 [INFO][4355] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.322 [INFO][4355] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.197/26] block=192.168.19.192/26 handle="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.322 [INFO][4355] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.197/26] handle="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.322 [INFO][4355] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:46.364580 env[1447]: 2025-09-13 01:33:46.322 [INFO][4355] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.197/26] IPv6=[] ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" HandleID="k8s-pod-network.50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.365164 env[1447]: 2025-09-13 01:33:46.326 [INFO][4331] cni-plugin/k8s.go 418: Populated endpoint ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"43c6eaa8-fda6-473c-b002-26d293c3cf62", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"coredns-668d6bf9bc-t8fkc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali33bc5f2d551", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:46.365164 env[1447]: 2025-09-13 01:33:46.327 [INFO][4331] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.197/32] ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.365164 env[1447]: 2025-09-13 01:33:46.327 [INFO][4331] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali33bc5f2d551 ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.365164 env[1447]: 2025-09-13 01:33:46.347 [INFO][4331] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.365164 env[1447]: 2025-09-13 01:33:46.347 [INFO][4331] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"43c6eaa8-fda6-473c-b002-26d293c3cf62", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99", Pod:"coredns-668d6bf9bc-t8fkc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali33bc5f2d551", MAC:"9a:9f:32:76:30:09", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:46.365164 env[1447]: 2025-09-13 01:33:46.363 [INFO][4331] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99" Namespace="kube-system" Pod="coredns-668d6bf9bc-t8fkc" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:46.382892 env[1447]: time="2025-09-13T01:33:46.382700392Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:46.382892 env[1447]: time="2025-09-13T01:33:46.382747312Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:46.382892 env[1447]: time="2025-09-13T01:33:46.382757312Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:46.384032 env[1447]: time="2025-09-13T01:33:46.383981511Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99 pid=4387 runtime=io.containerd.runc.v2 Sep 13 01:33:46.388000 audit[4397]: NETFILTER_CFG table=filter:113 family=2 entries=50 op=nft_register_chain pid=4397 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:46.388000 audit[4397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24912 a0=3 a1=ffffe2247510 a2=0 a3=ffffac4d7fa8 items=0 ppid=3753 pid=4397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.388000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:46.399829 systemd[1]: Started cri-containerd-50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99.scope. Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.422000 audit: BPF prog-id=189 op=LOAD Sep 13 01:33:46.423000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.423000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4387 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530643339313131386235303064383536366636343233356139303733 Sep 13 01:33:46.423000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.423000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4387 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530643339313131386235303064383536366636343233356139303733 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit: BPF prog-id=190 op=LOAD Sep 13 01:33:46.424000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4387 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530643339313131386235303064383536366636343233356139303733 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.424000 audit: BPF prog-id=191 op=LOAD Sep 13 01:33:46.424000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4387 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530643339313131386235303064383536366636343233356139303733 Sep 13 01:33:46.425000 audit: BPF prog-id=191 op=UNLOAD Sep 13 01:33:46.425000 audit: BPF prog-id=190 op=UNLOAD Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.425000 audit: BPF prog-id=192 op=LOAD Sep 13 01:33:46.425000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4387 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530643339313131386235303064383536366636343233356139303733 Sep 13 01:33:46.449463 systemd-networkd[1601]: calic6aa5ad1f93: Link UP Sep 13 01:33:46.459755 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic6aa5ad1f93: link becomes ready Sep 13 01:33:46.460997 systemd-networkd[1601]: calic6aa5ad1f93: Gained carrier Sep 13 01:33:46.480530 env[1447]: time="2025-09-13T01:33:46.480478109Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-t8fkc,Uid:43c6eaa8-fda6-473c-b002-26d293c3cf62,Namespace:kube-system,Attempt:1,} returns sandbox id \"50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99\"" Sep 13 01:33:46.483417 env[1447]: time="2025-09-13T01:33:46.483382547Z" level=info msg="CreateContainer within sandbox \"50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.253 [INFO][4340] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0 coredns-668d6bf9bc- kube-system 3e03f1c0-901c-40fa-b26f-00188c44bf4b 993 0 2025-09-13 01:33:02 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 coredns-668d6bf9bc-9kprh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic6aa5ad1f93 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.253 [INFO][4340] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.309 [INFO][4363] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" HandleID="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.309 [INFO][4363] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" HandleID="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab4a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-12daba8686", "pod":"coredns-668d6bf9bc-9kprh", "timestamp":"2025-09-13 01:33:46.309393855 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.309 [INFO][4363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.322 [INFO][4363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.322 [INFO][4363] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.382 [INFO][4363] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.389 [INFO][4363] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.403 [INFO][4363] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.407 [INFO][4363] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.409 [INFO][4363] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.409 [INFO][4363] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.419 [INFO][4363] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225 Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.428 [INFO][4363] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.439 [INFO][4363] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.198/26] block=192.168.19.192/26 handle="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.440 [INFO][4363] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.198/26] handle="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.440 [INFO][4363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:46.493949 env[1447]: 2025-09-13 01:33:46.440 [INFO][4363] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.198/26] IPv6=[] ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" HandleID="k8s-pod-network.95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.494671 env[1447]: 2025-09-13 01:33:46.442 [INFO][4340] cni-plugin/k8s.go 418: Populated endpoint ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3e03f1c0-901c-40fa-b26f-00188c44bf4b", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"coredns-668d6bf9bc-9kprh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6aa5ad1f93", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:46.494671 env[1447]: 2025-09-13 01:33:46.443 [INFO][4340] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.198/32] ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.494671 env[1447]: 2025-09-13 01:33:46.443 [INFO][4340] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic6aa5ad1f93 ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.494671 env[1447]: 2025-09-13 01:33:46.459 [INFO][4340] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.494671 env[1447]: 2025-09-13 01:33:46.464 [INFO][4340] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3e03f1c0-901c-40fa-b26f-00188c44bf4b", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225", Pod:"coredns-668d6bf9bc-9kprh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6aa5ad1f93", MAC:"7a:f9:d7:f5:12:69", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:46.494671 env[1447]: 2025-09-13 01:33:46.491 [INFO][4340] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225" Namespace="kube-system" Pod="coredns-668d6bf9bc-9kprh" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:46.511635 env[1447]: time="2025-09-13T01:33:46.511552963Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:46.511635 env[1447]: time="2025-09-13T01:33:46.511592323Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:46.511635 env[1447]: time="2025-09-13T01:33:46.511602123Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:46.512074 env[1447]: time="2025-09-13T01:33:46.512028162Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225 pid=4437 runtime=io.containerd.runc.v2 Sep 13 01:33:46.527000 audit[4448]: NETFILTER_CFG table=filter:114 family=2 entries=50 op=nft_register_chain pid=4448 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:46.527000 audit[4448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24368 a0=3 a1=ffffe6c254b0 a2=0 a3=ffff82ca1fa8 items=0 ppid=3753 pid=4448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.527000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:46.536496 systemd[1]: Started cri-containerd-95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225.scope. Sep 13 01:33:46.545867 env[1447]: time="2025-09-13T01:33:46.545812613Z" level=info msg="CreateContainer within sandbox \"50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"24fa0c742c1e97515636b84394f5e37eeb194a0ac4f790f298b4d49ba855ebf6\"" Sep 13 01:33:46.546743 env[1447]: time="2025-09-13T01:33:46.546715013Z" level=info msg="StartContainer for \"24fa0c742c1e97515636b84394f5e37eeb194a0ac4f790f298b4d49ba855ebf6\"" Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.561000 audit: BPF prog-id=193 op=LOAD Sep 13 01:33:46.562000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.562000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4437 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935636562396163636437313636633430356333346465323862666630 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4437 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935636562396163636437313636633430356333346465323862666630 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.563000 audit: BPF prog-id=194 op=LOAD Sep 13 01:33:46.563000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4437 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935636562396163636437313636633430356333346465323862666630 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.564000 audit: BPF prog-id=195 op=LOAD Sep 13 01:33:46.564000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4437 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935636562396163636437313636633430356333346465323862666630 Sep 13 01:33:46.564000 audit: BPF prog-id=195 op=UNLOAD Sep 13 01:33:46.565000 audit: BPF prog-id=194 op=UNLOAD Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.565000 audit: BPF prog-id=196 op=LOAD Sep 13 01:33:46.565000 audit[4449]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4437 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935636562396163636437313636633430356333346465323862666630 Sep 13 01:33:46.577805 systemd[1]: Started cri-containerd-24fa0c742c1e97515636b84394f5e37eeb194a0ac4f790f298b4d49ba855ebf6.scope. Sep 13 01:33:46.592853 env[1447]: time="2025-09-13T01:33:46.592814933Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9kprh,Uid:3e03f1c0-901c-40fa-b26f-00188c44bf4b,Namespace:kube-system,Attempt:1,} returns sandbox id \"95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225\"" Sep 13 01:33:46.598516 env[1447]: time="2025-09-13T01:33:46.598429889Z" level=info msg="CreateContainer within sandbox \"95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.597000 audit: BPF prog-id=197 op=LOAD Sep 13 01:33:46.599000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.599000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4387 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666130633734326331653937353135363336623834333934663565 Sep 13 01:33:46.601000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.601000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4387 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666130633734326331653937353135363336623834333934663565 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit: BPF prog-id=198 op=LOAD Sep 13 01:33:46.602000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4387 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666130633734326331653937353135363336623834333934663565 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit: BPF prog-id=199 op=LOAD Sep 13 01:33:46.602000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4387 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666130633734326331653937353135363336623834333934663565 Sep 13 01:33:46.602000 audit: BPF prog-id=199 op=UNLOAD Sep 13 01:33:46.602000 audit: BPF prog-id=198 op=UNLOAD Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { perfmon } for pid=4472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.602000 audit: BPF prog-id=200 op=LOAD Sep 13 01:33:46.602000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4387 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234666130633734326331653937353135363336623834333934663565 Sep 13 01:33:46.627000 audit[4484]: AVC avc: denied { getattr } for pid=4484 comm="coredns" path="cgroup:[4026532734]" dev="nsfs" ino=4026532734 scontext=system_u:system_r:svirt_lxc_net_t:s0:c163,c240 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 01:33:46.627000 audit[4484]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056798 a2=400014e578 a3=0 items=0 ppid=4387 pid=4484 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c163,c240 key=(null) Sep 13 01:33:46.627000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 01:33:46.632697 env[1447]: time="2025-09-13T01:33:46.632646099Z" level=info msg="StartContainer for \"24fa0c742c1e97515636b84394f5e37eeb194a0ac4f790f298b4d49ba855ebf6\" returns successfully" Sep 13 01:33:46.651601 env[1447]: time="2025-09-13T01:33:46.651554963Z" level=info msg="CreateContainer within sandbox \"95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"10b75414718b2e4bd9aa8ebbed5987f3cc3334689e16c8e5a4a4d0e8311a8871\"" Sep 13 01:33:46.652499 env[1447]: time="2025-09-13T01:33:46.652467322Z" level=info msg="StartContainer for \"10b75414718b2e4bd9aa8ebbed5987f3cc3334689e16c8e5a4a4d0e8311a8871\"" Sep 13 01:33:46.675058 systemd[1]: Started cri-containerd-10b75414718b2e4bd9aa8ebbed5987f3cc3334689e16c8e5a4a4d0e8311a8871.scope. Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.692000 audit: BPF prog-id=201 op=LOAD Sep 13 01:33:46.692000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.692000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4437 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623735343134373138623265346264396161386562626564353938 Sep 13 01:33:46.692000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.692000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4437 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623735343134373138623265346264396161386562626564353938 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit: BPF prog-id=202 op=LOAD Sep 13 01:33:46.693000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4437 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623735343134373138623265346264396161386562626564353938 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.693000 audit: BPF prog-id=203 op=LOAD Sep 13 01:33:46.693000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4437 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623735343134373138623265346264396161386562626564353938 Sep 13 01:33:46.694000 audit: BPF prog-id=203 op=UNLOAD Sep 13 01:33:46.694000 audit: BPF prog-id=202 op=UNLOAD Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:46.694000 audit: BPF prog-id=204 op=LOAD Sep 13 01:33:46.694000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4437 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:46.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623735343134373138623265346264396161386562626564353938 Sep 13 01:33:46.713310 env[1447]: time="2025-09-13T01:33:46.713234111Z" level=info msg="StartContainer for \"10b75414718b2e4bd9aa8ebbed5987f3cc3334689e16c8e5a4a4d0e8311a8871\" returns successfully" Sep 13 01:33:46.720000 audit[4530]: AVC avc: denied { getattr } for pid=4530 comm="coredns" path="cgroup:[4026532737]" dev="nsfs" ino=4026532737 scontext=system_u:system_r:svirt_lxc_net_t:s0:c767,c815 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Sep 13 01:33:46.720000 audit[4530]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056888 a2=400014e578 a3=0 items=0 ppid=4437 pid=4530 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c767,c815 key=(null) Sep 13 01:33:46.720000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Sep 13 01:33:46.761780 systemd-networkd[1601]: cali2dd7773b929: Gained IPv6LL Sep 13 01:33:47.002192 env[1447]: time="2025-09-13T01:33:47.002149184Z" level=info msg="StopPodSandbox for \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\"" Sep 13 01:33:47.003634 env[1447]: time="2025-09-13T01:33:47.002301944Z" level=info msg="StopPodSandbox for \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\"" Sep 13 01:33:47.003998 env[1447]: time="2025-09-13T01:33:47.002349944Z" level=info msg="StopPodSandbox for \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\"" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.084 [INFO][4576] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.084 [INFO][4576] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" iface="eth0" netns="/var/run/netns/cni-1a05baf8-02cb-5adb-aa7c-72040a3b5a57" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.086 [INFO][4576] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" iface="eth0" netns="/var/run/netns/cni-1a05baf8-02cb-5adb-aa7c-72040a3b5a57" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.086 [INFO][4576] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" iface="eth0" netns="/var/run/netns/cni-1a05baf8-02cb-5adb-aa7c-72040a3b5a57" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.086 [INFO][4576] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.086 [INFO][4576] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.130 [INFO][4596] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.131 [INFO][4596] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.131 [INFO][4596] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.148 [WARNING][4596] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.148 [INFO][4596] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.152 [INFO][4596] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:47.155197 env[1447]: 2025-09-13 01:33:47.153 [INFO][4576] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:47.157006 env[1447]: time="2025-09-13T01:33:47.155311376Z" level=info msg="TearDown network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\" successfully" Sep 13 01:33:47.157006 env[1447]: time="2025-09-13T01:33:47.155341616Z" level=info msg="StopPodSandbox for \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\" returns successfully" Sep 13 01:33:47.160492 env[1447]: time="2025-09-13T01:33:47.160462652Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-dn9x6,Uid:8b6a17d7-5c99-4a44-aee7-e6e39838b3d3,Namespace:calico-system,Attempt:1,}" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.104 [INFO][4579] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.105 [INFO][4579] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" iface="eth0" netns="/var/run/netns/cni-0b55a479-102e-4229-c44f-48cfc1f4f018" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.105 [INFO][4579] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" iface="eth0" netns="/var/run/netns/cni-0b55a479-102e-4229-c44f-48cfc1f4f018" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.107 [INFO][4579] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" iface="eth0" netns="/var/run/netns/cni-0b55a479-102e-4229-c44f-48cfc1f4f018" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.107 [INFO][4579] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.107 [INFO][4579] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.164 [INFO][4603] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.164 [INFO][4603] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.164 [INFO][4603] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.191 [WARNING][4603] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.191 [INFO][4603] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.200 [INFO][4603] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:47.204002 env[1447]: 2025-09-13 01:33:47.202 [INFO][4579] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:47.204518 env[1447]: time="2025-09-13T01:33:47.204150535Z" level=info msg="TearDown network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\" successfully" Sep 13 01:33:47.204518 env[1447]: time="2025-09-13T01:33:47.204184575Z" level=info msg="StopPodSandbox for \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\" returns successfully" Sep 13 01:33:47.208550 env[1447]: time="2025-09-13T01:33:47.208494331Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78c5b7c8f4-5d5nl,Uid:52df943e-5550-4ee4-87ef-5b65208ddbbc,Namespace:calico-system,Attempt:1,}" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.128 [INFO][4588] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.128 [INFO][4588] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" iface="eth0" netns="/var/run/netns/cni-70711097-8147-528a-aa20-534ad94d1b66" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.128 [INFO][4588] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" iface="eth0" netns="/var/run/netns/cni-70711097-8147-528a-aa20-534ad94d1b66" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.130 [INFO][4588] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" iface="eth0" netns="/var/run/netns/cni-70711097-8147-528a-aa20-534ad94d1b66" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.131 [INFO][4588] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.131 [INFO][4588] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.199 [INFO][4610] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.199 [INFO][4610] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.202 [INFO][4610] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.223 [WARNING][4610] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.223 [INFO][4610] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.231 [INFO][4610] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:47.234331 env[1447]: 2025-09-13 01:33:47.232 [INFO][4588] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:47.235825 env[1447]: time="2025-09-13T01:33:47.235774508Z" level=info msg="TearDown network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\" successfully" Sep 13 01:33:47.235825 env[1447]: time="2025-09-13T01:33:47.235818668Z" level=info msg="StopPodSandbox for \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\" returns successfully" Sep 13 01:33:47.237629 kubelet[2414]: I0913 01:33:47.237041 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-t8fkc" podStartSLOduration=45.237022227 podStartE2EDuration="45.237022227s" podCreationTimestamp="2025-09-13 01:33:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:33:47.208096292 +0000 UTC m=+52.430394601" watchObservedRunningTime="2025-09-13 01:33:47.237022227 +0000 UTC m=+52.459320536" Sep 13 01:33:47.238257 env[1447]: time="2025-09-13T01:33:47.238223226Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d66856c58-zgwwq,Uid:5e4bc629-7106-42a7-8f0b-73740c96de56,Namespace:calico-apiserver,Attempt:1,}" Sep 13 01:33:47.247000 audit[4620]: NETFILTER_CFG table=filter:115 family=2 entries=18 op=nft_register_rule pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:47.247000 audit[4620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff47964a0 a2=0 a3=1 items=0 ppid=2558 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.247000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:47.251000 audit[4620]: NETFILTER_CFG table=nat:116 family=2 entries=16 op=nft_register_rule pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:47.251000 audit[4620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffff47964a0 a2=0 a3=1 items=0 ppid=2558 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.251000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:47.273000 audit[4622]: NETFILTER_CFG table=filter:117 family=2 entries=15 op=nft_register_rule pid=4622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:47.273000 audit[4622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff7a2a620 a2=0 a3=1 items=0 ppid=2558 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.273000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:47.358000 audit[4622]: NETFILTER_CFG table=nat:118 family=2 entries=49 op=nft_register_chain pid=4622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:47.358000 audit[4622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffff7a2a620 a2=0 a3=1 items=0 ppid=2558 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.358000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:47.475976 systemd[1]: run-containerd-runc-k8s.io-95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225-runc.hqeOHG.mount: Deactivated successfully. Sep 13 01:33:47.476074 systemd[1]: run-netns-cni\x2d1a05baf8\x2d02cb\x2d5adb\x2daa7c\x2d72040a3b5a57.mount: Deactivated successfully. Sep 13 01:33:47.476123 systemd[1]: run-netns-cni\x2d0b55a479\x2d102e\x2d4229\x2dc44f\x2d48cfc1f4f018.mount: Deactivated successfully. Sep 13 01:33:47.476176 systemd[1]: run-netns-cni\x2d70711097\x2d8147\x2d528a\x2daa20\x2d534ad94d1b66.mount: Deactivated successfully. Sep 13 01:33:47.594054 systemd-networkd[1601]: calic6aa5ad1f93: Gained IPv6LL Sep 13 01:33:47.693213 systemd-networkd[1601]: cali0627e40708e: Link UP Sep 13 01:33:47.706318 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Sep 13 01:33:47.706505 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0627e40708e: link becomes ready Sep 13 01:33:47.707032 systemd-networkd[1601]: cali0627e40708e: Gained carrier Sep 13 01:33:47.726751 kubelet[2414]: I0913 01:33:47.726547 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-9kprh" podStartSLOduration=45.726511857 podStartE2EDuration="45.726511857s" podCreationTimestamp="2025-09-13 01:33:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:33:47.256257331 +0000 UTC m=+52.478555640" watchObservedRunningTime="2025-09-13 01:33:47.726511857 +0000 UTC m=+52.948810166" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.542 [INFO][4624] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0 goldmane-54d579b49d- calico-system 8b6a17d7-5c99-4a44-aee7-e6e39838b3d3 1012 0 2025-09-13 01:33:20 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:54d579b49d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 goldmane-54d579b49d-dn9x6 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali0627e40708e [] [] }} ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.542 [INFO][4624] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.626 [INFO][4654] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" HandleID="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.626 [INFO][4654] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" HandleID="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3940), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-12daba8686", "pod":"goldmane-54d579b49d-dn9x6", "timestamp":"2025-09-13 01:33:47.626079741 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.626 [INFO][4654] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.626 [INFO][4654] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.626 [INFO][4654] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.637 [INFO][4654] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.642 [INFO][4654] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.647 [INFO][4654] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.649 [INFO][4654] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.656 [INFO][4654] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.656 [INFO][4654] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.658 [INFO][4654] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821 Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.664 [INFO][4654] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.682 [INFO][4654] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.199/26] block=192.168.19.192/26 handle="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.682 [INFO][4654] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.199/26] handle="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.682 [INFO][4654] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:47.728506 env[1447]: 2025-09-13 01:33:47.682 [INFO][4654] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.199/26] IPv6=[] ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" HandleID="k8s-pod-network.84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.729204 env[1447]: 2025-09-13 01:33:47.685 [INFO][4624] cni-plugin/k8s.go 418: Populated endpoint ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3", ResourceVersion:"1012", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"goldmane-54d579b49d-dn9x6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.19.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0627e40708e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:47.729204 env[1447]: 2025-09-13 01:33:47.685 [INFO][4624] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.199/32] ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.729204 env[1447]: 2025-09-13 01:33:47.685 [INFO][4624] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0627e40708e ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.729204 env[1447]: 2025-09-13 01:33:47.708 [INFO][4624] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.729204 env[1447]: 2025-09-13 01:33:47.711 [INFO][4624] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3", ResourceVersion:"1012", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821", Pod:"goldmane-54d579b49d-dn9x6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.19.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0627e40708e", MAC:"06:9d:13:ee:ea:01", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:47.729204 env[1447]: 2025-09-13 01:33:47.724 [INFO][4624] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821" Namespace="calico-system" Pod="goldmane-54d579b49d-dn9x6" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:47.767710 kernel: kauditd_printk_skb: 485 callbacks suppressed Sep 13 01:33:47.767836 kernel: audit: type=1325 audit(1757727227.744:1339): table=filter:119 family=2 entries=56 op=nft_register_chain pid=4691 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:47.744000 audit[4691]: NETFILTER_CFG table=filter:119 family=2 entries=56 op=nft_register_chain pid=4691 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:47.744000 audit[4691]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28712 a0=3 a1=ffffe0bbdb80 a2=0 a3=ffffa49cffa8 items=0 ppid=3753 pid=4691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.800286 kernel: audit: type=1300 audit(1757727227.744:1339): arch=c00000b7 syscall=211 success=yes exit=28712 a0=3 a1=ffffe0bbdb80 a2=0 a3=ffffa49cffa8 items=0 ppid=3753 pid=4691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.744000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:47.823685 kernel: audit: type=1327 audit(1757727227.744:1339): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:47.867683 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali72b7de51a7e: link becomes ready Sep 13 01:33:47.869505 systemd-networkd[1601]: cali72b7de51a7e: Link UP Sep 13 01:33:47.869741 systemd-networkd[1601]: cali72b7de51a7e: Gained carrier Sep 13 01:33:47.875856 env[1447]: time="2025-09-13T01:33:47.875784251Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:47.876118 env[1447]: time="2025-09-13T01:33:47.876093091Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:47.876425 env[1447]: time="2025-09-13T01:33:47.876399811Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:47.879975 env[1447]: time="2025-09-13T01:33:47.879462408Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821 pid=4701 runtime=io.containerd.runc.v2 Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.580 [INFO][4635] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0 calico-apiserver-7d66856c58- calico-apiserver 5e4bc629-7106-42a7-8f0b-73740c96de56 1014 0 2025-09-13 01:33:17 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7d66856c58 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 calico-apiserver-7d66856c58-zgwwq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali72b7de51a7e [] [] }} ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.580 [INFO][4635] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.671 [INFO][4667] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" HandleID="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.671 [INFO][4667] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" HandleID="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000328140), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-12daba8686", "pod":"calico-apiserver-7d66856c58-zgwwq", "timestamp":"2025-09-13 01:33:47.671183823 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.671 [INFO][4667] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.683 [INFO][4667] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.683 [INFO][4667] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.736 [INFO][4667] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.744 [INFO][4667] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.749 [INFO][4667] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.774 [INFO][4667] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.805 [INFO][4667] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.805 [INFO][4667] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.822 [INFO][4667] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3 Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.832 [INFO][4667] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.848 [INFO][4667] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.200/26] block=192.168.19.192/26 handle="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.848 [INFO][4667] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.200/26] handle="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.849 [INFO][4667] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:47.890457 env[1447]: 2025-09-13 01:33:47.849 [INFO][4667] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.200/26] IPv6=[] ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" HandleID="k8s-pod-network.bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.891052 env[1447]: 2025-09-13 01:33:47.856 [INFO][4635] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0", GenerateName:"calico-apiserver-7d66856c58-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e4bc629-7106-42a7-8f0b-73740c96de56", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d66856c58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"calico-apiserver-7d66856c58-zgwwq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali72b7de51a7e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:47.891052 env[1447]: 2025-09-13 01:33:47.857 [INFO][4635] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.200/32] ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.891052 env[1447]: 2025-09-13 01:33:47.857 [INFO][4635] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali72b7de51a7e ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.891052 env[1447]: 2025-09-13 01:33:47.867 [INFO][4635] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.891052 env[1447]: 2025-09-13 01:33:47.870 [INFO][4635] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0", GenerateName:"calico-apiserver-7d66856c58-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e4bc629-7106-42a7-8f0b-73740c96de56", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d66856c58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3", Pod:"calico-apiserver-7d66856c58-zgwwq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali72b7de51a7e", MAC:"5a:d1:f8:8e:fe:8b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:47.891052 env[1447]: 2025-09-13 01:33:47.888 [INFO][4635] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-zgwwq" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:47.906214 systemd[1]: Started cri-containerd-84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821.scope. Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.954735 env[1447]: time="2025-09-13T01:33:47.954679345Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:47.954918 env[1447]: time="2025-09-13T01:33:47.954896905Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:47.955028 env[1447]: time="2025-09-13T01:33:47.955007945Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:47.955249 env[1447]: time="2025-09-13T01:33:47.955223905Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3 pid=4744 runtime=io.containerd.runc.v2 Sep 13 01:33:47.980478 kernel: audit: type=1400 audit(1757727227.927:1340): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.980591 kernel: audit: type=1400 audit(1757727227.927:1341): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.007763 kernel: audit: type=1400 audit(1757727227.927:1342): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.034131 kernel: audit: type=1400 audit(1757727227.927:1343): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.048941 systemd[1]: Started cri-containerd-bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3.scope. Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.074664 kernel: audit: type=1400 audit(1757727227.927:1344): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.075389 systemd-networkd[1601]: cali48385af6558: Link UP Sep 13 01:33:48.105812 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali48385af6558: link becomes ready Sep 13 01:33:48.105923 kernel: audit: type=1400 audit(1757727227.927:1345): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.107093 systemd-networkd[1601]: cali48385af6558: Gained carrier Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.128488 kernel: audit: type=1400 audit(1757727227.927:1346): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.927000 audit: BPF prog-id=205 op=LOAD Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4701 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834616433323665393763303562613863336637376539396530303663 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4701 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834616433323665393763303562613863336637376539396530303663 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.928000 audit: BPF prog-id=206 op=LOAD Sep 13 01:33:47.928000 audit[4715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4701 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834616433323665393763303562613863336637376539396530303663 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.967000 audit: BPF prog-id=207 op=LOAD Sep 13 01:33:47.967000 audit[4715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4701 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834616433323665393763303562613863336637376539396530303663 Sep 13 01:33:47.981000 audit: BPF prog-id=207 op=UNLOAD Sep 13 01:33:47.981000 audit: BPF prog-id=206 op=UNLOAD Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { perfmon } for pid=4715 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit[4715]: AVC avc: denied { bpf } for pid=4715 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:47.981000 audit: BPF prog-id=208 op=LOAD Sep 13 01:33:47.981000 audit[4715]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4701 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834616433323665393763303562613863336637376539396530303663 Sep 13 01:33:47.984000 audit[4748]: NETFILTER_CFG table=filter:120 family=2 entries=53 op=nft_register_chain pid=4748 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:47.984000 audit[4748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26608 a0=3 a1=fffff54c5500 a2=0 a3=ffff8e562fa8 items=0 ppid=3753 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:47.984000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.616 [INFO][4647] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0 calico-kube-controllers-78c5b7c8f4- calico-system 52df943e-5550-4ee4-87ef-5b65208ddbbc 1013 0 2025-09-13 01:33:20 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:78c5b7c8f4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 calico-kube-controllers-78c5b7c8f4-5d5nl eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali48385af6558 [] [] }} ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.616 [INFO][4647] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.697 [INFO][4674] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" HandleID="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.698 [INFO][4674] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" HandleID="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003294c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-12daba8686", "pod":"calico-kube-controllers-78c5b7c8f4-5d5nl", "timestamp":"2025-09-13 01:33:47.697755281 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.698 [INFO][4674] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.848 [INFO][4674] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.848 [INFO][4674] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.878 [INFO][4674] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.896 [INFO][4674] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.923 [INFO][4674] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.925 [INFO][4674] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.952 [INFO][4674] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.952 [INFO][4674] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:47.984 [INFO][4674] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4 Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:48.009 [INFO][4674] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:48.046 [INFO][4674] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.201/26] block=192.168.19.192/26 handle="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:48.046 [INFO][4674] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.201/26] handle="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:48.046 [INFO][4674] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:48.138037 env[1447]: 2025-09-13 01:33:48.046 [INFO][4674] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.201/26] IPv6=[] ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" HandleID="k8s-pod-network.69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:48.138731 env[1447]: 2025-09-13 01:33:48.058 [INFO][4647] cni-plugin/k8s.go 418: Populated endpoint ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0", GenerateName:"calico-kube-controllers-78c5b7c8f4-", Namespace:"calico-system", SelfLink:"", UID:"52df943e-5550-4ee4-87ef-5b65208ddbbc", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78c5b7c8f4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"calico-kube-controllers-78c5b7c8f4-5d5nl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali48385af6558", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:48.138731 env[1447]: 2025-09-13 01:33:48.059 [INFO][4647] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.201/32] ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:48.138731 env[1447]: 2025-09-13 01:33:48.059 [INFO][4647] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali48385af6558 ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:48.138731 env[1447]: 2025-09-13 01:33:48.075 [INFO][4647] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:48.138731 env[1447]: 2025-09-13 01:33:48.108 [INFO][4647] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0", GenerateName:"calico-kube-controllers-78c5b7c8f4-", Namespace:"calico-system", SelfLink:"", UID:"52df943e-5550-4ee4-87ef-5b65208ddbbc", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78c5b7c8f4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4", Pod:"calico-kube-controllers-78c5b7c8f4-5d5nl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali48385af6558", MAC:"96:8a:7b:c7:31:80", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:48.138731 env[1447]: 2025-09-13 01:33:48.134 [INFO][4647] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4" Namespace="calico-system" Pod="calico-kube-controllers-78c5b7c8f4-5d5nl" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit: BPF prog-id=209 op=LOAD Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4744 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356635353266323861393130316263373833656438363330323466 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4744 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356635353266323861393130316263373833656438363330323466 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit: BPF prog-id=210 op=LOAD Sep 13 01:33:48.144000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4744 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356635353266323861393130316263373833656438363330323466 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit: BPF prog-id=211 op=LOAD Sep 13 01:33:48.144000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4744 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356635353266323861393130316263373833656438363330323466 Sep 13 01:33:48.144000 audit: BPF prog-id=211 op=UNLOAD Sep 13 01:33:48.144000 audit: BPF prog-id=210 op=UNLOAD Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.144000 audit: BPF prog-id=212 op=LOAD Sep 13 01:33:48.144000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4744 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356635353266323861393130316263373833656438363330323466 Sep 13 01:33:48.173186 env[1447]: time="2025-09-13T01:33:48.173131044Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-54d579b49d-dn9x6,Uid:8b6a17d7-5c99-4a44-aee7-e6e39838b3d3,Namespace:calico-system,Attempt:1,} returns sandbox id \"84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821\"" Sep 13 01:33:48.183469 env[1447]: time="2025-09-13T01:33:48.183368396Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:48.183469 env[1447]: time="2025-09-13T01:33:48.183406236Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:48.183469 env[1447]: time="2025-09-13T01:33:48.183416236Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:48.183716 env[1447]: time="2025-09-13T01:33:48.183609476Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4 pid=4791 runtime=io.containerd.runc.v2 Sep 13 01:33:48.200976 env[1447]: time="2025-09-13T01:33:48.200927301Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d66856c58-zgwwq,Uid:5e4bc629-7106-42a7-8f0b-73740c96de56,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3\"" Sep 13 01:33:48.192000 audit[4783]: NETFILTER_CFG table=filter:121 family=2 entries=56 op=nft_register_chain pid=4783 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:48.192000 audit[4783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25484 a0=3 a1=ffffe9686b60 a2=0 a3=ffff88148fa8 items=0 ppid=3753 pid=4783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.192000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:48.214434 systemd[1]: Started cri-containerd-69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4.scope. Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit: BPF prog-id=213 op=LOAD Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4791 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639636234316633373130393035616439663337646238323463306531 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4791 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639636234316633373130393035616439663337646238323463306531 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.241000 audit: BPF prog-id=214 op=LOAD Sep 13 01:33:48.241000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4791 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639636234316633373130393035616439663337646238323463306531 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit: BPF prog-id=215 op=LOAD Sep 13 01:33:48.242000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4791 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639636234316633373130393035616439663337646238323463306531 Sep 13 01:33:48.242000 audit: BPF prog-id=215 op=UNLOAD Sep 13 01:33:48.242000 audit: BPF prog-id=214 op=UNLOAD Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { perfmon } for pid=4809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit[4809]: AVC avc: denied { bpf } for pid=4809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.242000 audit: BPF prog-id=216 op=LOAD Sep 13 01:33:48.242000 audit[4809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4791 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639636234316633373130393035616439663337646238323463306531 Sep 13 01:33:48.275765 env[1447]: time="2025-09-13T01:33:48.275725920Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78c5b7c8f4-5d5nl,Uid:52df943e-5550-4ee4-87ef-5b65208ddbbc,Namespace:calico-system,Attempt:1,} returns sandbox id \"69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4\"" Sep 13 01:33:48.425859 systemd-networkd[1601]: cali33bc5f2d551: Gained IPv6LL Sep 13 01:33:48.681382 env[1447]: time="2025-09-13T01:33:48.681167305Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:48.687936 env[1447]: time="2025-09-13T01:33:48.687898139Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:48.692405 env[1447]: time="2025-09-13T01:33:48.692367015Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:48.696533 env[1447]: time="2025-09-13T01:33:48.696498012Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:48.696975 env[1447]: time="2025-09-13T01:33:48.696945012Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 01:33:48.701378 env[1447]: time="2025-09-13T01:33:48.701324488Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\"" Sep 13 01:33:48.703014 env[1447]: time="2025-09-13T01:33:48.702978487Z" level=info msg="CreateContainer within sandbox \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 01:33:48.734164 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount559644726.mount: Deactivated successfully. Sep 13 01:33:48.755846 env[1447]: time="2025-09-13T01:33:48.755790363Z" level=info msg="CreateContainer within sandbox \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\"" Sep 13 01:33:48.756857 env[1447]: time="2025-09-13T01:33:48.756822122Z" level=info msg="StartContainer for \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\"" Sep 13 01:33:48.787695 systemd[1]: Started cri-containerd-ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730.scope. Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.878000 audit: BPF prog-id=217 op=LOAD Sep 13 01:33:48.879000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.879000 audit[4840]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4019 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373362303231616461666266623766396337353238353630626661 Sep 13 01:33:48.879000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.879000 audit[4840]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4019 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373362303231616461666266623766396337353238353630626661 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit: BPF prog-id=218 op=LOAD Sep 13 01:33:48.880000 audit[4840]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4019 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373362303231616461666266623766396337353238353630626661 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit: BPF prog-id=219 op=LOAD Sep 13 01:33:48.880000 audit[4840]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4019 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373362303231616461666266623766396337353238353630626661 Sep 13 01:33:48.880000 audit: BPF prog-id=219 op=UNLOAD Sep 13 01:33:48.880000 audit: BPF prog-id=218 op=UNLOAD Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { perfmon } for pid=4840 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit[4840]: AVC avc: denied { bpf } for pid=4840 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:48.880000 audit: BPF prog-id=220 op=LOAD Sep 13 01:33:48.880000 audit[4840]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4019 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:48.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373362303231616461666266623766396337353238353630626661 Sep 13 01:33:48.986369 env[1447]: time="2025-09-13T01:33:48.986326173Z" level=info msg="StartContainer for \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\" returns successfully" Sep 13 01:33:49.002420 systemd-networkd[1601]: cali0627e40708e: Gained IPv6LL Sep 13 01:33:49.234961 kubelet[2414]: I0913 01:33:49.234903 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-84855b6446-8ds5r" podStartSLOduration=29.131717649 podStartE2EDuration="35.23488573s" podCreationTimestamp="2025-09-13 01:33:14 +0000 UTC" firstStartedPulling="2025-09-13 01:33:42.597058328 +0000 UTC m=+47.819356637" lastFinishedPulling="2025-09-13 01:33:48.700226409 +0000 UTC m=+53.922524718" observedRunningTime="2025-09-13 01:33:49.233349452 +0000 UTC m=+54.455647761" watchObservedRunningTime="2025-09-13 01:33:49.23488573 +0000 UTC m=+54.457184039" Sep 13 01:33:49.251000 audit[4874]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:49.251000 audit[4874]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe70308f0 a2=0 a3=1 items=0 ppid=2558 pid=4874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:49.251000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:49.255000 audit[4874]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:49.255000 audit[4874]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe70308f0 a2=0 a3=1 items=0 ppid=2558 pid=4874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:49.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:49.385817 systemd-networkd[1601]: cali72b7de51a7e: Gained IPv6LL Sep 13 01:33:49.577781 systemd-networkd[1601]: cali48385af6558: Gained IPv6LL Sep 13 01:33:50.169464 env[1447]: time="2025-09-13T01:33:50.169411212Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.176679 env[1447]: time="2025-09-13T01:33:50.176624686Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.180834 env[1447]: time="2025-09-13T01:33:50.180797003Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.185598 env[1447]: time="2025-09-13T01:33:50.185559559Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:f22c88018d8b58c4ef0052f594b216a13bd6852166ac131a538c5ab2fba23bb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.186126 env[1447]: time="2025-09-13T01:33:50.186087599Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.3\" returns image reference \"sha256:5e2b30128ce4b607acd97d3edef62ce1a90be0259903090a51c360adbe4a8f3b\"" Sep 13 01:33:50.188855 env[1447]: time="2025-09-13T01:33:50.188809957Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 01:33:50.189836 env[1447]: time="2025-09-13T01:33:50.189789676Z" level=info msg="CreateContainer within sandbox \"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Sep 13 01:33:50.214184 kubelet[2414]: I0913 01:33:50.213804 2414 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:33:50.239380 env[1447]: time="2025-09-13T01:33:50.239324116Z" level=info msg="CreateContainer within sandbox \"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"ba54d98c8fdbe6a29c4aff13d62128c97123d4dcc81a1a74f2e421181cb2c578\"" Sep 13 01:33:50.240191 env[1447]: time="2025-09-13T01:33:50.240144956Z" level=info msg="StartContainer for \"ba54d98c8fdbe6a29c4aff13d62128c97123d4dcc81a1a74f2e421181cb2c578\"" Sep 13 01:33:50.275453 systemd[1]: Started cri-containerd-ba54d98c8fdbe6a29c4aff13d62128c97123d4dcc81a1a74f2e421181cb2c578.scope. Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4143 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353464393863386664626536613239633461666631336436323132 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit: BPF prog-id=221 op=LOAD Sep 13 01:33:50.299000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4143 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353464393863386664626536613239633461666631336436323132 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.299000 audit: BPF prog-id=222 op=LOAD Sep 13 01:33:50.299000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4143 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353464393863386664626536613239633461666631336436323132 Sep 13 01:33:50.300000 audit: BPF prog-id=222 op=UNLOAD Sep 13 01:33:50.300000 audit: BPF prog-id=221 op=UNLOAD Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.300000 audit: BPF prog-id=223 op=LOAD Sep 13 01:33:50.300000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4143 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353464393863386664626536613239633461666631336436323132 Sep 13 01:33:50.322292 env[1447]: time="2025-09-13T01:33:50.322246930Z" level=info msg="StartContainer for \"ba54d98c8fdbe6a29c4aff13d62128c97123d4dcc81a1a74f2e421181cb2c578\" returns successfully" Sep 13 01:33:50.381000 audit[4851]: AVC avc: denied { watch } for pid=4851 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_29.1235992901/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c553,c611 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c553,c611 tclass=file permissive=0 Sep 13 01:33:50.381000 audit[4851]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000a91960 a2=fc6 a3=0 items=0 ppid=4019 pid=4851 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c553,c611 key=(null) Sep 13 01:33:50.381000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:33:50.550430 env[1447]: time="2025-09-13T01:33:50.550391107Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.557462 env[1447]: time="2025-09-13T01:33:50.557420381Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.562136 env[1447]: time="2025-09-13T01:33:50.562090378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.566178 env[1447]: time="2025-09-13T01:33:50.566140174Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:50.566634 env[1447]: time="2025-09-13T01:33:50.566606694Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 01:33:50.569329 env[1447]: time="2025-09-13T01:33:50.569301972Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\"" Sep 13 01:33:50.569460 env[1447]: time="2025-09-13T01:33:50.569422892Z" level=info msg="CreateContainer within sandbox \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 01:33:50.613794 env[1447]: time="2025-09-13T01:33:50.613744576Z" level=info msg="CreateContainer within sandbox \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\"" Sep 13 01:33:50.614710 env[1447]: time="2025-09-13T01:33:50.614683375Z" level=info msg="StartContainer for \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\"" Sep 13 01:33:50.651786 systemd[1]: run-containerd-runc-k8s.io-d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d-runc.RpAaJp.mount: Deactivated successfully. Sep 13 01:33:50.654992 systemd[1]: Started cri-containerd-d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d.scope. Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit: BPF prog-id=224 op=LOAD Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4251 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663734636366303138316239316232633130663333646533626462 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4251 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663734636366303138316239316232633130663333646533626462 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit: BPF prog-id=225 op=LOAD Sep 13 01:33:50.741000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4251 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663734636366303138316239316232633130663333646533626462 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.741000 audit: BPF prog-id=226 op=LOAD Sep 13 01:33:50.741000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4251 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663734636366303138316239316232633130663333646533626462 Sep 13 01:33:50.741000 audit: BPF prog-id=226 op=UNLOAD Sep 13 01:33:50.741000 audit: BPF prog-id=225 op=UNLOAD Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:50.742000 audit: BPF prog-id=227 op=LOAD Sep 13 01:33:50.742000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4251 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:50.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663734636366303138316239316232633130663333646533626462 Sep 13 01:33:50.794903 env[1447]: time="2025-09-13T01:33:50.794844991Z" level=info msg="StartContainer for \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\" returns successfully" Sep 13 01:33:51.241971 kubelet[2414]: I0913 01:33:51.241904 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-84855b6446-7k6rx" podStartSLOduration=32.101802037 podStartE2EDuration="37.241886356s" podCreationTimestamp="2025-09-13 01:33:14 +0000 UTC" firstStartedPulling="2025-09-13 01:33:45.427967734 +0000 UTC m=+50.650266043" lastFinishedPulling="2025-09-13 01:33:50.568052053 +0000 UTC m=+55.790350362" observedRunningTime="2025-09-13 01:33:51.239997197 +0000 UTC m=+56.462295506" watchObservedRunningTime="2025-09-13 01:33:51.241886356 +0000 UTC m=+56.464184625" Sep 13 01:33:51.263000 audit[4958]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:51.263000 audit[4958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff4677c90 a2=0 a3=1 items=0 ppid=2558 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:51.263000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:51.269000 audit[4958]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:51.269000 audit[4958]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff4677c90 a2=0 a3=1 items=0 ppid=2558 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:51.269000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:51.452000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:51.452000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000cd7590 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:33:51.452000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:33:51.452000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:51.452000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e0e3e0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:33:51.452000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:33:51.924000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:51.924000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40086e72c0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:33:51.924000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:33:51.991000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:51.991000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=400892e960 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:33:51.991000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:33:51.999000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:51.999000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4009864ae0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:33:51.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:33:52.005000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:52.005000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4004a66a80 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:33:52.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:33:52.022000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:52.023000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:52.023000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=40072706f0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:33:52.023000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:33:52.022000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=400429b700 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:33:52.022000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:33:52.222744 kubelet[2414]: I0913 01:33:52.222386 2414 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:33:52.645000 audit[4936]: AVC avc: denied { watch } for pid=4936 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_29.742473347/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c579,c994 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c579,c994 tclass=file permissive=0 Sep 13 01:33:52.645000 audit[4936]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f1d3e0 a2=fc6 a3=0 items=0 ppid=4251 pid=4936 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c579,c994 key=(null) Sep 13 01:33:52.645000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:33:52.886990 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount728184000.mount: Deactivated successfully. Sep 13 01:33:54.457497 env[1447]: time="2025-09-13T01:33:54.457453267Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.466936 env[1447]: time="2025-09-13T01:33:54.466895700Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.472848 env[1447]: time="2025-09-13T01:33:54.472805215Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.477192 env[1447]: time="2025-09-13T01:33:54.477140652Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:46297703ab3739331a00a58f0d6a5498c8d3b6523ad947eed68592ee0f3e79f0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.478757 env[1447]: time="2025-09-13T01:33:54.478053171Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.3\" returns image reference \"sha256:14088376331a0622b7f6a2fbc2f2932806a6eafdd7b602f6139d3b985bf1e685\"" Sep 13 01:33:54.480316 env[1447]: time="2025-09-13T01:33:54.480267570Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\"" Sep 13 01:33:54.481069 env[1447]: time="2025-09-13T01:33:54.481032649Z" level=info msg="CreateContainer within sandbox \"84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Sep 13 01:33:54.523890 env[1447]: time="2025-09-13T01:33:54.523835937Z" level=info msg="CreateContainer within sandbox \"84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14\"" Sep 13 01:33:54.524587 env[1447]: time="2025-09-13T01:33:54.524545856Z" level=info msg="StartContainer for \"54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14\"" Sep 13 01:33:54.569833 systemd[1]: Started cri-containerd-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14.scope. Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.602125 kernel: kauditd_printk_skb: 369 callbacks suppressed Sep 13 01:33:54.602280 kernel: audit: type=1400 audit(1757727234.585:1452): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.644540 kernel: audit: type=1400 audit(1757727234.585:1453): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.645126 kernel: audit: type=1400 audit(1757727234.585:1454): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.683995 kernel: audit: type=1400 audit(1757727234.585:1455): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.703023 kernel: audit: type=1400 audit(1757727234.585:1456): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.703150 kernel: audit: type=1400 audit(1757727234.585:1457): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.738961 kernel: audit: type=1400 audit(1757727234.585:1458): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.757807 kernel: audit: type=1400 audit(1757727234.585:1459): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.778065 kernel: audit: type=1400 audit(1757727234.585:1460): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.800675 kernel: audit: type=1400 audit(1757727234.585:1461): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.585000 audit: BPF prog-id=228 op=LOAD Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4701 pid=4970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534623163313338323738666336333730633935613265303933333738 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4701 pid=4970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534623163313338323738666336333730633935613265303933333738 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.596000 audit: BPF prog-id=229 op=LOAD Sep 13 01:33:54.596000 audit[4970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4701 pid=4970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534623163313338323738666336333730633935613265303933333738 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.601000 audit: BPF prog-id=230 op=LOAD Sep 13 01:33:54.601000 audit[4970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4701 pid=4970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534623163313338323738666336333730633935613265303933333738 Sep 13 01:33:54.624000 audit: BPF prog-id=230 op=UNLOAD Sep 13 01:33:54.624000 audit: BPF prog-id=229 op=UNLOAD Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { perfmon } for pid=4970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit[4970]: AVC avc: denied { bpf } for pid=4970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.624000 audit: BPF prog-id=231 op=LOAD Sep 13 01:33:54.624000 audit[4970]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4701 pid=4970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534623163313338323738666336333730633935613265303933333738 Sep 13 01:33:54.812908 env[1447]: time="2025-09-13T01:33:54.812846358Z" level=info msg="StartContainer for \"54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14\" returns successfully" Sep 13 01:33:54.851301 env[1447]: time="2025-09-13T01:33:54.851245009Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.858908 env[1447]: time="2025-09-13T01:33:54.858867363Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.864837 env[1447]: time="2025-09-13T01:33:54.864798239Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.869734 env[1447]: time="2025-09-13T01:33:54.869698435Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:6a24147f11c1edce9d6ba79bdb0c2beadec53853fb43438a287291e67b41e51b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:54.870467 env[1447]: time="2025-09-13T01:33:54.870442395Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.3\" returns image reference \"sha256:632fbde00b1918016ac07458e79cc438ccda83cb762bfd5fc50a26721abced08\"" Sep 13 01:33:54.872773 env[1447]: time="2025-09-13T01:33:54.872741833Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\"" Sep 13 01:33:54.873873 env[1447]: time="2025-09-13T01:33:54.873845912Z" level=info msg="CreateContainer within sandbox \"bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 01:33:54.916532 env[1447]: time="2025-09-13T01:33:54.916466440Z" level=info msg="CreateContainer within sandbox \"bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"d5fb654047bb063b5db55cfd39a014c643efde2fe3916fc6d9f23828d6a317fc\"" Sep 13 01:33:54.917106 env[1447]: time="2025-09-13T01:33:54.917063239Z" level=info msg="StartContainer for \"d5fb654047bb063b5db55cfd39a014c643efde2fe3916fc6d9f23828d6a317fc\"" Sep 13 01:33:54.932875 systemd[1]: Started cri-containerd-d5fb654047bb063b5db55cfd39a014c643efde2fe3916fc6d9f23828d6a317fc.scope. Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.951000 audit: BPF prog-id=232 op=LOAD Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4744 pid=5006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435666236353430343762623036336235646235356366643339613031 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4744 pid=5006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435666236353430343762623036336235646235356366643339613031 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit: BPF prog-id=233 op=LOAD Sep 13 01:33:54.953000 audit[5006]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4744 pid=5006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435666236353430343762623036336235646235356366643339613031 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit: BPF prog-id=234 op=LOAD Sep 13 01:33:54.953000 audit[5006]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4744 pid=5006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435666236353430343762623036336235646235356366643339613031 Sep 13 01:33:54.953000 audit: BPF prog-id=234 op=UNLOAD Sep 13 01:33:54.953000 audit: BPF prog-id=233 op=UNLOAD Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { perfmon } for pid=5006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit[5006]: AVC avc: denied { bpf } for pid=5006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:54.953000 audit: BPF prog-id=235 op=LOAD Sep 13 01:33:54.953000 audit[5006]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4744 pid=5006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:54.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435666236353430343762623036336235646235356366643339613031 Sep 13 01:33:54.988876 env[1447]: time="2025-09-13T01:33:54.988764265Z" level=info msg="StartContainer for \"d5fb654047bb063b5db55cfd39a014c643efde2fe3916fc6d9f23828d6a317fc\" returns successfully" Sep 13 01:33:54.995557 env[1447]: time="2025-09-13T01:33:54.995517380Z" level=info msg="StopPodSandbox for \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\"" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.038 [WARNING][5043] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0", GenerateName:"calico-apiserver-7d66856c58-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e4bc629-7106-42a7-8f0b-73740c96de56", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d66856c58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3", Pod:"calico-apiserver-7d66856c58-zgwwq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali72b7de51a7e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.038 [INFO][5043] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.038 [INFO][5043] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" iface="eth0" netns="" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.038 [INFO][5043] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.038 [INFO][5043] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.092 [INFO][5052] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.093 [INFO][5052] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.093 [INFO][5052] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.109 [WARNING][5052] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.109 [INFO][5052] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.111 [INFO][5052] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.114067 env[1447]: 2025-09-13 01:33:55.112 [INFO][5043] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.114598 env[1447]: time="2025-09-13T01:33:55.114561251Z" level=info msg="TearDown network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\" successfully" Sep 13 01:33:55.114697 env[1447]: time="2025-09-13T01:33:55.114649451Z" level=info msg="StopPodSandbox for \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\" returns successfully" Sep 13 01:33:55.115421 env[1447]: time="2025-09-13T01:33:55.115385411Z" level=info msg="RemovePodSandbox for \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\"" Sep 13 01:33:55.115485 env[1447]: time="2025-09-13T01:33:55.115426811Z" level=info msg="Forcibly stopping sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\"" Sep 13 01:33:55.292955 kubelet[2414]: I0913 01:33:55.292645 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7d66856c58-zgwwq" podStartSLOduration=31.623526385 podStartE2EDuration="38.292629319s" podCreationTimestamp="2025-09-13 01:33:17 +0000 UTC" firstStartedPulling="2025-09-13 01:33:48.20267966 +0000 UTC m=+53.424977929" lastFinishedPulling="2025-09-13 01:33:54.871782594 +0000 UTC m=+60.094080863" observedRunningTime="2025-09-13 01:33:55.25106567 +0000 UTC m=+60.473363979" watchObservedRunningTime="2025-09-13 01:33:55.292629319 +0000 UTC m=+60.514927628" Sep 13 01:33:55.293333 kubelet[2414]: I0913 01:33:55.293004 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-54d579b49d-dn9x6" podStartSLOduration=28.990099869 podStartE2EDuration="35.292997758s" podCreationTimestamp="2025-09-13 01:33:20 +0000 UTC" firstStartedPulling="2025-09-13 01:33:48.176571881 +0000 UTC m=+53.398870190" lastFinishedPulling="2025-09-13 01:33:54.47946977 +0000 UTC m=+59.701768079" observedRunningTime="2025-09-13 01:33:55.292860438 +0000 UTC m=+60.515158747" watchObservedRunningTime="2025-09-13 01:33:55.292997758 +0000 UTC m=+60.515296067" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.190 [WARNING][5073] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0", GenerateName:"calico-apiserver-7d66856c58-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e4bc629-7106-42a7-8f0b-73740c96de56", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d66856c58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"bf5f552f28a9101bc783ed863024fe70147a6aa53c905a4f7288fdb25ffd89a3", Pod:"calico-apiserver-7d66856c58-zgwwq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali72b7de51a7e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.191 [INFO][5073] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.191 [INFO][5073] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" iface="eth0" netns="" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.191 [INFO][5073] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.191 [INFO][5073] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.271 [INFO][5081] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.276 [INFO][5081] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.276 [INFO][5081] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.291 [WARNING][5081] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.291 [INFO][5081] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" HandleID="k8s-pod-network.3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--zgwwq-eth0" Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.298 [INFO][5081] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.303182 env[1447]: 2025-09-13 01:33:55.300 [INFO][5073] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d" Sep 13 01:33:55.303623 env[1447]: time="2025-09-13T01:33:55.303203671Z" level=info msg="TearDown network for sandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\" successfully" Sep 13 01:33:55.309000 audit[5105]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=5105 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:55.309000 audit[5105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffdf8e7960 a2=0 a3=1 items=0 ppid=2558 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:55.309000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:55.315469 env[1447]: time="2025-09-13T01:33:55.315415302Z" level=info msg="RemovePodSandbox \"3e523967592e805264bd5d706cc3a8a9aa572b5e107553590fcf55c49239147d\" returns successfully" Sep 13 01:33:55.316053 env[1447]: time="2025-09-13T01:33:55.316015421Z" level=info msg="StopPodSandbox for \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\"" Sep 13 01:33:55.319000 audit[5105]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=5105 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:55.319000 audit[5105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffdf8e7960 a2=0 a3=1 items=0 ppid=2558 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:55.319000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:55.340000 audit[5120]: NETFILTER_CFG table=filter:128 family=2 entries=12 op=nft_register_rule pid=5120 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:55.340000 audit[5120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd6301a80 a2=0 a3=1 items=0 ppid=2558 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:55.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:55.347000 audit[5120]: NETFILTER_CFG table=nat:129 family=2 entries=22 op=nft_register_rule pid=5120 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:55.347000 audit[5120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd6301a80 a2=0 a3=1 items=0 ppid=2558 pid=5120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:55.347000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.365 [WARNING][5115] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.365 [INFO][5115] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.365 [INFO][5115] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" iface="eth0" netns="" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.365 [INFO][5115] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.365 [INFO][5115] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.410 [INFO][5129] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.410 [INFO][5129] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.410 [INFO][5129] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.422 [WARNING][5129] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.422 [INFO][5129] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.426 [INFO][5129] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.428618 env[1447]: 2025-09-13 01:33:55.427 [INFO][5115] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.429060 env[1447]: time="2025-09-13T01:33:55.428647817Z" level=info msg="TearDown network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\" successfully" Sep 13 01:33:55.429060 env[1447]: time="2025-09-13T01:33:55.428696817Z" level=info msg="StopPodSandbox for \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\" returns successfully" Sep 13 01:33:55.429328 env[1447]: time="2025-09-13T01:33:55.429300617Z" level=info msg="RemovePodSandbox for \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\"" Sep 13 01:33:55.429599 env[1447]: time="2025-09-13T01:33:55.429497177Z" level=info msg="Forcibly stopping sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\"" Sep 13 01:33:55.510201 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.aMIgJw.mount: Deactivated successfully. Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.470 [WARNING][5144] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.471 [INFO][5144] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.471 [INFO][5144] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" iface="eth0" netns="" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.471 [INFO][5144] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.471 [INFO][5144] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.494 [INFO][5151] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.495 [INFO][5151] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.495 [INFO][5151] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.504 [WARNING][5151] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.504 [INFO][5151] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" HandleID="k8s-pod-network.8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Workload="ci--3510.3.8--n--12daba8686-k8s-whisker--7d69989445--pg8j2-eth0" Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.511 [INFO][5151] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.514284 env[1447]: 2025-09-13 01:33:55.513 [INFO][5144] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90" Sep 13 01:33:55.515568 env[1447]: time="2025-09-13T01:33:55.514595913Z" level=info msg="TearDown network for sandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\" successfully" Sep 13 01:33:55.530227 env[1447]: time="2025-09-13T01:33:55.530171981Z" level=info msg="RemovePodSandbox \"8099c7a68dca7c17e3485de2d0d322cdf1371b37e994661f6bd15d9f130bef90\" returns successfully" Sep 13 01:33:55.530939 env[1447]: time="2025-09-13T01:33:55.530912741Z" level=info msg="StopPodSandbox for \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\"" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.564 [WARNING][5165] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3", ResourceVersion:"1083", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821", Pod:"goldmane-54d579b49d-dn9x6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.19.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0627e40708e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.565 [INFO][5165] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.565 [INFO][5165] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" iface="eth0" netns="" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.565 [INFO][5165] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.565 [INFO][5165] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.590 [INFO][5172] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.590 [INFO][5172] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.590 [INFO][5172] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.600 [WARNING][5172] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.600 [INFO][5172] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.601 [INFO][5172] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.605001 env[1447]: 2025-09-13 01:33:55.603 [INFO][5165] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.605507 env[1447]: time="2025-09-13T01:33:55.605461005Z" level=info msg="TearDown network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\" successfully" Sep 13 01:33:55.605581 env[1447]: time="2025-09-13T01:33:55.605565605Z" level=info msg="StopPodSandbox for \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\" returns successfully" Sep 13 01:33:55.607235 env[1447]: time="2025-09-13T01:33:55.607209124Z" level=info msg="RemovePodSandbox for \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\"" Sep 13 01:33:55.607374 env[1447]: time="2025-09-13T01:33:55.607339164Z" level=info msg="Forcibly stopping sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\"" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.648 [WARNING][5186] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0", GenerateName:"goldmane-54d579b49d-", Namespace:"calico-system", SelfLink:"", UID:"8b6a17d7-5c99-4a44-aee7-e6e39838b3d3", ResourceVersion:"1083", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"54d579b49d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"84ad326e97c05ba8c3f77e99e006c6370edd98dd7f626b8cef3008a9c7e45821", Pod:"goldmane-54d579b49d-dn9x6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.19.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali0627e40708e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.649 [INFO][5186] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.649 [INFO][5186] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" iface="eth0" netns="" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.649 [INFO][5186] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.649 [INFO][5186] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.672 [INFO][5193] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.673 [INFO][5193] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.673 [INFO][5193] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.681 [WARNING][5193] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.681 [INFO][5193] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" HandleID="k8s-pod-network.d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Workload="ci--3510.3.8--n--12daba8686-k8s-goldmane--54d579b49d--dn9x6-eth0" Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.682 [INFO][5193] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.685418 env[1447]: 2025-09-13 01:33:55.684 [INFO][5186] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb" Sep 13 01:33:55.685994 env[1447]: time="2025-09-13T01:33:55.685951265Z" level=info msg="TearDown network for sandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\" successfully" Sep 13 01:33:55.696375 env[1447]: time="2025-09-13T01:33:55.696329898Z" level=info msg="RemovePodSandbox \"d9491997a1ecf2c4316a1bafe6e0cc808c8e595ea23d0b0f66ab12ff3e3906eb\" returns successfully" Sep 13 01:33:55.697148 env[1447]: time="2025-09-13T01:33:55.697106537Z" level=info msg="StopPodSandbox for \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\"" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.732 [WARNING][5207] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1a57959b-d271-4cd6-940b-885d382531e4", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9", Pod:"csi-node-driver-8rf89", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.19.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic1584141ed9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.732 [INFO][5207] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.732 [INFO][5207] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" iface="eth0" netns="" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.732 [INFO][5207] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.732 [INFO][5207] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.756 [INFO][5215] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.756 [INFO][5215] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.757 [INFO][5215] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.770 [WARNING][5215] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.770 [INFO][5215] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.773 [INFO][5215] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.776455 env[1447]: 2025-09-13 01:33:55.775 [INFO][5207] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.776935 env[1447]: time="2025-09-13T01:33:55.776487078Z" level=info msg="TearDown network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\" successfully" Sep 13 01:33:55.776935 env[1447]: time="2025-09-13T01:33:55.776517238Z" level=info msg="StopPodSandbox for \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\" returns successfully" Sep 13 01:33:55.777170 env[1447]: time="2025-09-13T01:33:55.777146117Z" level=info msg="RemovePodSandbox for \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\"" Sep 13 01:33:55.777343 env[1447]: time="2025-09-13T01:33:55.777271117Z" level=info msg="Forcibly stopping sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\"" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.832 [WARNING][5229] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"1a57959b-d271-4cd6-940b-885d382531e4", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6c96d95cc7", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9", Pod:"csi-node-driver-8rf89", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.19.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calic1584141ed9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.832 [INFO][5229] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.832 [INFO][5229] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" iface="eth0" netns="" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.832 [INFO][5229] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.832 [INFO][5229] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.854 [INFO][5236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.854 [INFO][5236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.854 [INFO][5236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.863 [WARNING][5236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.863 [INFO][5236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" HandleID="k8s-pod-network.a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Workload="ci--3510.3.8--n--12daba8686-k8s-csi--node--driver--8rf89-eth0" Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.864 [INFO][5236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.867403 env[1447]: 2025-09-13 01:33:55.866 [INFO][5229] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86" Sep 13 01:33:55.867835 env[1447]: time="2025-09-13T01:33:55.867389450Z" level=info msg="TearDown network for sandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\" successfully" Sep 13 01:33:55.877143 env[1447]: time="2025-09-13T01:33:55.877100443Z" level=info msg="RemovePodSandbox \"a4a1794e9f4609338323a2c707aa045a12d91a2ec7d2b2ef4f237bd05e8b7f86\" returns successfully" Sep 13 01:33:55.877630 env[1447]: time="2025-09-13T01:33:55.877597682Z" level=info msg="StopPodSandbox for \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\"" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.917 [WARNING][5250] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"ddddcc61-e927-42cf-8461-ba98f8f408bd", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c", Pod:"calico-apiserver-84855b6446-8ds5r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie626a0f1195", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.918 [INFO][5250] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.918 [INFO][5250] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" iface="eth0" netns="" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.918 [INFO][5250] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.918 [INFO][5250] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.940 [INFO][5257] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.940 [INFO][5257] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.940 [INFO][5257] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.951 [WARNING][5257] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.951 [INFO][5257] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.953 [INFO][5257] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:55.956509 env[1447]: 2025-09-13 01:33:55.954 [INFO][5250] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:55.956972 env[1447]: time="2025-09-13T01:33:55.956532024Z" level=info msg="TearDown network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\" successfully" Sep 13 01:33:55.956972 env[1447]: time="2025-09-13T01:33:55.956559144Z" level=info msg="StopPodSandbox for \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\" returns successfully" Sep 13 01:33:55.957068 env[1447]: time="2025-09-13T01:33:55.957035183Z" level=info msg="RemovePodSandbox for \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\"" Sep 13 01:33:55.957100 env[1447]: time="2025-09-13T01:33:55.957070783Z" level=info msg="Forcibly stopping sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\"" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.008 [WARNING][5271] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"ddddcc61-e927-42cf-8461-ba98f8f408bd", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c", Pod:"calico-apiserver-84855b6446-8ds5r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie626a0f1195", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.009 [INFO][5271] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.009 [INFO][5271] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" iface="eth0" netns="" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.009 [INFO][5271] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.009 [INFO][5271] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.046 [INFO][5278] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.046 [INFO][5278] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.046 [INFO][5278] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.055 [WARNING][5278] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.055 [INFO][5278] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" HandleID="k8s-pod-network.66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.057 [INFO][5278] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:56.060588 env[1447]: 2025-09-13 01:33:56.059 [INFO][5271] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7" Sep 13 01:33:56.061170 env[1447]: time="2025-09-13T01:33:56.060611027Z" level=info msg="TearDown network for sandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\" successfully" Sep 13 01:33:56.071559 env[1447]: time="2025-09-13T01:33:56.071501739Z" level=info msg="RemovePodSandbox \"66ed18a149898dbf9d1e2bbe0c66dcac7c5ae1f2e8f1e60cbed2f9353b1f48e7\" returns successfully" Sep 13 01:33:56.072041 env[1447]: time="2025-09-13T01:33:56.072015138Z" level=info msg="StopPodSandbox for \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\"" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.108 [WARNING][5293] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6", ResourceVersion:"1062", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3", Pod:"calico-apiserver-84855b6446-7k6rx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2dd7773b929", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.109 [INFO][5293] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.109 [INFO][5293] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" iface="eth0" netns="" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.109 [INFO][5293] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.109 [INFO][5293] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.138 [INFO][5300] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.138 [INFO][5300] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.138 [INFO][5300] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.148 [WARNING][5300] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.148 [INFO][5300] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.150 [INFO][5300] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:56.152922 env[1447]: 2025-09-13 01:33:56.151 [INFO][5293] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.153457 env[1447]: time="2025-09-13T01:33:56.153424998Z" level=info msg="TearDown network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\" successfully" Sep 13 01:33:56.153520 env[1447]: time="2025-09-13T01:33:56.153505358Z" level=info msg="StopPodSandbox for \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\" returns successfully" Sep 13 01:33:56.155400 env[1447]: time="2025-09-13T01:33:56.155365037Z" level=info msg="RemovePodSandbox for \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\"" Sep 13 01:33:56.155617 env[1447]: time="2025-09-13T01:33:56.155570277Z" level=info msg="Forcibly stopping sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\"" Sep 13 01:33:56.287690 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.SiJ2k1.mount: Deactivated successfully. Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.208 [WARNING][5314] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0", GenerateName:"calico-apiserver-84855b6446-", Namespace:"calico-apiserver", SelfLink:"", UID:"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6", ResourceVersion:"1062", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"84855b6446", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3", Pod:"calico-apiserver-84855b6446-7k6rx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2dd7773b929", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.208 [INFO][5314] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.208 [INFO][5314] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" iface="eth0" netns="" Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.208 [INFO][5314] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.208 [INFO][5314] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.254 [INFO][5321] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.255 [INFO][5321] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.255 [INFO][5321] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.269 [WARNING][5321] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.269 [INFO][5321] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" HandleID="k8s-pod-network.2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.276 [INFO][5321] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:56.290179 env[1447]: 2025-09-13 01:33:56.287 [INFO][5314] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276" Sep 13 01:33:56.290702 env[1447]: time="2025-09-13T01:33:56.290669457Z" level=info msg="TearDown network for sandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\" successfully" Sep 13 01:33:56.303103 env[1447]: time="2025-09-13T01:33:56.302915408Z" level=info msg="RemovePodSandbox \"2795ee8e682f9113073fde7c16c8597f53328b709e07e5a30fabbd23e3a08276\" returns successfully" Sep 13 01:33:56.304047 env[1447]: time="2025-09-13T01:33:56.304016568Z" level=info msg="StopPodSandbox for \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\"" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.381 [WARNING][5356] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"43c6eaa8-fda6-473c-b002-26d293c3cf62", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99", Pod:"coredns-668d6bf9bc-t8fkc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali33bc5f2d551", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.382 [INFO][5356] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.382 [INFO][5356] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" iface="eth0" netns="" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.382 [INFO][5356] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.382 [INFO][5356] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.440 [INFO][5363] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.440 [INFO][5363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.441 [INFO][5363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.452 [WARNING][5363] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.452 [INFO][5363] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.456 [INFO][5363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:56.459966 env[1447]: 2025-09-13 01:33:56.457 [INFO][5356] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.460871 env[1447]: time="2025-09-13T01:33:56.460815532Z" level=info msg="TearDown network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\" successfully" Sep 13 01:33:56.460975 env[1447]: time="2025-09-13T01:33:56.460958212Z" level=info msg="StopPodSandbox for \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\" returns successfully" Sep 13 01:33:56.461713 env[1447]: time="2025-09-13T01:33:56.461687732Z" level=info msg="RemovePodSandbox for \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\"" Sep 13 01:33:56.461917 env[1447]: time="2025-09-13T01:33:56.461862051Z" level=info msg="Forcibly stopping sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\"" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.531 [WARNING][5379] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"43c6eaa8-fda6-473c-b002-26d293c3cf62", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"50d391118b500d8566f64235a90735507cd02cb6974f25ab6788f38a3a064a99", Pod:"coredns-668d6bf9bc-t8fkc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali33bc5f2d551", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.531 [INFO][5379] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.531 [INFO][5379] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" iface="eth0" netns="" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.531 [INFO][5379] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.531 [INFO][5379] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.565 [INFO][5386] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.568 [INFO][5386] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.569 [INFO][5386] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.582 [WARNING][5386] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.582 [INFO][5386] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" HandleID="k8s-pod-network.c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--t8fkc-eth0" Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.583 [INFO][5386] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:56.585941 env[1447]: 2025-09-13 01:33:56.584 [INFO][5379] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a" Sep 13 01:33:56.586719 env[1447]: time="2025-09-13T01:33:56.586683400Z" level=info msg="TearDown network for sandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\" successfully" Sep 13 01:33:56.771775 env[1447]: time="2025-09-13T01:33:56.771727584Z" level=info msg="RemovePodSandbox \"c598bf0c5e05d7fb55d985cf15619c201b3e5a295c31302758c41ab389f3dd0a\" returns successfully" Sep 13 01:33:56.772378 env[1447]: time="2025-09-13T01:33:56.772354263Z" level=info msg="StopPodSandbox for \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\"" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.883 [WARNING][5400] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3e03f1c0-901c-40fa-b26f-00188c44bf4b", ResourceVersion:"1020", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225", Pod:"coredns-668d6bf9bc-9kprh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6aa5ad1f93", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.889 [INFO][5400] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.889 [INFO][5400] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" iface="eth0" netns="" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.889 [INFO][5400] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.890 [INFO][5400] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.939 [INFO][5407] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.941 [INFO][5407] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.944 [INFO][5407] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.952 [WARNING][5407] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.952 [INFO][5407] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.954 [INFO][5407] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:56.958090 env[1447]: 2025-09-13 01:33:56.956 [INFO][5400] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:56.958613 env[1447]: time="2025-09-13T01:33:56.958578806Z" level=info msg="TearDown network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\" successfully" Sep 13 01:33:56.958714 env[1447]: time="2025-09-13T01:33:56.958696646Z" level=info msg="StopPodSandbox for \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\" returns successfully" Sep 13 01:33:56.959201 env[1447]: time="2025-09-13T01:33:56.959178686Z" level=info msg="RemovePodSandbox for \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\"" Sep 13 01:33:56.959326 env[1447]: time="2025-09-13T01:33:56.959291526Z" level=info msg="Forcibly stopping sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\"" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.039 [WARNING][5421] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3e03f1c0-901c-40fa-b26f-00188c44bf4b", ResourceVersion:"1020", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"95ceb9accd7166c405c34de28bff04f00c3442872afa21d63904a411c228c225", Pod:"coredns-668d6bf9bc-9kprh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic6aa5ad1f93", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.039 [INFO][5421] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.039 [INFO][5421] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" iface="eth0" netns="" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.039 [INFO][5421] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.040 [INFO][5421] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.078 [INFO][5428] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.078 [INFO][5428] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.078 [INFO][5428] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.101 [WARNING][5428] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.102 [INFO][5428] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" HandleID="k8s-pod-network.decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Workload="ci--3510.3.8--n--12daba8686-k8s-coredns--668d6bf9bc--9kprh-eth0" Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.103 [INFO][5428] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:57.106051 env[1447]: 2025-09-13 01:33:57.104 [INFO][5421] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902" Sep 13 01:33:57.106543 env[1447]: time="2025-09-13T01:33:57.106509498Z" level=info msg="TearDown network for sandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\" successfully" Sep 13 01:33:57.114621 env[1447]: time="2025-09-13T01:33:57.114573732Z" level=info msg="RemovePodSandbox \"decd046b26af6920f1494c5a9c6867edf29ba0ac37872de18063724d002b9902\" returns successfully" Sep 13 01:33:57.115175 env[1447]: time="2025-09-13T01:33:57.115143572Z" level=info msg="StopPodSandbox for \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\"" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.214 [WARNING][5443] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0", GenerateName:"calico-kube-controllers-78c5b7c8f4-", Namespace:"calico-system", SelfLink:"", UID:"52df943e-5550-4ee4-87ef-5b65208ddbbc", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78c5b7c8f4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4", Pod:"calico-kube-controllers-78c5b7c8f4-5d5nl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali48385af6558", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.215 [INFO][5443] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.215 [INFO][5443] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" iface="eth0" netns="" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.215 [INFO][5443] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.215 [INFO][5443] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.254 [INFO][5450] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.254 [INFO][5450] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.254 [INFO][5450] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.269 [WARNING][5450] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.269 [INFO][5450] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.273 [INFO][5450] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:57.278866 env[1447]: 2025-09-13 01:33:57.274 [INFO][5443] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.279310 env[1447]: time="2025-09-13T01:33:57.278879533Z" level=info msg="TearDown network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\" successfully" Sep 13 01:33:57.279310 env[1447]: time="2025-09-13T01:33:57.278918733Z" level=info msg="StopPodSandbox for \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\" returns successfully" Sep 13 01:33:57.279394 env[1447]: time="2025-09-13T01:33:57.279322413Z" level=info msg="RemovePodSandbox for \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\"" Sep 13 01:33:57.279394 env[1447]: time="2025-09-13T01:33:57.279347453Z" level=info msg="Forcibly stopping sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\"" Sep 13 01:33:57.301431 kubelet[2414]: I0913 01:33:57.301390 2414 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:33:57.350000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:57.350000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000558060 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:33:57.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:33:57.350000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:57.350000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000558080 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:33:57.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:33:57.350000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:57.350000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e0f0e0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:33:57.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:33:57.353000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:33:57.353000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40005585e0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:33:57.353000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:33:57.361579 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.yEcaET.mount: Deactivated successfully. Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.397 [WARNING][5465] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0", GenerateName:"calico-kube-controllers-78c5b7c8f4-", Namespace:"calico-system", SelfLink:"", UID:"52df943e-5550-4ee4-87ef-5b65208ddbbc", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78c5b7c8f4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4", Pod:"calico-kube-controllers-78c5b7c8f4-5d5nl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali48385af6558", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.397 [INFO][5465] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.398 [INFO][5465] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" iface="eth0" netns="" Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.398 [INFO][5465] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.398 [INFO][5465] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.437 [INFO][5486] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.437 [INFO][5486] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.438 [INFO][5486] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.453 [WARNING][5486] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.453 [INFO][5486] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" HandleID="k8s-pod-network.be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--kube--controllers--78c5b7c8f4--5d5nl-eth0" Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.455 [INFO][5486] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:57.458424 env[1447]: 2025-09-13 01:33:57.456 [INFO][5465] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8" Sep 13 01:33:57.458945 env[1447]: time="2025-09-13T01:33:57.458455443Z" level=info msg="TearDown network for sandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\" successfully" Sep 13 01:33:57.479172 env[1447]: time="2025-09-13T01:33:57.479114948Z" level=info msg="RemovePodSandbox \"be4b1c45a96f328520c8ce0da556e4a87e3da6abefb874b34cc3ada2a737a0c8\" returns successfully" Sep 13 01:33:57.773000 audit[5017]: AVC avc: denied { watch } for pid=5017 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_29.1389439504/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c433,c661 tclass=file permissive=0 Sep 13 01:33:57.773000 audit[5017]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001004860 a2=fc6 a3=0 items=0 ppid=4744 pid=5017 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 key=(null) Sep 13 01:33:57.773000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:33:57.836000 audit[5497]: NETFILTER_CFG table=filter:130 family=2 entries=11 op=nft_register_rule pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:57.836000 audit[5497]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe00c2030 a2=0 a3=1 items=0 ppid=2558 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:57.836000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:57.842000 audit[5497]: NETFILTER_CFG table=nat:131 family=2 entries=29 op=nft_register_chain pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:57.842000 audit[5497]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe00c2030 a2=0 a3=1 items=0 ppid=2558 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:57.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:57.853977 env[1447]: time="2025-09-13T01:33:57.853914756Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:57.861590 env[1447]: time="2025-09-13T01:33:57.861528470Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:57.866564 env[1447]: time="2025-09-13T01:33:57.866513187Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:57.870774 env[1447]: time="2025-09-13T01:33:57.870722704Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:27c4187717f08f0a5727019d8beb7597665eb47e69eaa1d7d091a7e28913e577,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:57.871504 env[1447]: time="2025-09-13T01:33:57.871425263Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.3\" returns image reference \"sha256:34117caf92350e1565610f2254377d7455b11e36666b5ce11b4a13670720432a\"" Sep 13 01:33:57.874912 kubelet[2414]: I0913 01:33:57.874869 2414 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:33:57.878711 env[1447]: time="2025-09-13T01:33:57.878675378Z" level=info msg="StopContainer for \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\" with timeout 30 (s)" Sep 13 01:33:57.879317 env[1447]: time="2025-09-13T01:33:57.879291417Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\"" Sep 13 01:33:57.885109 env[1447]: time="2025-09-13T01:33:57.884423414Z" level=info msg="Stop container \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\" with signal terminated" Sep 13 01:33:57.895381 env[1447]: time="2025-09-13T01:33:57.895335606Z" level=info msg="CreateContainer within sandbox \"69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Sep 13 01:33:57.932907 env[1447]: time="2025-09-13T01:33:57.932863619Z" level=info msg="CreateContainer within sandbox \"69cb41f3710905ad9f37db824c0e17631ddfac9a5b82f8f1e15d6e304ba0bfe4\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e\"" Sep 13 01:33:57.933606 env[1447]: time="2025-09-13T01:33:57.933522578Z" level=info msg="StartContainer for \"a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e\"" Sep 13 01:33:57.967402 systemd[1]: Started cri-containerd-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e.scope. Sep 13 01:33:57.978529 systemd[1]: cri-containerd-d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d.scope: Deactivated successfully. Sep 13 01:33:57.978852 systemd[1]: cri-containerd-d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d.scope: Consumed 1.242s CPU time. Sep 13 01:33:57.977000 audit: BPF prog-id=224 op=UNLOAD Sep 13 01:33:57.997000 audit: BPF prog-id=227 op=UNLOAD Sep 13 01:33:58.011798 kubelet[2414]: I0913 01:33:58.010026 2414 status_manager.go:890] "Failed to get status for pod" podUID="e90b135e-d6b1-4836-9e64-6a6b94cbc9c9" pod="calico-apiserver/calico-apiserver-7d66856c58-hs4wd" err="pods \"calico-apiserver-7d66856c58-hs4wd\" is forbidden: User \"system:node:ci-3510.3.8-n-12daba8686\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-apiserver\": no relationship found between node 'ci-3510.3.8-n-12daba8686' and this object" Sep 13 01:33:58.005000 audit[5544]: NETFILTER_CFG table=filter:132 family=2 entries=10 op=nft_register_rule pid=5544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:58.005000 audit[5544]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd5ff81d0 a2=0 a3=1 items=0 ppid=2558 pid=5544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.005000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:58.015830 systemd[1]: Created slice kubepods-besteffort-pode90b135e_d6b1_4836_9e64_6a6b94cbc9c9.slice. Sep 13 01:33:58.019000 audit[5544]: NETFILTER_CFG table=nat:133 family=2 entries=32 op=nft_register_rule pid=5544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:58.019000 audit[5544]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd5ff81d0 a2=0 a3=1 items=0 ppid=2558 pid=5544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.019000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.039000 audit: BPF prog-id=236 op=LOAD Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4791 pid=5513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326631313632363561613732393133303338363861326335623436 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4791 pid=5513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326631313632363561613732393133303338363861326335623436 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit: BPF prog-id=237 op=LOAD Sep 13 01:33:58.040000 audit[5513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4791 pid=5513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326631313632363561613732393133303338363861326335623436 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit: BPF prog-id=238 op=LOAD Sep 13 01:33:58.040000 audit[5513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4791 pid=5513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326631313632363561613732393133303338363861326335623436 Sep 13 01:33:58.040000 audit: BPF prog-id=238 op=UNLOAD Sep 13 01:33:58.040000 audit: BPF prog-id=237 op=UNLOAD Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { perfmon } for pid=5513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit[5513]: AVC avc: denied { bpf } for pid=5513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:58.040000 audit: BPF prog-id=239 op=LOAD Sep 13 01:33:58.040000 audit[5513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4791 pid=5513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138326631313632363561613732393133303338363861326335623436 Sep 13 01:33:58.134839 kubelet[2414]: I0913 01:33:58.134791 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e90b135e-d6b1-4836-9e64-6a6b94cbc9c9-calico-apiserver-certs\") pod \"calico-apiserver-7d66856c58-hs4wd\" (UID: \"e90b135e-d6b1-4836-9e64-6a6b94cbc9c9\") " pod="calico-apiserver/calico-apiserver-7d66856c58-hs4wd" Sep 13 01:33:58.134839 kubelet[2414]: I0913 01:33:58.134849 2414 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kdgvv\" (UniqueName: \"kubernetes.io/projected/e90b135e-d6b1-4836-9e64-6a6b94cbc9c9-kube-api-access-kdgvv\") pod \"calico-apiserver-7d66856c58-hs4wd\" (UID: \"e90b135e-d6b1-4836-9e64-6a6b94cbc9c9\") " pod="calico-apiserver/calico-apiserver-7d66856c58-hs4wd" Sep 13 01:33:58.349417 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d-rootfs.mount: Deactivated successfully. Sep 13 01:33:58.498021 env[1447]: time="2025-09-13T01:33:58.497971493Z" level=info msg="StartContainer for \"a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e\" returns successfully" Sep 13 01:33:58.618808 env[1447]: time="2025-09-13T01:33:58.618768007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d66856c58-hs4wd,Uid:e90b135e-d6b1-4836-9e64-6a6b94cbc9c9,Namespace:calico-apiserver,Attempt:0,}" Sep 13 01:33:58.680858 env[1447]: time="2025-09-13T01:33:58.680805282Z" level=info msg="shim disconnected" id=d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d Sep 13 01:33:58.680858 env[1447]: time="2025-09-13T01:33:58.680851522Z" level=warning msg="cleaning up after shim disconnected" id=d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d namespace=k8s.io Sep 13 01:33:58.680858 env[1447]: time="2025-09-13T01:33:58.680861042Z" level=info msg="cleaning up dead shim" Sep 13 01:33:58.691698 env[1447]: time="2025-09-13T01:33:58.691383195Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:33:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5569 runtime=io.containerd.runc.v2\n" Sep 13 01:33:58.698408 env[1447]: time="2025-09-13T01:33:58.698351990Z" level=info msg="StopContainer for \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\" returns successfully" Sep 13 01:33:58.698992 env[1447]: time="2025-09-13T01:33:58.698963509Z" level=info msg="StopPodSandbox for \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\"" Sep 13 01:33:58.699074 env[1447]: time="2025-09-13T01:33:58.699029029Z" level=info msg="Container to stop \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Sep 13 01:33:58.705983 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3-shm.mount: Deactivated successfully. Sep 13 01:33:58.721120 systemd[1]: cri-containerd-832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3.scope: Deactivated successfully. Sep 13 01:33:58.719000 audit: BPF prog-id=185 op=UNLOAD Sep 13 01:33:58.724000 audit: BPF prog-id=188 op=UNLOAD Sep 13 01:33:58.745464 env[1447]: time="2025-09-13T01:33:58.745360756Z" level=info msg="shim disconnected" id=832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3 Sep 13 01:33:58.745883 env[1447]: time="2025-09-13T01:33:58.745859036Z" level=warning msg="cleaning up after shim disconnected" id=832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3 namespace=k8s.io Sep 13 01:33:58.746327 env[1447]: time="2025-09-13T01:33:58.746307075Z" level=info msg="cleaning up dead shim" Sep 13 01:33:58.764073 env[1447]: time="2025-09-13T01:33:58.764014863Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:33:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5608 runtime=io.containerd.runc.v2\n" Sep 13 01:33:58.858526 systemd-networkd[1601]: cali2dd7773b929: Link DOWN Sep 13 01:33:58.858533 systemd-networkd[1601]: cali2dd7773b929: Lost carrier Sep 13 01:33:58.881697 systemd-networkd[1601]: calif48bd7c66d2: Link UP Sep 13 01:33:58.893965 systemd-networkd[1601]: calif48bd7c66d2: Gained carrier Sep 13 01:33:58.894713 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif48bd7c66d2: link becomes ready Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.777 [INFO][5587] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0 calico-apiserver-7d66856c58- calico-apiserver e90b135e-d6b1-4836-9e64-6a6b94cbc9c9 1120 0 2025-09-13 01:33:57 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7d66856c58 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-12daba8686 calico-apiserver-7d66856c58-hs4wd eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif48bd7c66d2 [] [] }} ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.777 [INFO][5587] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.807 [INFO][5627] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" HandleID="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.807 [INFO][5627] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" HandleID="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd8f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-12daba8686", "pod":"calico-apiserver-7d66856c58-hs4wd", "timestamp":"2025-09-13 01:33:58.807173672 +0000 UTC"}, Hostname:"ci-3510.3.8-n-12daba8686", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.807 [INFO][5627] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.807 [INFO][5627] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.807 [INFO][5627] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-12daba8686' Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.818 [INFO][5627] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.823 [INFO][5627] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.832 [INFO][5627] ipam/ipam.go 511: Trying affinity for 192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.835 [INFO][5627] ipam/ipam.go 158: Attempting to load block cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.838 [INFO][5627] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.19.192/26 host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.838 [INFO][5627] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.19.192/26 handle="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.840 [INFO][5627] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012 Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.846 [INFO][5627] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.19.192/26 handle="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.864 [INFO][5627] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.19.202/26] block=192.168.19.192/26 handle="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.864 [INFO][5627] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.19.202/26] handle="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" host="ci-3510.3.8-n-12daba8686" Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.864 [INFO][5627] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:58.909671 env[1447]: 2025-09-13 01:33:58.864 [INFO][5627] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.19.202/26] IPv6=[] ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" HandleID="k8s-pod-network.8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" Sep 13 01:33:58.910495 env[1447]: 2025-09-13 01:33:58.869 [INFO][5587] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0", GenerateName:"calico-apiserver-7d66856c58-", Namespace:"calico-apiserver", SelfLink:"", UID:"e90b135e-d6b1-4836-9e64-6a6b94cbc9c9", ResourceVersion:"1120", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d66856c58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"", Pod:"calico-apiserver-7d66856c58-hs4wd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.202/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif48bd7c66d2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:58.910495 env[1447]: 2025-09-13 01:33:58.869 [INFO][5587] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.19.202/32] ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" Sep 13 01:33:58.910495 env[1447]: 2025-09-13 01:33:58.869 [INFO][5587] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif48bd7c66d2 ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" Sep 13 01:33:58.910495 env[1447]: 2025-09-13 01:33:58.894 [INFO][5587] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" Sep 13 01:33:58.910495 env[1447]: 2025-09-13 01:33:58.895 [INFO][5587] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0", GenerateName:"calico-apiserver-7d66856c58-", Namespace:"calico-apiserver", SelfLink:"", UID:"e90b135e-d6b1-4836-9e64-6a6b94cbc9c9", ResourceVersion:"1120", Generation:0, CreationTimestamp:time.Date(2025, time.September, 13, 1, 33, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d66856c58", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-12daba8686", ContainerID:"8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012", Pod:"calico-apiserver-7d66856c58-hs4wd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.202/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif48bd7c66d2", MAC:"86:c2:65:6d:46:e1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Sep 13 01:33:58.910495 env[1447]: 2025-09-13 01:33:58.908 [INFO][5587] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012" Namespace="calico-apiserver" Pod="calico-apiserver-7d66856c58-hs4wd" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--7d66856c58--hs4wd-eth0" Sep 13 01:33:58.929000 audit[5672]: NETFILTER_CFG table=filter:134 family=2 entries=63 op=nft_register_rule pid=5672 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:58.929000 audit[5672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10252 a0=3 a1=ffffeb4e98c0 a2=0 a3=ffffb76cbfa8 items=0 ppid=3753 pid=5672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.929000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:58.932000 audit[5672]: NETFILTER_CFG table=filter:135 family=2 entries=4 op=nft_unregister_chain pid=5672 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:58.932000 audit[5672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=560 a0=3 a1=ffffeb4e98c0 a2=0 a3=ffffb76cbfa8 items=0 ppid=3753 pid=5672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.932000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:58.938417 env[1447]: time="2025-09-13T01:33:58.938343218Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Sep 13 01:33:58.939048 env[1447]: time="2025-09-13T01:33:58.938644977Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Sep 13 01:33:58.941190 env[1447]: time="2025-09-13T01:33:58.939129937Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Sep 13 01:33:58.942280 env[1447]: time="2025-09-13T01:33:58.942092935Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012 pid=5671 runtime=io.containerd.runc.v2 Sep 13 01:33:58.965923 systemd[1]: Started cri-containerd-8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012.scope. Sep 13 01:33:58.988000 audit[5697]: NETFILTER_CFG table=filter:136 family=2 entries=61 op=nft_register_chain pid=5697 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:33:58.988000 audit[5697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29000 a0=3 a1=ffffc13e1620 a2=0 a3=ffffab32efa8 items=0 ppid=3753 pid=5697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:58.988000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.013000 audit: BPF prog-id=240 op=LOAD Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5671 pid=5685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862626333633237363465653263383030326233643633613865373837 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5671 pid=5685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862626333633237363465653263383030326233643633613865373837 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit: BPF prog-id=241 op=LOAD Sep 13 01:33:59.014000 audit[5685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5671 pid=5685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862626333633237363465653263383030326233643633613865373837 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit: BPF prog-id=242 op=LOAD Sep 13 01:33:59.014000 audit[5685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5671 pid=5685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862626333633237363465653263383030326233643633613865373837 Sep 13 01:33:59.014000 audit: BPF prog-id=242 op=UNLOAD Sep 13 01:33:59.014000 audit: BPF prog-id=241 op=UNLOAD Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { perfmon } for pid=5685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit[5685]: AVC avc: denied { bpf } for pid=5685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.014000 audit: BPF prog-id=243 op=LOAD Sep 13 01:33:59.014000 audit[5685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5671 pid=5685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862626333633237363465653263383030326233643633613865373837 Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.856 [INFO][5641] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.857 [INFO][5641] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" iface="eth0" netns="/var/run/netns/cni-4dd07bdc-b206-0769-f525-a909cea3da63" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.857 [INFO][5641] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" iface="eth0" netns="/var/run/netns/cni-4dd07bdc-b206-0769-f525-a909cea3da63" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.873 [INFO][5641] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" after=16.708068ms iface="eth0" netns="/var/run/netns/cni-4dd07bdc-b206-0769-f525-a909cea3da63" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.873 [INFO][5641] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.874 [INFO][5641] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.941 [INFO][5654] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.941 [INFO][5654] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:58.941 [INFO][5654] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:59.023 [INFO][5654] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:59.024 [INFO][5654] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:59.027 [INFO][5654] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:33:59.030029 env[1447]: 2025-09-13 01:33:59.028 [INFO][5641] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:33:59.030893 env[1447]: time="2025-09-13T01:33:59.030849352Z" level=info msg="TearDown network for sandbox \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" successfully" Sep 13 01:33:59.030987 env[1447]: time="2025-09-13T01:33:59.030970032Z" level=info msg="StopPodSandbox for \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" returns successfully" Sep 13 01:33:59.059444 env[1447]: time="2025-09-13T01:33:59.059395412Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d66856c58-hs4wd,Uid:e90b135e-d6b1-4836-9e64-6a6b94cbc9c9,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012\"" Sep 13 01:33:59.069521 env[1447]: time="2025-09-13T01:33:59.069481204Z" level=info msg="CreateContainer within sandbox \"8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Sep 13 01:33:59.087000 audit[5713]: NETFILTER_CFG table=filter:137 family=2 entries=10 op=nft_register_rule pid=5713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:59.087000 audit[5713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc2303a50 a2=0 a3=1 items=0 ppid=2558 pid=5713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.087000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:59.092000 audit[5713]: NETFILTER_CFG table=nat:138 family=2 entries=32 op=nft_register_rule pid=5713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:33:59.092000 audit[5713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffc2303a50 a2=0 a3=1 items=0 ppid=2558 pid=5713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.092000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:33:59.103050 env[1447]: time="2025-09-13T01:33:59.103002901Z" level=info msg="CreateContainer within sandbox \"8bbc3c2764ee2c8002b3d63a8e787f8f25a5fff048bd051361dbacda744fd012\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"00ff13b21bf1501271a6f035c9e292f0249312af11fdf0e54f6a21f890e28ce5\"" Sep 13 01:33:59.103897 env[1447]: time="2025-09-13T01:33:59.103861500Z" level=info msg="StartContainer for \"00ff13b21bf1501271a6f035c9e292f0249312af11fdf0e54f6a21f890e28ce5\"" Sep 13 01:33:59.120999 systemd[1]: Started cri-containerd-00ff13b21bf1501271a6f035c9e292f0249312af11fdf0e54f6a21f890e28ce5.scope. Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.137000 audit: BPF prog-id=244 op=LOAD Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=5671 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030666631336232316266313530313237316136663033356339653239 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=5671 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030666631336232316266313530313237316136663033356339653239 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit: BPF prog-id=245 op=LOAD Sep 13 01:33:59.138000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=5671 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030666631336232316266313530313237316136663033356339653239 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit: BPF prog-id=246 op=LOAD Sep 13 01:33:59.138000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=5671 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030666631336232316266313530313237316136663033356339653239 Sep 13 01:33:59.138000 audit: BPF prog-id=246 op=UNLOAD Sep 13 01:33:59.138000 audit: BPF prog-id=245 op=UNLOAD Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { perfmon } for pid=5720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit[5720]: AVC avc: denied { bpf } for pid=5720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.138000 audit: BPF prog-id=247 op=LOAD Sep 13 01:33:59.138000 audit[5720]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=5671 pid=5720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030666631336232316266313530313237316136663033356339653239 Sep 13 01:33:59.145508 kubelet[2414]: I0913 01:33:59.144275 2414 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-calico-apiserver-certs\") pod \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\" (UID: \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\") " Sep 13 01:33:59.145508 kubelet[2414]: I0913 01:33:59.144824 2414 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-4x2zg\" (UniqueName: \"kubernetes.io/projected/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-kube-api-access-4x2zg\") pod \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\" (UID: \"a6cbb0ca-3390-4a37-8c80-d5a01d422ca6\") " Sep 13 01:33:59.147845 kubelet[2414]: I0913 01:33:59.147816 2414 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "a6cbb0ca-3390-4a37-8c80-d5a01d422ca6" (UID: "a6cbb0ca-3390-4a37-8c80-d5a01d422ca6"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 13 01:33:59.148613 kubelet[2414]: I0913 01:33:59.148576 2414 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-kube-api-access-4x2zg" (OuterVolumeSpecName: "kube-api-access-4x2zg") pod "a6cbb0ca-3390-4a37-8c80-d5a01d422ca6" (UID: "a6cbb0ca-3390-4a37-8c80-d5a01d422ca6"). InnerVolumeSpecName "kube-api-access-4x2zg". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 13 01:33:59.169368 env[1447]: time="2025-09-13T01:33:59.169308054Z" level=info msg="StartContainer for \"00ff13b21bf1501271a6f035c9e292f0249312af11fdf0e54f6a21f890e28ce5\" returns successfully" Sep 13 01:33:59.245468 kubelet[2414]: I0913 01:33:59.245409 2414 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-calico-apiserver-certs\") on node \"ci-3510.3.8-n-12daba8686\" DevicePath \"\"" Sep 13 01:33:59.245468 kubelet[2414]: I0913 01:33:59.245440 2414 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-4x2zg\" (UniqueName: \"kubernetes.io/projected/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6-kube-api-access-4x2zg\") on node \"ci-3510.3.8-n-12daba8686\" DevicePath \"\"" Sep 13 01:33:59.352891 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3-rootfs.mount: Deactivated successfully. Sep 13 01:33:59.352981 systemd[1]: run-netns-cni\x2d4dd07bdc\x2db206\x2d0769\x2df525\x2da909cea3da63.mount: Deactivated successfully. Sep 13 01:33:59.353048 systemd[1]: var-lib-kubelet-pods-a6cbb0ca\x2d3390\x2d4a37\x2d8c80\x2dd5a01d422ca6-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Sep 13 01:33:59.353097 systemd[1]: var-lib-kubelet-pods-a6cbb0ca\x2d3390\x2d4a37\x2d8c80\x2dd5a01d422ca6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d4x2zg.mount: Deactivated successfully. Sep 13 01:33:59.511350 systemd[1]: Removed slice kubepods-besteffort-poda6cbb0ca_3390_4a37_8c80_d5a01d422ca6.slice. Sep 13 01:33:59.511437 systemd[1]: kubepods-besteffort-poda6cbb0ca_3390_4a37_8c80_d5a01d422ca6.slice: Consumed 1.263s CPU time. Sep 13 01:33:59.514227 kubelet[2414]: I0913 01:33:59.514191 2414 scope.go:117] "RemoveContainer" containerID="d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d" Sep 13 01:33:59.525614 env[1447]: time="2025-09-13T01:33:59.525577082Z" level=info msg="RemoveContainer for \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\"" Sep 13 01:33:59.543905 env[1447]: time="2025-09-13T01:33:59.543859269Z" level=info msg="RemoveContainer for \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\" returns successfully" Sep 13 01:33:59.544451 kubelet[2414]: I0913 01:33:59.544346 2414 scope.go:117] "RemoveContainer" containerID="d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d" Sep 13 01:33:59.544996 env[1447]: time="2025-09-13T01:33:59.544872588Z" level=error msg="ContainerStatus for \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\": not found" Sep 13 01:33:59.545218 kubelet[2414]: E0913 01:33:59.545155 2414 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\": not found" containerID="d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d" Sep 13 01:33:59.545218 kubelet[2414]: I0913 01:33:59.545186 2414 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d"} err="failed to get container status \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\": rpc error: code = NotFound desc = an error occurred when try to find container \"d8f74ccf0181b91b2c10f33de3bdbdcff0d6be74b02bcc0487e19f4ec3a3561d\": not found" Sep 13 01:33:59.598008 kubelet[2414]: I0913 01:33:59.597942 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7d66856c58-hs4wd" podStartSLOduration=2.597924591 podStartE2EDuration="2.597924591s" podCreationTimestamp="2025-09-13 01:33:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-09-13 01:33:59.553028782 +0000 UTC m=+64.775327091" watchObservedRunningTime="2025-09-13 01:33:59.597924591 +0000 UTC m=+64.820222860" Sep 13 01:33:59.809053 kubelet[2414]: I0913 01:33:59.808990 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-78c5b7c8f4-5d5nl" podStartSLOduration=30.213204218 podStartE2EDuration="39.808971402s" podCreationTimestamp="2025-09-13 01:33:20 +0000 UTC" firstStartedPulling="2025-09-13 01:33:48.277010358 +0000 UTC m=+53.499308667" lastFinishedPulling="2025-09-13 01:33:57.872777542 +0000 UTC m=+63.095075851" observedRunningTime="2025-09-13 01:33:59.647986315 +0000 UTC m=+64.870284624" watchObservedRunningTime="2025-09-13 01:33:59.808971402 +0000 UTC m=+65.031269671" Sep 13 01:33:59.811156 env[1447]: time="2025-09-13T01:33:59.811114000Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:59.819348 env[1447]: time="2025-09-13T01:33:59.819309754Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:59.824003 env[1447]: time="2025-09-13T01:33:59.823965791Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:59.828519 env[1447]: time="2025-09-13T01:33:59.828481228Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:731ab232ca708102ab332340b1274d5cd656aa896ecc5368ee95850b811df86f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Sep 13 01:33:59.829312 env[1447]: time="2025-09-13T01:33:59.829286227Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.3\" returns image reference \"sha256:a319b5bdc1001e98875b68e2943279adb74bcb19d09f1db857bc27959a078a65\"" Sep 13 01:33:59.832083 env[1447]: time="2025-09-13T01:33:59.832044105Z" level=info msg="CreateContainer within sandbox \"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Sep 13 01:33:59.881894 env[1447]: time="2025-09-13T01:33:59.881843390Z" level=info msg="CreateContainer within sandbox \"f845304a46c9320d6585085ced4c56463f89ead4db5e5618da5147890e599ac9\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"2cf149a93090f09cbffddf8014ec473e73040458114d0b56449133ee565b3130\"" Sep 13 01:33:59.882775 env[1447]: time="2025-09-13T01:33:59.882747909Z" level=info msg="StartContainer for \"2cf149a93090f09cbffddf8014ec473e73040458114d0b56449133ee565b3130\"" Sep 13 01:33:59.920256 systemd[1]: Started cri-containerd-2cf149a93090f09cbffddf8014ec473e73040458114d0b56449133ee565b3130.scope. Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.945212 kernel: kauditd_printk_skb: 333 callbacks suppressed Sep 13 01:33:59.945296 kernel: audit: type=1400 audit(1757727239.937:1564): avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4143 pid=5784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263663134396139333039306630396362666664646638303134656334 Sep 13 01:34:00.040026 kernel: audit: type=1300 audit(1757727239.937:1564): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4143 pid=5784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:00.040171 kernel: audit: type=1327 audit(1757727239.937:1564): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263663134396139333039306630396362666664646638303134656334 Sep 13 01:34:00.040547 env[1447]: time="2025-09-13T01:34:00.040511558Z" level=info msg="StartContainer for \"2cf149a93090f09cbffddf8014ec473e73040458114d0b56449133ee565b3130\" returns successfully" Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:34:00.068738 kernel: audit: type=1400 audit(1757727239.937:1565): avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:34:00.068898 kernel: audit: type=1400 audit(1757727239.937:1565): avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:34:00.108445 kernel: audit: type=1400 audit(1757727239.937:1565): avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:34:00.129204 kernel: audit: type=1400 audit(1757727239.937:1565): avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:34:00.149388 kernel: audit: type=1400 audit(1757727239.937:1565): avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:34:00.171831 kernel: audit: type=1400 audit(1757727239.937:1565): avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:34:00.192631 kernel: audit: type=1400 audit(1757727239.937:1565): avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit: BPF prog-id=248 op=LOAD Sep 13 01:33:59.937000 audit[5784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4143 pid=5784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263663134396139333039306630396362666664646638303134656334 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.937000 audit: BPF prog-id=249 op=LOAD Sep 13 01:33:59.937000 audit[5784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4143 pid=5784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263663134396139333039306630396362666664646638303134656334 Sep 13 01:33:59.938000 audit: BPF prog-id=249 op=UNLOAD Sep 13 01:33:59.938000 audit: BPF prog-id=248 op=UNLOAD Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { perfmon } for pid=5784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit[5784]: AVC avc: denied { bpf } for pid=5784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Sep 13 01:33:59.938000 audit: BPF prog-id=250 op=LOAD Sep 13 01:33:59.938000 audit[5784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4143 pid=5784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:33:59.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263663134396139333039306630396362666664646638303134656334 Sep 13 01:34:00.149000 audit[5818]: NETFILTER_CFG table=filter:139 family=2 entries=10 op=nft_register_rule pid=5818 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:00.149000 audit[5818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff6c89b50 a2=0 a3=1 items=0 ppid=2558 pid=5818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:00.149000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:00.178000 audit[5818]: NETFILTER_CFG table=nat:140 family=2 entries=32 op=nft_register_rule pid=5818 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:00.178000 audit[5818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffff6c89b50 a2=0 a3=1 items=0 ppid=2558 pid=5818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:00.178000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:00.203637 kubelet[2414]: I0913 01:34:00.203595 2414 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Sep 13 01:34:00.206027 kubelet[2414]: I0913 01:34:00.206002 2414 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Sep 13 01:34:00.585833 systemd-networkd[1601]: calif48bd7c66d2: Gained IPv6LL Sep 13 01:34:00.802000 audit[5731]: AVC avc: denied { watch } for pid=5731 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_58.319504995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c24,c765 tclass=file permissive=0 Sep 13 01:34:00.802000 audit[5731]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007095c0 a2=fc6 a3=0 items=0 ppid=5671 pid=5731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 key=(null) Sep 13 01:34:00.802000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:34:00.841493 kubelet[2414]: I0913 01:34:00.841364 2414 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-8rf89" podStartSLOduration=25.619905222 podStartE2EDuration="40.841331279s" podCreationTimestamp="2025-09-13 01:33:20 +0000 UTC" firstStartedPulling="2025-09-13 01:33:44.609133609 +0000 UTC m=+49.831431918" lastFinishedPulling="2025-09-13 01:33:59.830559706 +0000 UTC m=+65.052857975" observedRunningTime="2025-09-13 01:34:00.532710894 +0000 UTC m=+65.755009203" watchObservedRunningTime="2025-09-13 01:34:00.841331279 +0000 UTC m=+66.063629588" Sep 13 01:34:00.866000 audit[5822]: NETFILTER_CFG table=filter:141 family=2 entries=10 op=nft_register_rule pid=5822 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:00.866000 audit[5822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd8693ad0 a2=0 a3=1 items=0 ppid=2558 pid=5822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:00.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:00.871000 audit[5822]: NETFILTER_CFG table=nat:142 family=2 entries=36 op=nft_register_chain pid=5822 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:00.871000 audit[5822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffd8693ad0 a2=0 a3=1 items=0 ppid=2558 pid=5822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:00.871000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:00.894678 kubelet[2414]: I0913 01:34:00.894626 2414 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Sep 13 01:34:00.895167 env[1447]: time="2025-09-13T01:34:00.895120481Z" level=info msg="StopContainer for \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\" with timeout 30 (s)" Sep 13 01:34:00.895504 env[1447]: time="2025-09-13T01:34:00.895469961Z" level=info msg="Stop container \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\" with signal terminated" Sep 13 01:34:00.914000 audit: BPF prog-id=217 op=UNLOAD Sep 13 01:34:00.915427 systemd[1]: cri-containerd-ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730.scope: Deactivated successfully. Sep 13 01:34:00.917000 audit: BPF prog-id=220 op=UNLOAD Sep 13 01:34:00.942615 env[1447]: time="2025-09-13T01:34:00.939213251Z" level=info msg="shim disconnected" id=ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730 Sep 13 01:34:00.942615 env[1447]: time="2025-09-13T01:34:00.939269851Z" level=warning msg="cleaning up after shim disconnected" id=ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730 namespace=k8s.io Sep 13 01:34:00.942615 env[1447]: time="2025-09-13T01:34:00.939278531Z" level=info msg="cleaning up dead shim" Sep 13 01:34:00.941268 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730-rootfs.mount: Deactivated successfully. Sep 13 01:34:00.947093 env[1447]: time="2025-09-13T01:34:00.947047765Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:34:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5841 runtime=io.containerd.runc.v2\n" Sep 13 01:34:01.004018 kubelet[2414]: I0913 01:34:01.003974 2414 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="a6cbb0ca-3390-4a37-8c80-d5a01d422ca6" path="/var/lib/kubelet/pods/a6cbb0ca-3390-4a37-8c80-d5a01d422ca6/volumes" Sep 13 01:34:01.196503 env[1447]: time="2025-09-13T01:34:01.196392073Z" level=info msg="StopContainer for \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\" returns successfully" Sep 13 01:34:01.196910 env[1447]: time="2025-09-13T01:34:01.196872112Z" level=info msg="StopPodSandbox for \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\"" Sep 13 01:34:01.196966 env[1447]: time="2025-09-13T01:34:01.196932712Z" level=info msg="Container to stop \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Sep 13 01:34:01.203243 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c-shm.mount: Deactivated successfully. Sep 13 01:34:01.205000 audit: BPF prog-id=173 op=UNLOAD Sep 13 01:34:01.207254 systemd[1]: cri-containerd-203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c.scope: Deactivated successfully. Sep 13 01:34:01.211000 audit: BPF prog-id=176 op=UNLOAD Sep 13 01:34:01.235313 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c-rootfs.mount: Deactivated successfully. Sep 13 01:34:01.236867 env[1447]: time="2025-09-13T01:34:01.236802565Z" level=info msg="shim disconnected" id=203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c Sep 13 01:34:01.236867 env[1447]: time="2025-09-13T01:34:01.236862285Z" level=warning msg="cleaning up after shim disconnected" id=203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c namespace=k8s.io Sep 13 01:34:01.236867 env[1447]: time="2025-09-13T01:34:01.236872005Z" level=info msg="cleaning up dead shim" Sep 13 01:34:01.255142 env[1447]: time="2025-09-13T01:34:01.253605433Z" level=warning msg="cleanup warnings time=\"2025-09-13T01:34:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5872 runtime=io.containerd.runc.v2\n" Sep 13 01:34:01.321286 systemd-networkd[1601]: calie626a0f1195: Link DOWN Sep 13 01:34:01.321293 systemd-networkd[1601]: calie626a0f1195: Lost carrier Sep 13 01:34:01.339000 audit[5910]: NETFILTER_CFG table=filter:143 family=2 entries=59 op=nft_register_rule pid=5910 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:34:01.339000 audit[5910]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10132 a0=3 a1=ffffdbb608b0 a2=0 a3=ffff93c5cfa8 items=0 ppid=3753 pid=5910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:01.339000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:34:01.340000 audit[5910]: NETFILTER_CFG table=filter:144 family=2 entries=2 op=nft_unregister_chain pid=5910 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Sep 13 01:34:01.340000 audit[5910]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdbb608b0 a2=0 a3=ffff93c5cfa8 items=0 ppid=3753 pid=5910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:01.340000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.317 [INFO][5894] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.317 [INFO][5894] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" iface="eth0" netns="/var/run/netns/cni-3219f544-262f-9330-32b9-4e2b8b9fe232" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.318 [INFO][5894] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" iface="eth0" netns="/var/run/netns/cni-3219f544-262f-9330-32b9-4e2b8b9fe232" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.331 [INFO][5894] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" after=13.86963ms iface="eth0" netns="/var/run/netns/cni-3219f544-262f-9330-32b9-4e2b8b9fe232" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.331 [INFO][5894] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.331 [INFO][5894] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.356 [INFO][5906] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.356 [INFO][5906] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.356 [INFO][5906] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.405 [INFO][5906] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.405 [INFO][5906] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.406 [INFO][5906] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:34:01.409733 env[1447]: 2025-09-13 01:34:01.408 [INFO][5894] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:01.413090 env[1447]: time="2025-09-13T01:34:01.412804843Z" level=info msg="TearDown network for sandbox \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" successfully" Sep 13 01:34:01.413090 env[1447]: time="2025-09-13T01:34:01.412843483Z" level=info msg="StopPodSandbox for \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" returns successfully" Sep 13 01:34:01.412546 systemd[1]: run-netns-cni\x2d3219f544\x2d262f\x2d9330\x2d32b9\x2d4e2b8b9fe232.mount: Deactivated successfully. Sep 13 01:34:01.514149 kubelet[2414]: I0913 01:34:01.513728 2414 scope.go:117] "RemoveContainer" containerID="ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730" Sep 13 01:34:01.515687 env[1447]: time="2025-09-13T01:34:01.515640973Z" level=info msg="RemoveContainer for \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\"" Sep 13 01:34:01.527628 env[1447]: time="2025-09-13T01:34:01.527585004Z" level=info msg="RemoveContainer for \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\" returns successfully" Sep 13 01:34:01.528029 kubelet[2414]: I0913 01:34:01.527999 2414 scope.go:117] "RemoveContainer" containerID="ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730" Sep 13 01:34:01.528360 env[1447]: time="2025-09-13T01:34:01.528304204Z" level=error msg="ContainerStatus for \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\": not found" Sep 13 01:34:01.528711 kubelet[2414]: E0913 01:34:01.528625 2414 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\": not found" containerID="ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730" Sep 13 01:34:01.528711 kubelet[2414]: I0913 01:34:01.528648 2414 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730"} err="failed to get container status \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\": rpc error: code = NotFound desc = an error occurred when try to find container \"ea73b021adafbfb7f9c7528560bfaac6c6f2b7e1b4fa87dd29787c2545132730\": not found" Sep 13 01:34:01.580720 kubelet[2414]: I0913 01:34:01.579080 2414 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/ddddcc61-e927-42cf-8461-ba98f8f408bd-calico-apiserver-certs\") pod \"ddddcc61-e927-42cf-8461-ba98f8f408bd\" (UID: \"ddddcc61-e927-42cf-8461-ba98f8f408bd\") " Sep 13 01:34:01.580720 kubelet[2414]: I0913 01:34:01.579140 2414 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-zjtjs\" (UniqueName: \"kubernetes.io/projected/ddddcc61-e927-42cf-8461-ba98f8f408bd-kube-api-access-zjtjs\") pod \"ddddcc61-e927-42cf-8461-ba98f8f408bd\" (UID: \"ddddcc61-e927-42cf-8461-ba98f8f408bd\") " Sep 13 01:34:01.583106 kubelet[2414]: I0913 01:34:01.583002 2414 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ddddcc61-e927-42cf-8461-ba98f8f408bd-kube-api-access-zjtjs" (OuterVolumeSpecName: "kube-api-access-zjtjs") pod "ddddcc61-e927-42cf-8461-ba98f8f408bd" (UID: "ddddcc61-e927-42cf-8461-ba98f8f408bd"). InnerVolumeSpecName "kube-api-access-zjtjs". PluginName "kubernetes.io/projected", VolumeGIDValue "" Sep 13 01:34:01.585772 systemd[1]: var-lib-kubelet-pods-ddddcc61\x2de927\x2d42cf\x2d8461\x2dba98f8f408bd-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dzjtjs.mount: Deactivated successfully. Sep 13 01:34:01.585880 systemd[1]: var-lib-kubelet-pods-ddddcc61\x2de927\x2d42cf\x2d8461\x2dba98f8f408bd-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Sep 13 01:34:01.588413 kubelet[2414]: I0913 01:34:01.588376 2414 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ddddcc61-e927-42cf-8461-ba98f8f408bd-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "ddddcc61-e927-42cf-8461-ba98f8f408bd" (UID: "ddddcc61-e927-42cf-8461-ba98f8f408bd"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Sep 13 01:34:01.679566 kubelet[2414]: I0913 01:34:01.679532 2414 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/ddddcc61-e927-42cf-8461-ba98f8f408bd-calico-apiserver-certs\") on node \"ci-3510.3.8-n-12daba8686\" DevicePath \"\"" Sep 13 01:34:01.679797 kubelet[2414]: I0913 01:34:01.679782 2414 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-zjtjs\" (UniqueName: \"kubernetes.io/projected/ddddcc61-e927-42cf-8461-ba98f8f408bd-kube-api-access-zjtjs\") on node \"ci-3510.3.8-n-12daba8686\" DevicePath \"\"" Sep 13 01:34:01.818233 systemd[1]: Removed slice kubepods-besteffort-podddddcc61_e927_42cf_8461_ba98f8f408bd.slice. Sep 13 01:34:01.886000 audit[5916]: NETFILTER_CFG table=filter:145 family=2 entries=10 op=nft_register_rule pid=5916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:01.886000 audit[5916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff6a72400 a2=0 a3=1 items=0 ppid=2558 pid=5916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:01.886000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:01.894000 audit[5916]: NETFILTER_CFG table=nat:146 family=2 entries=38 op=nft_register_rule pid=5916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:01.894000 audit[5916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff6a72400 a2=0 a3=1 items=0 ppid=2558 pid=5916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:01.894000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:03.003113 kubelet[2414]: I0913 01:34:03.003079 2414 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="ddddcc61-e927-42cf-8461-ba98f8f408bd" path="/var/lib/kubelet/pods/ddddcc61-e927-42cf-8461-ba98f8f408bd/volumes" Sep 13 01:34:08.186855 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.NmzFOV.mount: Deactivated successfully. Sep 13 01:34:12.771053 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.033mAq.mount: Deactivated successfully. Sep 13 01:34:18.984835 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.NLtnbY.mount: Deactivated successfully. Sep 13 01:34:27.319025 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.LsSLBh.mount: Deactivated successfully. Sep 13 01:34:27.444000 audit[6014]: NETFILTER_CFG table=filter:147 family=2 entries=9 op=nft_register_rule pid=6014 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:27.451130 kernel: kauditd_printk_skb: 64 callbacks suppressed Sep 13 01:34:27.451236 kernel: audit: type=1325 audit(1757727267.444:1583): table=filter:147 family=2 entries=9 op=nft_register_rule pid=6014 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:27.444000 audit[6014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffcc5ccae0 a2=0 a3=1 items=0 ppid=2558 pid=6014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:27.493759 kernel: audit: type=1300 audit(1757727267.444:1583): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffcc5ccae0 a2=0 a3=1 items=0 ppid=2558 pid=6014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:27.444000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:27.506878 kernel: audit: type=1327 audit(1757727267.444:1583): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:27.494000 audit[6014]: NETFILTER_CFG table=nat:148 family=2 entries=31 op=nft_register_chain pid=6014 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:27.521168 kernel: audit: type=1325 audit(1757727267.494:1584): table=nat:148 family=2 entries=31 op=nft_register_chain pid=6014 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:34:27.494000 audit[6014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffcc5ccae0 a2=0 a3=1 items=0 ppid=2558 pid=6014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:27.547993 kernel: audit: type=1300 audit(1757727267.494:1584): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffcc5ccae0 a2=0 a3=1 items=0 ppid=2558 pid=6014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:34:27.494000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:27.562194 kernel: audit: type=1327 audit(1757727267.494:1584): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:34:29.529642 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.Qd9VRO.mount: Deactivated successfully. Sep 13 01:34:38.184113 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.FGlmEd.mount: Deactivated successfully. Sep 13 01:34:51.453000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:51.453000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:51.498867 kernel: audit: type=1400 audit(1757727291.453:1585): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:51.499026 kernel: audit: type=1400 audit(1757727291.453:1586): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:51.453000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40029ba020 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:51.528134 kernel: audit: type=1300 audit(1757727291.453:1586): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40029ba020 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:51.453000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:51.557684 kernel: audit: type=1327 audit(1757727291.453:1586): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:51.453000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007cbf80 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:51.586817 kernel: audit: type=1300 audit(1757727291.453:1585): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007cbf80 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:51.453000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:51.612185 kernel: audit: type=1327 audit(1757727291.453:1585): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:51.926000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:51.926000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4008621da0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:34:51.982819 kernel: audit: type=1400 audit(1757727291.926:1587): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:51.982942 kernel: audit: type=1300 audit(1757727291.926:1587): arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4008621da0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:34:51.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:34:52.008259 kernel: audit: type=1327 audit(1757727291.926:1587): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:34:52.005000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:52.032167 kernel: audit: type=1400 audit(1757727292.005:1588): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:52.005000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=401248e5a0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:34:52.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:34:52.005000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:52.005000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40146d8090 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:34:52.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:34:52.007000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:52.007000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40146d8330 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:34:52.007000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:34:52.023000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:52.023000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40146d8570 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:34:52.023000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:34:52.025000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:52.025000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=401248eba0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:34:52.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:34:57.330326 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.evUvJu.mount: Deactivated successfully. Sep 13 01:34:57.351000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.358775 kernel: kauditd_printk_skb: 14 callbacks suppressed Sep 13 01:34:57.358907 kernel: audit: type=1400 audit(1757727297.351:1593): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.351000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40029ba260 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:57.416732 kernel: audit: type=1300 audit(1757727297.351:1593): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40029ba260 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:57.351000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.441071 kernel: audit: type=1400 audit(1757727297.351:1594): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.351000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400109b780 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:57.471895 kernel: audit: type=1300 audit(1757727297.351:1594): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400109b780 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:57.472044 kernel: audit: type=1327 audit(1757727297.351:1594): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:57.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:57.484790 env[1447]: time="2025-09-13T01:34:57.484749027Z" level=info msg="StopPodSandbox for \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\"" Sep 13 01:34:57.352000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.525931 kernel: audit: type=1400 audit(1757727297.352:1595): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.526078 kernel: audit: type=1300 audit(1757727297.352:1595): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400109be40 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:57.352000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400109be40 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:57.352000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:57.576243 kernel: audit: type=1327 audit(1757727297.352:1595): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:57.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:57.602469 kernel: audit: type=1327 audit(1757727297.351:1593): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:57.368000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.535 [WARNING][6090] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.536 [INFO][6090] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.536 [INFO][6090] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" iface="eth0" netns="" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.536 [INFO][6090] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.536 [INFO][6090] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.564 [INFO][6097] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.564 [INFO][6097] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.564 [INFO][6097] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.573 [WARNING][6097] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.573 [INFO][6097] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.575 [INFO][6097] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:34:57.603902 env[1447]: 2025-09-13 01:34:57.577 [INFO][6090] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.604380 env[1447]: time="2025-09-13T01:34:57.604339297Z" level=info msg="TearDown network for sandbox \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" successfully" Sep 13 01:34:57.604464 env[1447]: time="2025-09-13T01:34:57.604446862Z" level=info msg="StopPodSandbox for \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" returns successfully" Sep 13 01:34:57.626911 kernel: audit: type=1400 audit(1757727297.368:1596): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:34:57.627507 env[1447]: time="2025-09-13T01:34:57.627476636Z" level=info msg="RemovePodSandbox for \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\"" Sep 13 01:34:57.368000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001162240 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:34:57.368000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:34:57.627972 env[1447]: time="2025-09-13T01:34:57.627918300Z" level=info msg="Forcibly stopping sandbox \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\"" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.664 [WARNING][6111] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.664 [INFO][6111] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.664 [INFO][6111] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" iface="eth0" netns="" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.664 [INFO][6111] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.664 [INFO][6111] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.683 [INFO][6118] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.683 [INFO][6118] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.683 [INFO][6118] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.691 [WARNING][6118] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.691 [INFO][6118] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" HandleID="k8s-pod-network.203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--8ds5r-eth0" Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.693 [INFO][6118] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:34:57.695920 env[1447]: 2025-09-13 01:34:57.694 [INFO][6111] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c" Sep 13 01:34:57.696418 env[1447]: time="2025-09-13T01:34:57.696373827Z" level=info msg="TearDown network for sandbox \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" successfully" Sep 13 01:34:57.704377 env[1447]: time="2025-09-13T01:34:57.704336900Z" level=info msg="RemovePodSandbox \"203434ea8077459557d052e6c21f6cd9778c6b84e5502ef7fa9ab19553c61d5c\" returns successfully" Sep 13 01:34:57.705122 env[1447]: time="2025-09-13T01:34:57.705098862Z" level=info msg="StopPodSandbox for \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\"" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.737 [WARNING][6132] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.737 [INFO][6132] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.737 [INFO][6132] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" iface="eth0" netns="" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.737 [INFO][6132] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.737 [INFO][6132] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.755 [INFO][6140] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.756 [INFO][6140] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.756 [INFO][6140] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.765 [WARNING][6140] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.765 [INFO][6140] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.770 [INFO][6140] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:34:57.774054 env[1447]: 2025-09-13 01:34:57.772 [INFO][6132] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.774531 env[1447]: time="2025-09-13T01:34:57.774496599Z" level=info msg="TearDown network for sandbox \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" successfully" Sep 13 01:34:57.774596 env[1447]: time="2025-09-13T01:34:57.774581524Z" level=info msg="StopPodSandbox for \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" returns successfully" Sep 13 01:34:57.775141 env[1447]: time="2025-09-13T01:34:57.775119513Z" level=info msg="RemovePodSandbox for \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\"" Sep 13 01:34:57.775279 env[1447]: time="2025-09-13T01:34:57.775238800Z" level=info msg="Forcibly stopping sandbox \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\"" Sep 13 01:34:57.775000 audit[5017]: AVC avc: denied { watch } for pid=5017 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_29.1389439504/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c433,c661 tclass=file permissive=0 Sep 13 01:34:57.775000 audit[5017]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400134b7c0 a2=fc6 a3=0 items=0 ppid=4744 pid=5017 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 key=(null) Sep 13 01:34:57.775000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.807 [WARNING][6155] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" WorkloadEndpoint="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.808 [INFO][6155] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.808 [INFO][6155] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" iface="eth0" netns="" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.808 [INFO][6155] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.808 [INFO][6155] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.825 [INFO][6162] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.825 [INFO][6162] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.825 [INFO][6162] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.833 [WARNING][6162] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.833 [INFO][6162] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" HandleID="k8s-pod-network.832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Workload="ci--3510.3.8--n--12daba8686-k8s-calico--apiserver--84855b6446--7k6rx-eth0" Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.834 [INFO][6162] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Sep 13 01:34:57.837346 env[1447]: 2025-09-13 01:34:57.836 [INFO][6155] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3" Sep 13 01:34:57.837766 env[1447]: time="2025-09-13T01:34:57.837719001Z" level=info msg="TearDown network for sandbox \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" successfully" Sep 13 01:34:57.846274 env[1447]: time="2025-09-13T01:34:57.846229064Z" level=info msg="RemovePodSandbox \"832b7f7b0951b693e0b2f8bc22061f4753643a152a12f2ec9a120e60c8dcbdd3\" returns successfully" Sep 13 01:34:59.526286 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.R2oqTT.mount: Deactivated successfully. Sep 13 01:35:00.804000 audit[5731]: AVC avc: denied { watch } for pid=5731 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_58.319504995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c24,c765 tclass=file permissive=0 Sep 13 01:35:00.804000 audit[5731]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f4aaa0 a2=fc6 a3=0 items=0 ppid=5671 pid=5731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 key=(null) Sep 13 01:35:00.804000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:35:08.182542 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.8obTmv.mount: Deactivated successfully. Sep 13 01:35:12.770123 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.9qbFyp.mount: Deactivated successfully. Sep 13 01:35:18.984481 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.cySk4v.mount: Deactivated successfully. Sep 13 01:35:27.318336 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.A5nelZ.mount: Deactivated successfully. Sep 13 01:35:29.522720 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.GexcCh.mount: Deactivated successfully. Sep 13 01:35:38.189824 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.YJlvyY.mount: Deactivated successfully. Sep 13 01:35:51.455000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:51.461565 kernel: kauditd_printk_skb: 8 callbacks suppressed Sep 13 01:35:51.461705 kernel: audit: type=1400 audit(1757727351.455:1599): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:51.455000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:51.510076 kernel: audit: type=1400 audit(1757727351.455:1600): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:51.455000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000a62b80 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:51.545900 kernel: audit: type=1300 audit(1757727351.455:1600): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000a62b80 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:51.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:51.573806 kernel: audit: type=1327 audit(1757727351.455:1600): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:51.455000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008575c0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:51.605898 kernel: audit: type=1300 audit(1757727351.455:1599): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008575c0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:51.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:51.630278 kernel: audit: type=1327 audit(1757727351.455:1599): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:51.932000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:51.932000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400988f3b0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:35:51.985722 kernel: audit: type=1400 audit(1757727351.932:1601): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:51.985893 kernel: audit: type=1300 audit(1757727351.932:1601): arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400988f3b0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:35:51.985990 kernel: audit: type=1327 audit(1757727351.932:1601): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:35:51.932000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:35:52.006000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:52.033682 kernel: audit: type=1400 audit(1757727352.006:1602): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:52.006000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=40086e15f0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:35:52.006000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:35:52.007000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:52.007000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400f2bffc0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:35:52.007000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:35:52.009000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:52.009000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=40086e1860 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:35:52.009000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:35:52.025000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:52.025000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=40086e1b90 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:35:52.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:35:52.026000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:52.026000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400f786140 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:35:52.026000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:35:57.321878 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.FzTE58.mount: Deactivated successfully. Sep 13 01:35:57.354000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.360108 kernel: kauditd_printk_skb: 14 callbacks suppressed Sep 13 01:35:57.360219 kernel: audit: type=1400 audit(1757727357.354:1607): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.354000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.406257 kernel: audit: type=1400 audit(1757727357.354:1608): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.354000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000916ac0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:57.436155 kernel: audit: type=1300 audit(1757727357.354:1608): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000916ac0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:57.354000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:57.460578 kernel: audit: type=1327 audit(1757727357.354:1608): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:57.354000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.483713 kernel: audit: type=1400 audit(1757727357.354:1609): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.354000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000916b40 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:57.519016 kernel: audit: type=1300 audit(1757727357.354:1609): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000916b40 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:57.354000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:57.544832 kernel: audit: type=1327 audit(1757727357.354:1609): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:57.354000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a636c0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:57.576749 kernel: audit: type=1300 audit(1757727357.354:1607): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a636c0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:57.354000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:57.602300 kernel: audit: type=1327 audit(1757727357.354:1607): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:57.365000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.625523 kernel: audit: type=1400 audit(1757727357.365:1610): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:35:57.365000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000917180 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:35:57.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:35:57.775000 audit[5017]: AVC avc: denied { watch } for pid=5017 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_29.1389439504/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c433,c661 tclass=file permissive=0 Sep 13 01:35:57.775000 audit[5017]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001f70420 a2=fc6 a3=0 items=0 ppid=4744 pid=5017 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 key=(null) Sep 13 01:35:57.775000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:35:59.524465 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.At82pZ.mount: Deactivated successfully. Sep 13 01:36:00.805000 audit[5731]: AVC avc: denied { watch } for pid=5731 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_58.319504995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c24,c765 tclass=file permissive=0 Sep 13 01:36:00.805000 audit[5731]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000b3e240 a2=fc6 a3=0 items=0 ppid=5671 pid=5731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 key=(null) Sep 13 01:36:00.805000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:36:08.180849 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.Y3aRG3.mount: Deactivated successfully. Sep 13 01:36:12.763233 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.Eii5Aw.mount: Deactivated successfully. Sep 13 01:36:18.983881 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.jrpt0v.mount: Deactivated successfully. Sep 13 01:36:27.324059 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.H8829S.mount: Deactivated successfully. Sep 13 01:36:29.522006 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.kJ5of5.mount: Deactivated successfully. Sep 13 01:36:38.184649 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.95MLWk.mount: Deactivated successfully. Sep 13 01:36:51.456000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:51.461911 kernel: kauditd_printk_skb: 8 callbacks suppressed Sep 13 01:36:51.462009 kernel: audit: type=1400 audit(1757727411.456:1613): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:51.456000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:51.456000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011c4da0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:51.539667 kernel: audit: type=1400 audit(1757727411.456:1614): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:51.539797 kernel: audit: type=1300 audit(1757727411.456:1614): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011c4da0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:51.456000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:51.565316 kernel: audit: type=1327 audit(1757727411.456:1614): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:51.456000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40032c9170 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:51.596414 kernel: audit: type=1300 audit(1757727411.456:1613): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40032c9170 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:51.456000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:51.621079 kernel: audit: type=1327 audit(1757727411.456:1613): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:51.934000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:51.934000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400e1fdce0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:36:51.986001 kernel: audit: type=1400 audit(1757727411.934:1615): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:51.986125 kernel: audit: type=1300 audit(1757727411.934:1615): arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400e1fdce0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:36:51.934000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:36:52.009370 kernel: audit: type=1327 audit(1757727411.934:1615): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:36:52.007000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:52.031842 kernel: audit: type=1400 audit(1757727412.007:1616): avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:52.007000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400dd3d770 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:36:52.007000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:36:52.007000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:52.007000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=40141ff560 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:36:52.007000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:36:52.010000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:52.010000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400e1fde00 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:36:52.010000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:36:52.026000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:52.026000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400dd3d950 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:36:52.026000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:36:52.027000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:52.027000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=40142acd40 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:36:52.027000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:36:57.322263 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.0vwlbs.mount: Deactivated successfully. Sep 13 01:36:57.356000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.361638 kernel: kauditd_printk_skb: 14 callbacks suppressed Sep 13 01:36:57.361761 kernel: audit: type=1400 audit(1757727417.356:1621): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.357000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.404315 kernel: audit: type=1400 audit(1757727417.357:1622): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.357000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400307d960 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:57.432200 kernel: audit: type=1300 audit(1757727417.357:1622): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400307d960 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:57.357000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:57.455853 kernel: audit: type=1327 audit(1757727417.357:1622): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:57.455987 kernel: audit: type=1400 audit(1757727417.357:1623): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.357000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.357000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400307d980 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:57.506667 kernel: audit: type=1300 audit(1757727417.357:1623): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400307d980 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:57.357000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:57.530665 kernel: audit: type=1327 audit(1757727417.357:1623): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:57.356000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011c5420 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:57.559780 kernel: audit: type=1300 audit(1757727417.356:1621): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011c5420 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:57.559917 kernel: audit: type=1327 audit(1757727417.356:1621): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:57.356000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:57.370000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.606587 kernel: audit: type=1400 audit(1757727417.370:1624): avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:36:57.370000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011c5440 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:36:57.370000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:36:57.777000 audit[5017]: AVC avc: denied { watch } for pid=5017 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_29.1389439504/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c433,c661 tclass=file permissive=0 Sep 13 01:36:57.777000 audit[5017]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001f70140 a2=fc6 a3=0 items=0 ppid=4744 pid=5017 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 key=(null) Sep 13 01:36:57.777000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:36:59.526237 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.zO34PM.mount: Deactivated successfully. Sep 13 01:37:00.807000 audit[5731]: AVC avc: denied { watch } for pid=5731 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_58.319504995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c24,c765 tclass=file permissive=0 Sep 13 01:37:00.807000 audit[5731]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f4a020 a2=fc6 a3=0 items=0 ppid=5671 pid=5731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 key=(null) Sep 13 01:37:00.807000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:37:08.184055 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.Qf5ceT.mount: Deactivated successfully. Sep 13 01:37:19.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.14:22-10.200.16.10:32998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:19.025244 systemd[1]: Started sshd@7-10.200.20.14:22-10.200.16.10:32998.service. Sep 13 01:37:19.030650 kernel: kauditd_printk_skb: 8 callbacks suppressed Sep 13 01:37:19.030783 kernel: audit: type=1130 audit(1757727439.023:1627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.14:22-10.200.16.10:32998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:19.469854 sshd[6659]: Accepted publickey for core from 10.200.16.10 port 32998 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:19.468000 audit[6659]: USER_ACCT pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.487365 sshd[6659]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:19.485000 audit[6659]: CRED_ACQ pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.499988 systemd[1]: Started session-10.scope. Sep 13 01:37:19.501314 systemd-logind[1434]: New session 10 of user core. Sep 13 01:37:19.519608 kernel: audit: type=1101 audit(1757727439.468:1628): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.519793 kernel: audit: type=1103 audit(1757727439.485:1629): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.533566 kernel: audit: type=1006 audit(1757727439.485:1630): pid=6659 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Sep 13 01:37:19.533908 kernel: audit: type=1300 audit(1757727439.485:1630): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe740bb10 a2=3 a3=1 items=0 ppid=1 pid=6659 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:19.485000 audit[6659]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe740bb10 a2=3 a3=1 items=0 ppid=1 pid=6659 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:19.485000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:19.567509 kernel: audit: type=1327 audit(1757727439.485:1630): proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:19.518000 audit[6659]: USER_START pid=6659 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.594745 kernel: audit: type=1105 audit(1757727439.518:1631): pid=6659 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.518000 audit[6661]: CRED_ACQ pid=6661 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.617229 kernel: audit: type=1103 audit(1757727439.518:1632): pid=6661 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.930195 sshd[6659]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:19.929000 audit[6659]: USER_END pid=6659 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.933244 systemd-logind[1434]: Session 10 logged out. Waiting for processes to exit. Sep 13 01:37:19.934368 systemd[1]: session-10.scope: Deactivated successfully. Sep 13 01:37:19.935719 systemd[1]: sshd@7-10.200.20.14:22-10.200.16.10:32998.service: Deactivated successfully. Sep 13 01:37:19.936757 systemd-logind[1434]: Removed session 10. Sep 13 01:37:19.929000 audit[6659]: CRED_DISP pid=6659 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.990515 kernel: audit: type=1106 audit(1757727439.929:1633): pid=6659 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.990651 kernel: audit: type=1104 audit(1757727439.929:1634): pid=6659 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:19.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.14:22-10.200.16.10:32998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:25.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.14:22-10.200.16.10:39924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:25.002141 systemd[1]: Started sshd@8-10.200.20.14:22-10.200.16.10:39924.service. Sep 13 01:37:25.007129 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:37:25.007210 kernel: audit: type=1130 audit(1757727445.000:1636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.14:22-10.200.16.10:39924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:25.421992 sshd[6672]: Accepted publickey for core from 10.200.16.10 port 39924 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:25.420000 audit[6672]: USER_ACCT pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.423356 sshd[6672]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:25.421000 audit[6672]: CRED_ACQ pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.467950 kernel: audit: type=1101 audit(1757727445.420:1637): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.468068 kernel: audit: type=1103 audit(1757727445.421:1638): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.471756 systemd-logind[1434]: New session 11 of user core. Sep 13 01:37:25.472549 systemd[1]: Started session-11.scope. Sep 13 01:37:25.482194 kernel: audit: type=1006 audit(1757727445.421:1639): pid=6672 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Sep 13 01:37:25.421000 audit[6672]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf8a8db0 a2=3 a3=1 items=0 ppid=1 pid=6672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:25.506981 kernel: audit: type=1300 audit(1757727445.421:1639): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf8a8db0 a2=3 a3=1 items=0 ppid=1 pid=6672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:25.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:25.515798 kernel: audit: type=1327 audit(1757727445.421:1639): proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:25.516019 kernel: audit: type=1105 audit(1757727445.476:1640): pid=6672 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.476000 audit[6672]: USER_START pid=6672 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.505000 audit[6674]: CRED_ACQ pid=6674 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.563099 kernel: audit: type=1103 audit(1757727445.505:1641): pid=6674 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.819505 sshd[6672]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:25.818000 audit[6672]: USER_END pid=6672 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.822683 systemd-logind[1434]: Session 11 logged out. Waiting for processes to exit. Sep 13 01:37:25.823972 systemd[1]: session-11.scope: Deactivated successfully. Sep 13 01:37:25.825208 systemd-logind[1434]: Removed session 11. Sep 13 01:37:25.825957 systemd[1]: sshd@8-10.200.20.14:22-10.200.16.10:39924.service: Deactivated successfully. Sep 13 01:37:25.819000 audit[6672]: CRED_DISP pid=6672 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.867321 kernel: audit: type=1106 audit(1757727445.818:1642): pid=6672 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.867461 kernel: audit: type=1104 audit(1757727445.819:1643): pid=6672 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:25.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.14:22-10.200.16.10:39924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:27.321345 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.uiNuNZ.mount: Deactivated successfully. Sep 13 01:37:29.524061 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.8YBuo2.mount: Deactivated successfully. Sep 13 01:37:30.889065 systemd[1]: Started sshd@9-10.200.20.14:22-10.200.16.10:37280.service. Sep 13 01:37:30.915694 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:37:30.915812 kernel: audit: type=1130 audit(1757727450.887:1645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.14:22-10.200.16.10:37280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:30.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.14:22-10.200.16.10:37280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:31.302000 audit[6724]: USER_ACCT pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.304041 sshd[6724]: Accepted publickey for core from 10.200.16.10 port 37280 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:31.305979 sshd[6724]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:31.303000 audit[6724]: CRED_ACQ pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.349522 kernel: audit: type=1101 audit(1757727451.302:1646): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.349650 kernel: audit: type=1103 audit(1757727451.303:1647): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.365741 kernel: audit: type=1006 audit(1757727451.304:1648): pid=6724 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Sep 13 01:37:31.304000 audit[6724]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9822200 a2=3 a3=1 items=0 ppid=1 pid=6724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:31.389741 kernel: audit: type=1300 audit(1757727451.304:1648): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9822200 a2=3 a3=1 items=0 ppid=1 pid=6724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:31.366355 systemd-logind[1434]: New session 12 of user core. Sep 13 01:37:31.368307 systemd[1]: Started session-12.scope. Sep 13 01:37:31.304000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:31.399423 kernel: audit: type=1327 audit(1757727451.304:1648): proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:31.388000 audit[6724]: USER_START pid=6724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.426583 kernel: audit: type=1105 audit(1757727451.388:1649): pid=6724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.388000 audit[6726]: CRED_ACQ pid=6726 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.447777 kernel: audit: type=1103 audit(1757727451.388:1650): pid=6726 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.695714 sshd[6724]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:31.695000 audit[6724]: USER_END pid=6724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.698615 systemd-logind[1434]: Session 12 logged out. Waiting for processes to exit. Sep 13 01:37:31.699790 systemd[1]: session-12.scope: Deactivated successfully. Sep 13 01:37:31.700891 systemd-logind[1434]: Removed session 12. Sep 13 01:37:31.701457 systemd[1]: sshd@9-10.200.20.14:22-10.200.16.10:37280.service: Deactivated successfully. Sep 13 01:37:31.695000 audit[6724]: CRED_DISP pid=6724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.743173 kernel: audit: type=1106 audit(1757727451.695:1651): pid=6724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.743318 kernel: audit: type=1104 audit(1757727451.695:1652): pid=6724 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:31.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.14:22-10.200.16.10:37280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:36.764770 systemd[1]: Started sshd@10-10.200.20.14:22-10.200.16.10:37290.service. Sep 13 01:37:36.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.14:22-10.200.16.10:37290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:36.774990 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:37:36.775046 kernel: audit: type=1130 audit(1757727456.769:1654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.14:22-10.200.16.10:37290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:37.179000 audit[6738]: USER_ACCT pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.180551 sshd[6738]: Accepted publickey for core from 10.200.16.10 port 37290 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:37.204000 audit[6738]: CRED_ACQ pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.205738 sshd[6738]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:37.227433 kernel: audit: type=1101 audit(1757727457.179:1655): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.227530 kernel: audit: type=1103 audit(1757727457.204:1656): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.241382 kernel: audit: type=1006 audit(1757727457.204:1657): pid=6738 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Sep 13 01:37:37.204000 audit[6738]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc4f69a0 a2=3 a3=1 items=0 ppid=1 pid=6738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:37.265345 kernel: audit: type=1300 audit(1757727457.204:1657): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc4f69a0 a2=3 a3=1 items=0 ppid=1 pid=6738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:37.204000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:37.269263 systemd[1]: Started session-13.scope. Sep 13 01:37:37.270523 systemd-logind[1434]: New session 13 of user core. Sep 13 01:37:37.273787 kernel: audit: type=1327 audit(1757727457.204:1657): proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:37.274000 audit[6738]: USER_START pid=6738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.276000 audit[6740]: CRED_ACQ pid=6740 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.321392 kernel: audit: type=1105 audit(1757727457.274:1658): pid=6738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.321515 kernel: audit: type=1103 audit(1757727457.276:1659): pid=6740 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.600128 sshd[6738]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:37.600000 audit[6738]: USER_END pid=6738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.606208 systemd[1]: sshd@10-10.200.20.14:22-10.200.16.10:37290.service: Deactivated successfully. Sep 13 01:37:37.607035 systemd[1]: session-13.scope: Deactivated successfully. Sep 13 01:37:37.603000 audit[6738]: CRED_DISP pid=6738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.629120 systemd-logind[1434]: Session 13 logged out. Waiting for processes to exit. Sep 13 01:37:37.630089 systemd-logind[1434]: Removed session 13. Sep 13 01:37:37.648774 kernel: audit: type=1106 audit(1757727457.600:1660): pid=6738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.648891 kernel: audit: type=1104 audit(1757727457.603:1661): pid=6738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:37.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.14:22-10.200.16.10:37290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:37.669431 systemd[1]: Started sshd@11-10.200.20.14:22-10.200.16.10:37292.service. Sep 13 01:37:37.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.14:22-10.200.16.10:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:38.095000 audit[6751]: USER_ACCT pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:38.096875 sshd[6751]: Accepted publickey for core from 10.200.16.10 port 37292 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:38.097000 audit[6751]: CRED_ACQ pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:38.097000 audit[6751]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8644780 a2=3 a3=1 items=0 ppid=1 pid=6751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:38.097000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:38.098494 sshd[6751]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:38.102322 systemd-logind[1434]: New session 14 of user core. Sep 13 01:37:38.102817 systemd[1]: Started session-14.scope. Sep 13 01:37:38.106000 audit[6751]: USER_START pid=6751 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:38.107000 audit[6753]: CRED_ACQ pid=6753 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:38.190351 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.YERlM7.mount: Deactivated successfully. Sep 13 01:37:38.537801 sshd[6751]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:38.538000 audit[6751]: USER_END pid=6751 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:38.538000 audit[6751]: CRED_DISP pid=6751 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:38.540646 systemd[1]: sshd@11-10.200.20.14:22-10.200.16.10:37292.service: Deactivated successfully. Sep 13 01:37:38.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.14:22-10.200.16.10:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:38.541449 systemd[1]: session-14.scope: Deactivated successfully. Sep 13 01:37:38.542069 systemd-logind[1434]: Session 14 logged out. Waiting for processes to exit. Sep 13 01:37:38.543107 systemd-logind[1434]: Removed session 14. Sep 13 01:37:38.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.14:22-10.200.16.10:37300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:38.606072 systemd[1]: Started sshd@12-10.200.20.14:22-10.200.16.10:37300.service. Sep 13 01:37:39.025589 sshd[6782]: Accepted publickey for core from 10.200.16.10 port 37300 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:39.024000 audit[6782]: USER_ACCT pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:39.026000 audit[6782]: CRED_ACQ pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:39.026000 audit[6782]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbdad6d0 a2=3 a3=1 items=0 ppid=1 pid=6782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:39.026000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:39.027363 sshd[6782]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:39.031100 systemd-logind[1434]: New session 15 of user core. Sep 13 01:37:39.031608 systemd[1]: Started session-15.scope. Sep 13 01:37:39.035000 audit[6782]: USER_START pid=6782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:39.036000 audit[6784]: CRED_ACQ pid=6784 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:39.404238 sshd[6782]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:39.405000 audit[6782]: USER_END pid=6782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:39.405000 audit[6782]: CRED_DISP pid=6782 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:39.407550 systemd-logind[1434]: Session 15 logged out. Waiting for processes to exit. Sep 13 01:37:39.407819 systemd[1]: sshd@12-10.200.20.14:22-10.200.16.10:37300.service: Deactivated successfully. Sep 13 01:37:39.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.14:22-10.200.16.10:37300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:39.408571 systemd[1]: session-15.scope: Deactivated successfully. Sep 13 01:37:39.410108 systemd-logind[1434]: Removed session 15. Sep 13 01:37:44.474236 systemd[1]: Started sshd@13-10.200.20.14:22-10.200.16.10:39352.service. Sep 13 01:37:44.501474 kernel: kauditd_printk_skb: 23 callbacks suppressed Sep 13 01:37:44.501569 kernel: audit: type=1130 audit(1757727464.473:1681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.14:22-10.200.16.10:39352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:44.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.14:22-10.200.16.10:39352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:44.889000 audit[6798]: USER_ACCT pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:44.890944 sshd[6798]: Accepted publickey for core from 10.200.16.10 port 39352 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:44.892936 sshd[6798]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:44.891000 audit[6798]: CRED_ACQ pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:44.935072 kernel: audit: type=1101 audit(1757727464.889:1682): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:44.935199 kernel: audit: type=1103 audit(1757727464.891:1683): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:44.948673 kernel: audit: type=1006 audit(1757727464.891:1684): pid=6798 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Sep 13 01:37:44.891000 audit[6798]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1a12930 a2=3 a3=1 items=0 ppid=1 pid=6798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:44.971237 kernel: audit: type=1300 audit(1757727464.891:1684): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1a12930 a2=3 a3=1 items=0 ppid=1 pid=6798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:44.891000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:44.979733 kernel: audit: type=1327 audit(1757727464.891:1684): proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:44.981865 systemd-logind[1434]: New session 16 of user core. Sep 13 01:37:44.982264 systemd[1]: Started session-16.scope. Sep 13 01:37:44.985000 audit[6798]: USER_START pid=6798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:44.987000 audit[6800]: CRED_ACQ pid=6800 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:45.035001 kernel: audit: type=1105 audit(1757727464.985:1685): pid=6798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:45.035142 kernel: audit: type=1103 audit(1757727464.987:1686): pid=6800 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:45.296894 sshd[6798]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:45.297000 audit[6798]: USER_END pid=6798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:45.300173 systemd[1]: session-16.scope: Deactivated successfully. Sep 13 01:37:45.300953 systemd[1]: sshd@13-10.200.20.14:22-10.200.16.10:39352.service: Deactivated successfully. Sep 13 01:37:45.326807 systemd-logind[1434]: Session 16 logged out. Waiting for processes to exit. Sep 13 01:37:45.328326 systemd-logind[1434]: Removed session 16. Sep 13 01:37:45.298000 audit[6798]: CRED_DISP pid=6798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:45.353212 kernel: audit: type=1106 audit(1757727465.297:1687): pid=6798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:45.353415 kernel: audit: type=1104 audit(1757727465.298:1688): pid=6798 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:45.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.14:22-10.200.16.10:39352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:50.366492 systemd[1]: Started sshd@14-10.200.20.14:22-10.200.16.10:53794.service. Sep 13 01:37:50.393842 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:37:50.393998 kernel: audit: type=1130 audit(1757727470.365:1690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.14:22-10.200.16.10:53794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:50.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.14:22-10.200.16.10:53794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:50.784000 audit[6809]: USER_ACCT pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:50.785187 sshd[6809]: Accepted publickey for core from 10.200.16.10 port 53794 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:50.787117 sshd[6809]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:50.786000 audit[6809]: CRED_ACQ pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:50.835739 kernel: audit: type=1101 audit(1757727470.784:1691): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:50.835859 kernel: audit: type=1103 audit(1757727470.786:1692): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:50.849929 kernel: audit: type=1006 audit(1757727470.786:1693): pid=6809 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Sep 13 01:37:50.786000 audit[6809]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdbb2990 a2=3 a3=1 items=0 ppid=1 pid=6809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:50.853801 systemd[1]: Started session-17.scope. Sep 13 01:37:50.873461 kernel: audit: type=1300 audit(1757727470.786:1693): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdbb2990 a2=3 a3=1 items=0 ppid=1 pid=6809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:50.786000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:50.873791 systemd-logind[1434]: New session 17 of user core. Sep 13 01:37:50.881618 kernel: audit: type=1327 audit(1757727470.786:1693): proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:50.881000 audit[6809]: USER_START pid=6809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:50.908065 kernel: audit: type=1105 audit(1757727470.881:1694): pid=6809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:50.908203 kernel: audit: type=1103 audit(1757727470.881:1695): pid=6811 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:50.881000 audit[6811]: CRED_ACQ pid=6811 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:51.202896 sshd[6809]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:51.204000 audit[6809]: USER_END pid=6809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:51.207862 systemd-logind[1434]: Session 17 logged out. Waiting for processes to exit. Sep 13 01:37:51.209141 systemd[1]: session-17.scope: Deactivated successfully. Sep 13 01:37:51.210326 systemd-logind[1434]: Removed session 17. Sep 13 01:37:51.210984 systemd[1]: sshd@14-10.200.20.14:22-10.200.16.10:53794.service: Deactivated successfully. Sep 13 01:37:51.205000 audit[6809]: CRED_DISP pid=6809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:51.254027 kernel: audit: type=1106 audit(1757727471.204:1696): pid=6809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:51.254135 kernel: audit: type=1104 audit(1757727471.205:1697): pid=6809 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:51.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.14:22-10.200.16.10:53794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:51.457000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:51.457000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002cc16e0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:37:51.457000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:37:51.460000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:51.460000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001060510 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:37:51.460000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:37:51.946000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:51.946000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400b70b350 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:37:51.946000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:37:52.010000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:52.010000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4014585b30 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:37:52.010000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:37:52.018000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:52.018000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4014585e90 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:37:52.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:37:52.019000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:52.019000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40089d71a0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:37:52.019000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:37:52.027000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:52.027000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400f2c31a0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:37:52.027000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:37:52.028000 audit[2290]: AVC avc: denied { watch } for pid=2290 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:52.028000 audit[2290]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=4012291ee0 a2=fc6 a3=0 items=0 ppid=2121 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c213,c895 key=(null) Sep 13 01:37:52.028000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Sep 13 01:37:56.272324 systemd[1]: Started sshd@15-10.200.20.14:22-10.200.16.10:53806.service. Sep 13 01:37:56.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.14:22-10.200.16.10:53806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:56.278947 kernel: kauditd_printk_skb: 25 callbacks suppressed Sep 13 01:37:56.279049 kernel: audit: type=1130 audit(1757727476.271:1707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.14:22-10.200.16.10:53806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:56.312773 update_engine[1435]: I0913 01:37:56.312620 1435 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Sep 13 01:37:56.312773 update_engine[1435]: I0913 01:37:56.312669 1435 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Sep 13 01:37:56.314064 update_engine[1435]: I0913 01:37:56.314042 1435 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Sep 13 01:37:56.315364 update_engine[1435]: I0913 01:37:56.315258 1435 omaha_request_params.cc:62] Current group set to lts Sep 13 01:37:56.316443 update_engine[1435]: I0913 01:37:56.316308 1435 update_attempter.cc:499] Already updated boot flags. Skipping. Sep 13 01:37:56.316443 update_engine[1435]: I0913 01:37:56.316320 1435 update_attempter.cc:643] Scheduling an action processor start. Sep 13 01:37:56.316443 update_engine[1435]: I0913 01:37:56.316337 1435 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 13 01:37:56.317205 update_engine[1435]: I0913 01:37:56.317031 1435 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Sep 13 01:37:56.319990 locksmithd[1520]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Sep 13 01:37:56.347026 update_engine[1435]: I0913 01:37:56.346877 1435 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 13 01:37:56.347026 update_engine[1435]: I0913 01:37:56.346911 1435 omaha_request_action.cc:271] Request: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: Sep 13 01:37:56.347026 update_engine[1435]: I0913 01:37:56.346920 1435 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:37:56.433080 update_engine[1435]: I0913 01:37:56.433043 1435 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:37:56.433368 update_engine[1435]: I0913 01:37:56.433346 1435 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:37:56.503958 update_engine[1435]: E0913 01:37:56.503919 1435 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:37:56.504148 update_engine[1435]: I0913 01:37:56.504030 1435 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Sep 13 01:37:56.721000 audit[6823]: USER_ACCT pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:56.722138 sshd[6823]: Accepted publickey for core from 10.200.16.10 port 53806 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:37:56.746685 kernel: audit: type=1101 audit(1757727476.721:1708): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:56.746000 audit[6823]: CRED_ACQ pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:56.773007 sshd[6823]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:37:56.783635 kernel: audit: type=1103 audit(1757727476.746:1709): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:56.783804 kernel: audit: type=1006 audit(1757727476.746:1710): pid=6823 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Sep 13 01:37:56.746000 audit[6823]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb1f6290 a2=3 a3=1 items=0 ppid=1 pid=6823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:56.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:56.812165 systemd-logind[1434]: New session 18 of user core. Sep 13 01:37:56.812731 systemd[1]: Started session-18.scope. Sep 13 01:37:56.819406 kernel: audit: type=1300 audit(1757727476.746:1710): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb1f6290 a2=3 a3=1 items=0 ppid=1 pid=6823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:37:56.819489 kernel: audit: type=1327 audit(1757727476.746:1710): proctitle=737368643A20636F7265205B707269765D Sep 13 01:37:56.819525 kernel: audit: type=1105 audit(1757727476.816:1711): pid=6823 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:56.816000 audit[6823]: USER_START pid=6823 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:56.818000 audit[6825]: CRED_ACQ pid=6825 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:56.864721 kernel: audit: type=1103 audit(1757727476.818:1712): pid=6825 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:57.147887 sshd[6823]: pam_unix(sshd:session): session closed for user core Sep 13 01:37:57.148000 audit[6823]: USER_END pid=6823 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:57.153322 systemd-logind[1434]: Session 18 logged out. Waiting for processes to exit. Sep 13 01:37:57.154613 systemd[1]: session-18.scope: Deactivated successfully. Sep 13 01:37:57.155740 systemd-logind[1434]: Removed session 18. Sep 13 01:37:57.156419 systemd[1]: sshd@15-10.200.20.14:22-10.200.16.10:53806.service: Deactivated successfully. Sep 13 01:37:57.151000 audit[6823]: CRED_DISP pid=6823 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:57.195949 kernel: audit: type=1106 audit(1757727477.148:1713): pid=6823 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:57.196100 kernel: audit: type=1104 audit(1757727477.151:1714): pid=6823 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:37:57.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.14:22-10.200.16.10:53806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:37:57.321922 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.PqZZMi.mount: Deactivated successfully. Sep 13 01:37:57.358000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:57.358000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ef2020 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:37:57.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:37:57.358000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:57.358000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002f460c0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:37:57.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:37:57.358000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:57.358000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002f460e0 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:37:57.358000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:37:57.370000 audit[2296]: AVC avc: denied { watch } for pid=2296 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Sep 13 01:37:57.370000 audit[2296]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002f46580 a2=fc6 a3=0 items=0 ppid=2138 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c742,c952 key=(null) Sep 13 01:37:57.370000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Sep 13 01:37:57.778000 audit[5017]: AVC avc: denied { watch } for pid=5017 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_29.1389439504/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c433,c661 tclass=file permissive=0 Sep 13 01:37:57.778000 audit[5017]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001eb9400 a2=fc6 a3=0 items=0 ppid=4744 pid=5017 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c433,c661 key=(null) Sep 13 01:37:57.778000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:37:59.526267 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.xX73KE.mount: Deactivated successfully. Sep 13 01:38:00.808000 audit[5731]: AVC avc: denied { watch } for pid=5731 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_01_33_58.319504995/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c24,c765 tclass=file permissive=0 Sep 13 01:38:00.808000 audit[5731]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000b3f580 a2=fc6 a3=0 items=0 ppid=5671 pid=5731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c24,c765 key=(null) Sep 13 01:38:00.808000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Sep 13 01:38:02.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.14:22-10.200.16.10:55012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:02.217773 systemd[1]: Started sshd@16-10.200.20.14:22-10.200.16.10:55012.service. Sep 13 01:38:02.223337 kernel: kauditd_printk_skb: 19 callbacks suppressed Sep 13 01:38:02.223456 kernel: audit: type=1130 audit(1757727482.217:1722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.14:22-10.200.16.10:55012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:02.651000 audit[6873]: USER_ACCT pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:02.652867 sshd[6873]: Accepted publickey for core from 10.200.16.10 port 55012 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:02.675681 kernel: audit: type=1101 audit(1757727482.651:1723): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:02.676575 sshd[6873]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:02.675000 audit[6873]: CRED_ACQ pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:02.702599 systemd[1]: Started session-19.scope. Sep 13 01:38:02.703709 systemd-logind[1434]: New session 19 of user core. Sep 13 01:38:02.714044 kernel: audit: type=1103 audit(1757727482.675:1724): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:02.714148 kernel: audit: type=1006 audit(1757727482.675:1725): pid=6873 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Sep 13 01:38:02.675000 audit[6873]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff43a7440 a2=3 a3=1 items=0 ppid=1 pid=6873 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:02.737894 kernel: audit: type=1300 audit(1757727482.675:1725): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff43a7440 a2=3 a3=1 items=0 ppid=1 pid=6873 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:02.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:02.746287 kernel: audit: type=1327 audit(1757727482.675:1725): proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:02.746601 kernel: audit: type=1105 audit(1757727482.708:1726): pid=6873 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:02.708000 audit[6873]: USER_START pid=6873 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:02.710000 audit[6875]: CRED_ACQ pid=6875 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:02.793157 kernel: audit: type=1103 audit(1757727482.710:1727): pid=6875 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.063909 sshd[6873]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:03.064000 audit[6873]: USER_END pid=6873 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.067248 systemd-logind[1434]: Session 19 logged out. Waiting for processes to exit. Sep 13 01:38:03.068685 systemd[1]: sshd@16-10.200.20.14:22-10.200.16.10:55012.service: Deactivated successfully. Sep 13 01:38:03.069447 systemd[1]: session-19.scope: Deactivated successfully. Sep 13 01:38:03.070842 systemd-logind[1434]: Removed session 19. Sep 13 01:38:03.064000 audit[6873]: CRED_DISP pid=6873 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.112986 kernel: audit: type=1106 audit(1757727483.064:1728): pid=6873 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.113114 kernel: audit: type=1104 audit(1757727483.064:1729): pid=6873 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.14:22-10.200.16.10:55012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:03.132322 systemd[1]: Started sshd@17-10.200.20.14:22-10.200.16.10:55024.service. Sep 13 01:38:03.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.14:22-10.200.16.10:55024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:03.553000 audit[6887]: USER_ACCT pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.554631 sshd[6887]: Accepted publickey for core from 10.200.16.10 port 55024 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:03.555000 audit[6887]: CRED_ACQ pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.555000 audit[6887]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb8a34e0 a2=3 a3=1 items=0 ppid=1 pid=6887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:03.555000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:03.556152 sshd[6887]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:03.560821 systemd-logind[1434]: New session 20 of user core. Sep 13 01:38:03.561360 systemd[1]: Started session-20.scope. Sep 13 01:38:03.565000 audit[6887]: USER_START pid=6887 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:03.566000 audit[6889]: CRED_ACQ pid=6889 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:04.085631 sshd[6887]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:04.085000 audit[6887]: USER_END pid=6887 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:04.086000 audit[6887]: CRED_DISP pid=6887 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:04.088009 systemd[1]: sshd@17-10.200.20.14:22-10.200.16.10:55024.service: Deactivated successfully. Sep 13 01:38:04.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.14:22-10.200.16.10:55024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:04.088836 systemd[1]: session-20.scope: Deactivated successfully. Sep 13 01:38:04.089337 systemd-logind[1434]: Session 20 logged out. Waiting for processes to exit. Sep 13 01:38:04.090043 systemd-logind[1434]: Removed session 20. Sep 13 01:38:04.154243 systemd[1]: Started sshd@18-10.200.20.14:22-10.200.16.10:55026.service. Sep 13 01:38:04.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.14:22-10.200.16.10:55026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:04.578000 audit[6897]: USER_ACCT pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:04.579846 sshd[6897]: Accepted publickey for core from 10.200.16.10 port 55026 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:04.580000 audit[6897]: CRED_ACQ pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:04.580000 audit[6897]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2cfa4b0 a2=3 a3=1 items=0 ppid=1 pid=6897 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:04.580000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:04.583001 sshd[6897]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:04.587476 systemd[1]: Started session-21.scope. Sep 13 01:38:04.587943 systemd-logind[1434]: New session 21 of user core. Sep 13 01:38:04.590000 audit[6897]: USER_START pid=6897 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:04.592000 audit[6899]: CRED_ACQ pid=6899 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:05.412000 audit[6916]: NETFILTER_CFG table=filter:149 family=2 entries=20 op=nft_register_rule pid=6916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:05.412000 audit[6916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffff477a90 a2=0 a3=1 items=0 ppid=2558 pid=6916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:05.412000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:05.424000 audit[6916]: NETFILTER_CFG table=nat:150 family=2 entries=26 op=nft_register_rule pid=6916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:05.424000 audit[6916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffff477a90 a2=0 a3=1 items=0 ppid=2558 pid=6916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:05.424000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:05.442000 audit[6918]: NETFILTER_CFG table=filter:151 family=2 entries=32 op=nft_register_rule pid=6918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:05.442000 audit[6918]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=fffff0b07d60 a2=0 a3=1 items=0 ppid=2558 pid=6918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:05.442000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:05.446000 audit[6918]: NETFILTER_CFG table=nat:152 family=2 entries=26 op=nft_register_rule pid=6918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:05.446000 audit[6918]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=fffff0b07d60 a2=0 a3=1 items=0 ppid=2558 pid=6918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:05.446000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:05.514681 sshd[6897]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:05.515000 audit[6897]: USER_END pid=6897 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:05.515000 audit[6897]: CRED_DISP pid=6897 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:05.517197 systemd[1]: sshd@18-10.200.20.14:22-10.200.16.10:55026.service: Deactivated successfully. Sep 13 01:38:05.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.14:22-10.200.16.10:55026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:05.518024 systemd[1]: session-21.scope: Deactivated successfully. Sep 13 01:38:05.518541 systemd-logind[1434]: Session 21 logged out. Waiting for processes to exit. Sep 13 01:38:05.519296 systemd-logind[1434]: Removed session 21. Sep 13 01:38:05.582864 systemd[1]: Started sshd@19-10.200.20.14:22-10.200.16.10:55038.service. Sep 13 01:38:05.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.14:22-10.200.16.10:55038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:05.998000 audit[6921]: USER_ACCT pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:05.999245 sshd[6921]: Accepted publickey for core from 10.200.16.10 port 55038 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:05.999000 audit[6921]: CRED_ACQ pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:05.999000 audit[6921]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca83fd80 a2=3 a3=1 items=0 ppid=1 pid=6921 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:05.999000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:06.000937 sshd[6921]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:06.005026 systemd-logind[1434]: New session 22 of user core. Sep 13 01:38:06.005513 systemd[1]: Started session-22.scope. Sep 13 01:38:06.009000 audit[6921]: USER_START pid=6921 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:06.010000 audit[6923]: CRED_ACQ pid=6923 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:06.307790 update_engine[1435]: I0913 01:38:06.307691 1435 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:38:06.308070 update_engine[1435]: I0913 01:38:06.307897 1435 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:38:06.308097 update_engine[1435]: I0913 01:38:06.308075 1435 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:38:06.313250 update_engine[1435]: E0913 01:38:06.313223 1435 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:38:06.313330 update_engine[1435]: I0913 01:38:06.313310 1435 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Sep 13 01:38:06.496408 sshd[6921]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:06.496000 audit[6921]: USER_END pid=6921 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:06.496000 audit[6921]: CRED_DISP pid=6921 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:06.498927 systemd[1]: sshd@19-10.200.20.14:22-10.200.16.10:55038.service: Deactivated successfully. Sep 13 01:38:06.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.14:22-10.200.16.10:55038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:06.499715 systemd[1]: session-22.scope: Deactivated successfully. Sep 13 01:38:06.500228 systemd-logind[1434]: Session 22 logged out. Waiting for processes to exit. Sep 13 01:38:06.501094 systemd-logind[1434]: Removed session 22. Sep 13 01:38:06.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.14:22-10.200.16.10:55044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:06.564965 systemd[1]: Started sshd@20-10.200.20.14:22-10.200.16.10:55044.service. Sep 13 01:38:06.981000 audit[6930]: USER_ACCT pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:06.982313 sshd[6930]: Accepted publickey for core from 10.200.16.10 port 55044 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:06.982000 audit[6930]: CRED_ACQ pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:06.982000 audit[6930]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee8e3180 a2=3 a3=1 items=0 ppid=1 pid=6930 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:06.982000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:06.983970 sshd[6930]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:06.988404 systemd[1]: Started session-23.scope. Sep 13 01:38:06.989113 systemd-logind[1434]: New session 23 of user core. Sep 13 01:38:06.992000 audit[6930]: USER_START pid=6930 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:06.994000 audit[6932]: CRED_ACQ pid=6932 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:07.367222 sshd[6930]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:07.368000 audit[6930]: USER_END pid=6930 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:07.370311 systemd[1]: session-23.scope: Deactivated successfully. Sep 13 01:38:07.370877 systemd[1]: sshd@20-10.200.20.14:22-10.200.16.10:55044.service: Deactivated successfully. Sep 13 01:38:07.373804 kernel: kauditd_printk_skb: 54 callbacks suppressed Sep 13 01:38:07.373910 kernel: audit: type=1106 audit(1757727487.368:1768): pid=6930 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:07.374872 systemd-logind[1434]: Session 23 logged out. Waiting for processes to exit. Sep 13 01:38:07.375709 systemd-logind[1434]: Removed session 23. Sep 13 01:38:07.368000 audit[6930]: CRED_DISP pid=6930 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:07.419426 kernel: audit: type=1104 audit(1757727487.368:1769): pid=6930 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:07.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.14:22-10.200.16.10:55044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:07.439915 kernel: audit: type=1131 audit(1757727487.370:1770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.14:22-10.200.16.10:55044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:10.690000 audit[6961]: NETFILTER_CFG table=filter:153 family=2 entries=20 op=nft_register_rule pid=6961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:10.690000 audit[6961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd4641250 a2=0 a3=1 items=0 ppid=2558 pid=6961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:10.736331 kernel: audit: type=1325 audit(1757727490.690:1771): table=filter:153 family=2 entries=20 op=nft_register_rule pid=6961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:10.736470 kernel: audit: type=1300 audit(1757727490.690:1771): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd4641250 a2=0 a3=1 items=0 ppid=2558 pid=6961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:10.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:10.753037 kernel: audit: type=1327 audit(1757727490.690:1771): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:10.737000 audit[6961]: NETFILTER_CFG table=nat:154 family=2 entries=110 op=nft_register_chain pid=6961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:10.767991 kernel: audit: type=1325 audit(1757727490.737:1772): table=nat:154 family=2 entries=110 op=nft_register_chain pid=6961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Sep 13 01:38:10.737000 audit[6961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffd4641250 a2=0 a3=1 items=0 ppid=2558 pid=6961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:10.797723 kernel: audit: type=1300 audit(1757727490.737:1772): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffd4641250 a2=0 a3=1 items=0 ppid=2558 pid=6961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:10.797853 kernel: audit: type=1327 audit(1757727490.737:1772): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:10.737000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Sep 13 01:38:12.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.14:22-10.200.16.10:55690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:12.436259 systemd[1]: Started sshd@21-10.200.20.14:22-10.200.16.10:55690.service. Sep 13 01:38:12.457695 kernel: audit: type=1130 audit(1757727492.435:1773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.14:22-10.200.16.10:55690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:12.880000 audit[6963]: USER_ACCT pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:12.882279 sshd[6963]: Accepted publickey for core from 10.200.16.10 port 55690 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:12.904000 audit[6963]: CRED_ACQ pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:12.905529 sshd[6963]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:12.926571 kernel: audit: type=1101 audit(1757727492.880:1774): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:12.926707 kernel: audit: type=1103 audit(1757727492.904:1775): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:12.940424 kernel: audit: type=1006 audit(1757727492.904:1776): pid=6963 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Sep 13 01:38:12.904000 audit[6963]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0be2a30 a2=3 a3=1 items=0 ppid=1 pid=6963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:12.963641 kernel: audit: type=1300 audit(1757727492.904:1776): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0be2a30 a2=3 a3=1 items=0 ppid=1 pid=6963 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:12.904000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:12.971659 kernel: audit: type=1327 audit(1757727492.904:1776): proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:12.973443 systemd-logind[1434]: New session 24 of user core. Sep 13 01:38:12.973920 systemd[1]: Started session-24.scope. Sep 13 01:38:12.977000 audit[6963]: USER_START pid=6963 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:12.979000 audit[6984]: CRED_ACQ pid=6984 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:13.026178 kernel: audit: type=1105 audit(1757727492.977:1777): pid=6963 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:13.026271 kernel: audit: type=1103 audit(1757727492.979:1778): pid=6984 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:13.298879 sshd[6963]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:13.299000 audit[6963]: USER_END pid=6963 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:13.301615 systemd[1]: session-24.scope: Deactivated successfully. Sep 13 01:38:13.302214 systemd[1]: sshd@21-10.200.20.14:22-10.200.16.10:55690.service: Deactivated successfully. Sep 13 01:38:13.299000 audit[6963]: CRED_DISP pid=6963 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:13.347777 kernel: audit: type=1106 audit(1757727493.299:1779): pid=6963 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:13.347875 kernel: audit: type=1104 audit(1757727493.299:1780): pid=6963 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:13.347732 systemd-logind[1434]: Session 24 logged out. Waiting for processes to exit. Sep 13 01:38:13.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.14:22-10.200.16.10:55690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:13.349517 systemd-logind[1434]: Removed session 24. Sep 13 01:38:16.310100 update_engine[1435]: I0913 01:38:16.309693 1435 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:38:16.310100 update_engine[1435]: I0913 01:38:16.309897 1435 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:38:16.310100 update_engine[1435]: I0913 01:38:16.310067 1435 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:38:16.412419 update_engine[1435]: E0913 01:38:16.412281 1435 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:38:16.412419 update_engine[1435]: I0913 01:38:16.412384 1435 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Sep 13 01:38:18.370894 systemd[1]: Started sshd@22-10.200.20.14:22-10.200.16.10:55702.service. Sep 13 01:38:18.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.14:22-10.200.16.10:55702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:18.375934 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:38:18.376053 kernel: audit: type=1130 audit(1757727498.370:1782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.14:22-10.200.16.10:55702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:18.809985 sshd[6994]: Accepted publickey for core from 10.200.16.10 port 55702 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:18.809000 audit[6994]: USER_ACCT pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:18.832000 audit[6994]: CRED_ACQ pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:18.834051 sshd[6994]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:18.856383 kernel: audit: type=1101 audit(1757727498.809:1783): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:18.856543 kernel: audit: type=1103 audit(1757727498.832:1784): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:18.870021 kernel: audit: type=1006 audit(1757727498.832:1785): pid=6994 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Sep 13 01:38:18.870154 kernel: audit: type=1300 audit(1757727498.832:1785): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd69b220 a2=3 a3=1 items=0 ppid=1 pid=6994 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:18.832000 audit[6994]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd69b220 a2=3 a3=1 items=0 ppid=1 pid=6994 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:18.832000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:18.902820 kernel: audit: type=1327 audit(1757727498.832:1785): proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:18.905773 systemd-logind[1434]: New session 25 of user core. Sep 13 01:38:18.906391 systemd[1]: Started session-25.scope. Sep 13 01:38:18.910000 audit[6994]: USER_START pid=6994 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:18.910000 audit[7010]: CRED_ACQ pid=7010 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:18.966575 kernel: audit: type=1105 audit(1757727498.910:1786): pid=6994 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:18.966718 kernel: audit: type=1103 audit(1757727498.910:1787): pid=7010 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:19.216917 sshd[6994]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:19.217000 audit[6994]: USER_END pid=6994 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:19.220074 systemd[1]: session-25.scope: Deactivated successfully. Sep 13 01:38:19.220950 systemd[1]: sshd@22-10.200.20.14:22-10.200.16.10:55702.service: Deactivated successfully. Sep 13 01:38:19.217000 audit[6994]: CRED_DISP pid=6994 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:19.265683 kernel: audit: type=1106 audit(1757727499.217:1788): pid=6994 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:19.265800 kernel: audit: type=1104 audit(1757727499.217:1789): pid=6994 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:19.265796 systemd-logind[1434]: Session 25 logged out. Waiting for processes to exit. Sep 13 01:38:19.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.14:22-10.200.16.10:55702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:19.267218 systemd-logind[1434]: Removed session 25. Sep 13 01:38:24.305118 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:38:24.305238 kernel: audit: type=1130 audit(1757727504.291:1791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.14:22-10.200.16.10:32908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:24.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.14:22-10.200.16.10:32908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:24.291779 systemd[1]: Started sshd@23-10.200.20.14:22-10.200.16.10:32908.service. Sep 13 01:38:24.716330 sshd[7040]: Accepted publickey for core from 10.200.16.10 port 32908 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:24.715000 audit[7040]: USER_ACCT pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:24.723513 sshd[7040]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:24.717000 audit[7040]: CRED_ACQ pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:24.770576 kernel: audit: type=1101 audit(1757727504.715:1792): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:24.770690 kernel: audit: type=1103 audit(1757727504.717:1793): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:24.777132 systemd[1]: Started session-26.scope. Sep 13 01:38:24.778272 systemd-logind[1434]: New session 26 of user core. Sep 13 01:38:24.797349 kernel: audit: type=1006 audit(1757727504.717:1794): pid=7040 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Sep 13 01:38:24.717000 audit[7040]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3d6ab70 a2=3 a3=1 items=0 ppid=1 pid=7040 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:24.825284 kernel: audit: type=1300 audit(1757727504.717:1794): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3d6ab70 a2=3 a3=1 items=0 ppid=1 pid=7040 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:24.717000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:24.834432 kernel: audit: type=1327 audit(1757727504.717:1794): proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:24.799000 audit[7040]: USER_START pid=7040 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:24.861377 kernel: audit: type=1105 audit(1757727504.799:1795): pid=7040 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:24.825000 audit[7042]: CRED_ACQ pid=7042 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:24.884105 kernel: audit: type=1103 audit(1757727504.825:1796): pid=7042 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:25.148205 sshd[7040]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:25.148000 audit[7040]: USER_END pid=7040 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:25.148000 audit[7040]: CRED_DISP pid=7040 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:25.176046 systemd[1]: sshd@23-10.200.20.14:22-10.200.16.10:32908.service: Deactivated successfully. Sep 13 01:38:25.176924 systemd[1]: session-26.scope: Deactivated successfully. Sep 13 01:38:25.178729 systemd-logind[1434]: Session 26 logged out. Waiting for processes to exit. Sep 13 01:38:25.179693 systemd-logind[1434]: Removed session 26. Sep 13 01:38:25.197675 kernel: audit: type=1106 audit(1757727505.148:1797): pid=7040 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:25.197822 kernel: audit: type=1104 audit(1757727505.148:1798): pid=7040 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:25.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.14:22-10.200.16.10:32908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:26.308135 update_engine[1435]: I0913 01:38:26.308089 1435 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:38:26.308517 update_engine[1435]: I0913 01:38:26.308293 1435 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:38:26.308517 update_engine[1435]: I0913 01:38:26.308509 1435 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:38:26.343870 update_engine[1435]: E0913 01:38:26.343832 1435 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:38:26.344026 update_engine[1435]: I0913 01:38:26.343931 1435 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 13 01:38:26.344026 update_engine[1435]: I0913 01:38:26.343937 1435 omaha_request_action.cc:621] Omaha request response: Sep 13 01:38:26.344026 update_engine[1435]: E0913 01:38:26.344019 1435 omaha_request_action.cc:640] Omaha request network transfer failed. Sep 13 01:38:26.344099 update_engine[1435]: I0913 01:38:26.344031 1435 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Sep 13 01:38:26.344099 update_engine[1435]: I0913 01:38:26.344035 1435 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 01:38:26.344099 update_engine[1435]: I0913 01:38:26.344038 1435 update_attempter.cc:306] Processing Done. Sep 13 01:38:26.344099 update_engine[1435]: E0913 01:38:26.344058 1435 update_attempter.cc:619] Update failed. Sep 13 01:38:26.344099 update_engine[1435]: I0913 01:38:26.344062 1435 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Sep 13 01:38:26.344099 update_engine[1435]: I0913 01:38:26.344064 1435 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Sep 13 01:38:26.344099 update_engine[1435]: I0913 01:38:26.344069 1435 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Sep 13 01:38:26.344260 update_engine[1435]: I0913 01:38:26.344130 1435 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Sep 13 01:38:26.344260 update_engine[1435]: I0913 01:38:26.344148 1435 omaha_request_action.cc:270] Posting an Omaha request to disabled Sep 13 01:38:26.344260 update_engine[1435]: I0913 01:38:26.344151 1435 omaha_request_action.cc:271] Request: Sep 13 01:38:26.344260 update_engine[1435]: Sep 13 01:38:26.344260 update_engine[1435]: Sep 13 01:38:26.344260 update_engine[1435]: Sep 13 01:38:26.344260 update_engine[1435]: Sep 13 01:38:26.344260 update_engine[1435]: Sep 13 01:38:26.344260 update_engine[1435]: Sep 13 01:38:26.344260 update_engine[1435]: I0913 01:38:26.344156 1435 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Sep 13 01:38:26.344453 update_engine[1435]: I0913 01:38:26.344271 1435 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Sep 13 01:38:26.344453 update_engine[1435]: I0913 01:38:26.344431 1435 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Sep 13 01:38:26.344775 locksmithd[1520]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Sep 13 01:38:26.446138 update_engine[1435]: E0913 01:38:26.446102 1435 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Sep 13 01:38:26.446332 update_engine[1435]: I0913 01:38:26.446201 1435 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Sep 13 01:38:26.446332 update_engine[1435]: I0913 01:38:26.446206 1435 omaha_request_action.cc:621] Omaha request response: Sep 13 01:38:26.446332 update_engine[1435]: I0913 01:38:26.446211 1435 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 01:38:26.446332 update_engine[1435]: I0913 01:38:26.446214 1435 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Sep 13 01:38:26.446332 update_engine[1435]: I0913 01:38:26.446218 1435 update_attempter.cc:306] Processing Done. Sep 13 01:38:26.446332 update_engine[1435]: I0913 01:38:26.446223 1435 update_attempter.cc:310] Error event sent. Sep 13 01:38:26.446332 update_engine[1435]: I0913 01:38:26.446230 1435 update_check_scheduler.cc:74] Next update check in 46m48s Sep 13 01:38:26.446613 locksmithd[1520]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Sep 13 01:38:27.318185 systemd[1]: run-containerd-runc-k8s.io-54b1c138278fc6370c95a2e09337869d09042a5c594cbb89d50babe238769c14-runc.8q716h.mount: Deactivated successfully. Sep 13 01:38:29.527841 systemd[1]: run-containerd-runc-k8s.io-a82f116265aa7291303868a2c5b463764d5d9bbeae1e2fc856a9c53b382d328e-runc.0QNsnA.mount: Deactivated successfully. Sep 13 01:38:30.216329 systemd[1]: Started sshd@24-10.200.20.14:22-10.200.16.10:42920.service. Sep 13 01:38:30.242680 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:38:30.242815 kernel: audit: type=1130 audit(1757727510.215:1800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.14:22-10.200.16.10:42920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:30.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.14:22-10.200.16.10:42920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:30.633000 audit[7098]: USER_ACCT pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:30.634306 sshd[7098]: Accepted publickey for core from 10.200.16.10 port 42920 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:30.636134 sshd[7098]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:30.635000 audit[7098]: CRED_ACQ pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:30.681523 kernel: audit: type=1101 audit(1757727510.633:1801): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:30.681635 kernel: audit: type=1103 audit(1757727510.635:1802): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:30.698045 kernel: audit: type=1006 audit(1757727510.635:1803): pid=7098 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Sep 13 01:38:30.635000 audit[7098]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea2ff950 a2=3 a3=1 items=0 ppid=1 pid=7098 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:30.726082 kernel: audit: type=1300 audit(1757727510.635:1803): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea2ff950 a2=3 a3=1 items=0 ppid=1 pid=7098 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:30.725038 systemd[1]: Started session-27.scope. Sep 13 01:38:30.725722 systemd-logind[1434]: New session 27 of user core. Sep 13 01:38:30.635000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:30.735356 kernel: audit: type=1327 audit(1757727510.635:1803): proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:30.738000 audit[7098]: USER_START pid=7098 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:30.767000 audit[7100]: CRED_ACQ pid=7100 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:30.793839 kernel: audit: type=1105 audit(1757727510.738:1804): pid=7098 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:30.793954 kernel: audit: type=1103 audit(1757727510.767:1805): pid=7100 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:31.076339 sshd[7098]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:31.076000 audit[7098]: USER_END pid=7098 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:31.104755 systemd[1]: sshd@24-10.200.20.14:22-10.200.16.10:42920.service: Deactivated successfully. Sep 13 01:38:31.077000 audit[7098]: CRED_DISP pid=7098 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:31.126428 kernel: audit: type=1106 audit(1757727511.076:1806): pid=7098 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:31.126532 kernel: audit: type=1104 audit(1757727511.077:1807): pid=7098 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:31.105532 systemd[1]: session-27.scope: Deactivated successfully. Sep 13 01:38:31.126789 systemd-logind[1434]: Session 27 logged out. Waiting for processes to exit. Sep 13 01:38:31.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.14:22-10.200.16.10:42920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:31.128182 systemd-logind[1434]: Removed session 27. Sep 13 01:38:36.149048 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:38:36.149167 kernel: audit: type=1130 audit(1757727516.142:1809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.14:22-10.200.16.10:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:36.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.14:22-10.200.16.10:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:36.143111 systemd[1]: Started sshd@25-10.200.20.14:22-10.200.16.10:42936.service. Sep 13 01:38:36.586000 audit[7111]: USER_ACCT pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.588587 sshd[7111]: Accepted publickey for core from 10.200.16.10 port 42936 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:36.615773 kernel: audit: type=1101 audit(1757727516.586:1810): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.615861 kernel: audit: type=1103 audit(1757727516.614:1811): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.614000 audit[7111]: CRED_ACQ pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.615104 sshd[7111]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:36.620095 systemd[1]: Started session-28.scope. Sep 13 01:38:36.621227 systemd-logind[1434]: New session 28 of user core. Sep 13 01:38:36.655946 kernel: audit: type=1006 audit(1757727516.614:1812): pid=7111 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Sep 13 01:38:36.614000 audit[7111]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8825450 a2=3 a3=1 items=0 ppid=1 pid=7111 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:36.682219 kernel: audit: type=1300 audit(1757727516.614:1812): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8825450 a2=3 a3=1 items=0 ppid=1 pid=7111 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:36.614000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:36.690713 kernel: audit: type=1327 audit(1757727516.614:1812): proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:36.690853 kernel: audit: type=1105 audit(1757727516.640:1813): pid=7111 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.640000 audit[7111]: USER_START pid=7111 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.640000 audit[7113]: CRED_ACQ pid=7113 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.738103 kernel: audit: type=1103 audit(1757727516.640:1814): pid=7113 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.968357 sshd[7111]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:36.968000 audit[7111]: USER_END pid=7111 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.971590 systemd-logind[1434]: Session 28 logged out. Waiting for processes to exit. Sep 13 01:38:36.972738 systemd[1]: session-28.scope: Deactivated successfully. Sep 13 01:38:36.973905 systemd-logind[1434]: Removed session 28. Sep 13 01:38:36.974470 systemd[1]: sshd@25-10.200.20.14:22-10.200.16.10:42936.service: Deactivated successfully. Sep 13 01:38:36.968000 audit[7111]: CRED_DISP pid=7111 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:37.014889 kernel: audit: type=1106 audit(1757727516.968:1815): pid=7111 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:37.015116 kernel: audit: type=1104 audit(1757727516.968:1816): pid=7111 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:36.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.14:22-10.200.16.10:42936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:38.183565 systemd[1]: run-containerd-runc-k8s.io-4f1938e0f8ef0f1df52b4d3d8a47ad73e4533e04a45b5ac96035f68c47264920-runc.fv4dRQ.mount: Deactivated successfully. Sep 13 01:38:42.037840 systemd[1]: Started sshd@26-10.200.20.14:22-10.200.16.10:47280.service. Sep 13 01:38:42.045691 kernel: kauditd_printk_skb: 1 callbacks suppressed Sep 13 01:38:42.045805 kernel: audit: type=1130 audit(1757727522.039:1818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.14:22-10.200.16.10:47280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:42.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.14:22-10.200.16.10:47280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 13 01:38:42.479000 audit[7145]: USER_ACCT pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.480235 sshd[7145]: Accepted publickey for core from 10.200.16.10 port 47280 ssh2: RSA SHA256:2vdFvqmv97G7XTFyIQCFZZcqRFoIpW6ty3nYdUf/oyk Sep 13 01:38:42.481960 sshd[7145]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Sep 13 01:38:42.480000 audit[7145]: CRED_ACQ pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.524591 kernel: audit: type=1101 audit(1757727522.479:1819): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.524725 kernel: audit: type=1103 audit(1757727522.480:1820): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.539008 kernel: audit: type=1006 audit(1757727522.481:1821): pid=7145 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Sep 13 01:38:42.481000 audit[7145]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8052c60 a2=3 a3=1 items=0 ppid=1 pid=7145 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:42.564073 kernel: audit: type=1300 audit(1757727522.481:1821): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8052c60 a2=3 a3=1 items=0 ppid=1 pid=7145 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 13 01:38:42.542719 systemd-logind[1434]: New session 29 of user core. Sep 13 01:38:42.563668 systemd[1]: Started session-29.scope. Sep 13 01:38:42.481000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:42.573680 kernel: audit: type=1327 audit(1757727522.481:1821): proctitle=737368643A20636F7265205B707269765D Sep 13 01:38:42.573000 audit[7145]: USER_START pid=7145 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.598000 audit[7147]: CRED_ACQ pid=7147 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.620039 kernel: audit: type=1105 audit(1757727522.573:1822): pid=7145 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.620170 kernel: audit: type=1103 audit(1757727522.598:1823): pid=7147 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.908214 sshd[7145]: pam_unix(sshd:session): session closed for user core Sep 13 01:38:42.909000 audit[7145]: USER_END pid=7145 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.913059 systemd[1]: session-29.scope: Deactivated successfully. Sep 13 01:38:42.913824 systemd[1]: sshd@26-10.200.20.14:22-10.200.16.10:47280.service: Deactivated successfully. Sep 13 01:38:42.935935 systemd-logind[1434]: Session 29 logged out. Waiting for processes to exit. Sep 13 01:38:42.911000 audit[7145]: CRED_DISP pid=7145 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.957645 kernel: audit: type=1106 audit(1757727522.909:1824): pid=7145 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.957760 kernel: audit: type=1104 audit(1757727522.911:1825): pid=7145 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Sep 13 01:38:42.936981 systemd-logind[1434]: Removed session 29. Sep 13 01:38:42.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.14:22-10.200.16.10:47280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'